Blog Posts

Compliance Considerations When Moving from Fully Insured to Self-Funded

Employers may choose self-funded group health plan coverage to obtain more flexibility with plan design and hopefully save some money. However, in doing so, some additional responsibilities and considerations generally do not apply for fully insured plans. For a self-funded plan, the employer is responsible for funding plan claims with the help of a stop-loss carrier, and the employer will need a third-party administrator (TPA) to administer claims and payments. If the employer has chosen to work with a carrier to adopt a level-funded group health plan, the carrier normally becomes the TPA.  

In addition, the employer will be more directly responsible for compliance. Most employers will rely heavily on their TPA or carrier to assist with compliance, but it remains the employer’s responsibility as a plan sponsor to ensure that compliance is managed appropriately.

Below is an overview of many of the considerations and compliance requirements for self-funded plans. Keep in mind that level-funded (or partially self-funded) group health plans are generally considered to be self-funded group health plans. The topics discussed include the following:

  • Funding & Administration
  • ERISA
  • COBRA
  • HIPAA Privacy & Security
  • PCORI Fees
  • Surprise Billing
  • §105(h) Nondiscrimination Rules
  • ACA Employer Reporting (Forms 1094 & 1095)
  • Essential Health Benefits
  • Mental Health Parity
  • Transparency Requirements

Funding & Administration

For funding and administration, the employer will need to:

  • Obtain actuarial determinations to discern appropriate plan costs for budgeting, setting employee contributions, and setting COBRA premiums.
  • Select and contract with a stop-loss carrier.
  • Select and contract with a TPA or carrier to coordinate processing and paying claims. Plan sponsors can either retain claims determination authority or outsource to a TPA or carrier. Claim determination authority should be clearly described in plan documents.
  • Manage the plan in a manner that serves the best interests of the participants and the beneficiaries as required by ERISA.

ERISA

Most employer-sponsored plans are subject to ERISA. ERISA requires plans to name fiduciaries (typically the plan administrator(s)) who are responsible for carrying out certain fiduciary duties per ERISA. Such duties include, among other things, setting and following plan terms such as benefit inclusions/exclusions, eligibility for coverage, and claims procedures. Fiduciaries are also responsible for the proper handling of funds (plan assets) and for adopting formal plan documents, providing participant disclosures (e.g., summary plan descriptions (SPDs), claims notices, and various group health plan disclosures), and reporting certain information to the government (e.g., Form 5500s).

Especially for employers offering a self-funded group health plan, the employer should consider its ERISA fiduciary duties as plan sponsor and administrator. This includes seeing that the plan is designed properly, claims are administered properly, necessary notices are properly distributed promptly, required reporting occurs, and the plan generally complies with:

•    ERISA 
•    COBRA 
•    HIPAA
•    ACA, etc. 

ERISA Preemption

While a self-funded plan sponsor may have heightened fiduciary responsibilities, the plan will also qualify for ERISA preemption, allowing the plan to avoid having to comply with most state-level requirements such as insurance coverage mandates, eligibility rules, contribution requirements, continuation coverage, etc.

Plan Documents

The TPA or carrier may provide a “benefits booklet” or coverage certificate that describes the benefits provided by the plan, but the plan sponsor is usually responsible for the plan document and a summary plan description (SPD) for plans subject to ERISA.

Form 5500s

An unfunded, self-funded plan with 100 or more participants is typically required to file only the main portion of Form 5500 without any schedules. Most plans are unfunded, meaning plan costs are paid out of the employer’s general assets.

COBRA

Self-funded plans offered by employers with 20 or more employees are subject to federal COBRA continuation. As mentioned above, due to ERISA preemption, self-funded plans are not subject to state continuation.

Self-funded plans may determine the COBRA premium based on: (i) reasonable actuarial estimates of costs for the current plan year; or (ii) based on the cost of providing coverage in the preceding year if coverage under the plan has not significantly changed.  

If the self-funded plan is a level-funded plan and the employer has less than 20 employees, it is important to remember that terminated employees do not qualify for any state continuation benefit program.

