The Compliance Shift: What Changes When Your Company Moves from a Carrier Plan to Self-Funded Benefits

One of the most common reasons employers hesitate to explore self-funded or level-funded health benefits is the word "compliance." The assumption is that moving away from a carrier plan adds a new layer of regulatory complexity that your team isn't equipped to manage. In practice, it's almost the opposite. The compliance responsibilities for a self-funded plan are real, but most of them are handled by your third-party administrator — and several of them already exist for fully-insured sponsors who just don't realize it.

What actually changes when you move from a fully-insured arrangement to a self-funded or level-funded plan is not the amount of compliance work, but who performs it. Under a fully-insured plan, the carrier manages claims administration, SPD distribution, most HIPAA obligations, and ACA plan-level reporting. That work doesn't disappear when you self-fund — it shifts to your TPA, who is now acting as your plan administrator under ERISA. You're still responsible for ensuring it gets done; you're just working with a different service provider to do it.

Understanding exactly what that shift looks like — which compliance duties your TPA covers, which your broker coordinates, and which genuinely require your team's attention — lets you evaluate self-funded options with accurate information instead of vague regulatory worry. This is a detailed breakdown of what actually changes, what stays the same, and what questions to ask before you sign a TPA agreement.

The Core Shift: From Carrier to TPA as Your Plan Administrator

What a Third-Party Administrator Does Under ERISA

When you self-fund or level-fund your benefits, you become the plan sponsor under ERISA — the Employee Retirement Income Security Act, which governs employer-sponsored benefit plans. ERISA requires every covered plan to have a named plan administrator, and most self-funded employers designate themselves (the company) as the administrator while contracting with a TPA to perform the actual administrative functions.

Your TPA processes claims, applies plan provisions to determine benefits, manages provider network contracts, handles member communications, coordinates with your stop-loss carrier, and produces the monthly and annual reporting your plan requires. They act as your operational arm — but the fiduciary duty to administer the plan in participants' best interests sits with you as the plan sponsor. That duty is real but not complicated for most employers: it means choosing a qualified TPA, documenting your plan provisions, and ensuring the TPA is following them.¹

The Compliance Responsibilities That Look New But Aren't

Some compliance obligations that appear to be self-funded-specific actually apply to all employer-sponsored plans, including fully-insured. COBRA administration is required for any employer with 20 or more employees, regardless of funding type. HIPAA privacy and security obligations apply to self-funded plans — but they also apply to fully-insured plan sponsors who handle protected health information, which is more common than most employers realize. ACA non-discrimination testing for cafeteria plans applies to both. The material difference is that under a fully-insured arrangement, the carrier absorbs most of the operational load for these requirements. Under self-funding, your TPA absorbs it instead.

What genuinely changes — the net new work — is narrower than the full compliance list suggests. You take on responsibility for ERISA plan document maintenance, Form 5500 preparation, and claims data governance. Those are real responsibilities, but they're handled by your TPA and your ERISA counsel, not by your HR staff directly. A competent TPA agreement will specify exactly which of these obligations the TPA performs versus which you retain as plan sponsor.

ERISA Plan Documents and SPD Requirements

The Plan Document and Summary Plan Description

Every ERISA-covered benefit plan must have a formal plan document that defines the plan's terms — who is eligible, what benefits are covered, how claims are processed, what the appeals procedure is, and how the plan can be amended or terminated. Under a fully-insured arrangement, the carrier's group policy contract typically serves as the functional plan document, and the carrier produces the Summary Plan Description (SPD) that employees receive. Under self-funding, your TPA drafts a standalone plan document specific to your plan design, and they either produce the SPD or coordinate with ERISA counsel to do so.²

The SPD must be distributed to employees within 90 days of enrollment. Material modifications to the plan must be communicated through a Summary of Material Modifications (SMM) within 210