HIPAA Privacy and Security

Employers will likely face an increase in HIPAA privacy and security compliance obligations for a self-funded plan because the employer will have more access to personal health information (PHI). Therefore, it is important for the employer to have written privacy and security policies and procedures in place to protect the privacy of plan PHI.

PCORI Fees

The employer is responsible for reporting and paying PCORI fees for self-funded plans. PCORI fees are reported and paid via Form 720, Line 133,
by July 31st of the year following the end of the plan year.

The PCORI fees will be based on the number of lives covered during the plan year.

§105(h) Nondiscrimination Rules

In addition to §125 nondiscrimination rules, which may apply if the employer allows employees to contribute toward benefits on a pre-tax basis through a cafeteria plan, self-funded group health plans are subject to §105(h) nondiscrimination rules. Under §105(h) nondiscrimination rules, the plan may not structure eligibility, benefit coverage, or contributions in a manner that discriminates too much in favor of highly compensated individuals.

Employer Reporting (Forms 1094 & 1095)

All employers who offer self-funded group health plans, regardless of size, must report coverage information for all individuals (including employees, non-employees and their dependents) who are covered under the self-funded plan.

  • Applicable large employers generally report coverage in Part III of Form 1095-C.
  • Small employers (fewer than 50 FTEs) report coverage on Form
    1095-B.

Employers offering self-funded group health plan coverage with employees who reside in California, Massachusetts, New Jersey, Rhode Island or DC must also submit coverage reporting to the applicable state agency.

Both federal and state coverage reporting is due early in the new year following the previous calendar year.

Essential Health Benefits (EHBs)

Under the ACA, plans are required to comply with certain requirements regarding coverage of 10 categories of essential health benefits.
They are:

  • Ambulatory patient services
  • Emergency services
  • Hospitalization
  • Maternity and newborn care
  • Mental health and substance use disorder services, including behavioral health treatment
  • Prescription drugs
  • Rehabilitative and habilitative services and devices
  • Laboratory services
  • Preventive and wellness services and chronic disease management
  • Pediatric services, including oral and vision care).

Self-funded plans are not required to cover all essential health benefits, but if they do provide coverage for any of the 10 EHBs, there can be no annual or lifetime dollar limits on such coverage. Essential health benefits vary from state to state, and a self-funded plan is permitted to pick any state’s benchmark plan to determine which coverage is prohibited from imposing a lifetime or dollar limit. Benchmark plan details for each state can be found on CMS’ website here:

Mental Health Parity

Group health plans are generally not required to offer mental health or substance use disorder benefits, except for small, fully insured plans that are required to offer essential health benefits. However, group health plans that choose to offer mental health or substance use disorder benefits must satisfy the following requirements for such benefits:

  • No lifetime or annual dollar limits, if any, lower than the limits placed on medical/surgical benefits;
  • No financial requirement (i.e., deductibles or co-payments) or quantitative treatment limitation (i.e., annual visit limitation) that is more restrictive than those placed on medical/surgical benefits; and
  • No non-quantitative treatment limitation (i.e., medical management standard limiting/excluding benefits) that is more restrictive than those placed on medical/surgical benefits.

For self-funded plans, the employer is primarily responsible for compliance with the mental health parity rules, although the TPA or carrier often plays a role in plan design and claims processing. However, the employer should ensure that the TPA or carrier processes claims and provides required disclosures for claim denials and criteria for medical necessity determinations.

The plan is also required to prepare a comparative analysis documenting compliance for any non-quantitative treatment limitations (NQTLs). The analysis does not need to be submitted annually but instead is completed and kept current in the employer’s files and provided if requested (e.g., by a federal or state agency or by plan participants). Employers probably cannot complete this analysis on their own, but not all TPAs are willing to help prepare a comparative analysis or audit more generally for compliance with the mental health parity rules, in which case it may be necessary to obtain the help of an outside benefits consulting firm or law firm.

Transparency Requirements

The Consolidated Appropriations Act (CAA) and the Transparency in Coverage Final Rule (TiC Final Rule) impose new requirements on group health plans. For a self-funded plan, the responsibility of compliance lies with the employer as the plan sponsor. However, many requirements force employers to rely on their TPA and others to implement appropriate measures to comply with these new requirements.

The following is a checklist of the various transparency requirements to assist employers offering self-funded group health plans in considering which items the TPA will handle and which things the employer is responsible for handling on their own (or for finding another solution). It would also be appropriate to confirm what costs if any, may apply to the TPA’s assistance with the requirements described below.
 

  • No Gag Clause in Provider Contracts – All gag clauses must be removed from relevant provider contracts. In addition, effective starting in 2022, carriers and health plans must submit an annual attestation of compliance with the prohibition on gag clauses in provider reimbursement contracts (there is no further guidance or a model attestation form yet available from the agencies for this requirement).
     
  • ID Cards / Provider Directory Accuracy – ID cards must include the additional required information, including deductible and copay details. In addition, accurate provider directory information must be available online and by telephone, and the information is required to be verified and updated at least every 90 days. If an individual is provided inaccurate information by the provider directory stating that the provider or facility was a participating provider or facility, the plan may apply cost-sharing only equal to or less than it would for a participating provider or facility and must count such cost-sharing amounts toward any in-network deductible or maximum OOP.
     
  • Continuity of Care – When a provider or facility is no longer in-network or covered under the plan, participants must be permitted to continue care for up to 90 days under the same terms and conditions that were in place prior to the change in network or coverage.
     
  • Health Plan Data (Machine-Readable Files) – Machine-readable files with reimbursement rates for (i) in-network provider rates for covered items and services; and (ii) out-of-network allowed amounts for covered items and services must be posted on the plan’s public-facing website or on a TPAs public-facing website if there is a written statement confirming that the TPA will do so. The machine-readable files must be updated monthly and clearly indicate the date the file was last updated.
     
  • Prescription (Rx) Drug Cost Reporting – The plan must submit a plan list file and 8 data files, along with narratives, containing certain information about the plan’s prescription drug and health care spending annually to CMS (the RxDC Report). The reporting was originally required by December 27, 2022, and then will be required annually every June thereafter. The Departments have extended a submission grace period and will not consider a plan or issuer to be out of compliance if the submission of 2020 and 2021 data is made on or before January 31, 2023.  It is possible the information required for the RxDC Report will need to be gathered from several different sources (e.g., TPA, PBM, other vendors, employer), and that there may be multiple reporting entities involved in compiling and submitting data for the plan.
     
  • Advanced Cost Estimate “Price Comparison Tools” – A price comparison tool, including estimates of cost-sharing for covered healthcare items and services from each provider, must be made available via a web-based tool and by phone or paper upon request. This requirement is effective for 500 items and services on January 1, 2023, and for all items and services on January 1, 2024.

Surprise Billing

Under the No Surprises Act, balance billing is prohibited for the following claims:

  • Out-of-network emergency services;
  • Out-of-network air ambulance services (not ground ambulance); and
  • Non-emergency services by out-of-network providers for services performed at in-network facilities.

For such claims, the plan may only impose in-network cost-sharing, and claims incurred must count toward the plan’s in-network deductible and OOP max. In addition, the provider cannot balance bill participants for any additional amounts, although there is an exception if the provider obtains the participant’s consent to charge more for non-emergency out-of-network providers at an in-network facility.

For self-funded plans, this responsibility will primarily be handled by the TPA or carrier on behalf of the plan, but the employer should check with the TPA or carrier to ensure the proper handling of claims, how pricing is set for such claims, their willingness/ability to handle negotiations and enter into the IDR process when appropriate, and any costs associated with the TPA’s or carrier’s efforts.

Finally, plans must post a model notice on their public website and include the notice on each explanation of benefits (EOBs). For a self-funded plan, this will typically be handled by the TPA or carrier, but the employer should verify that this is being handled on their behalf.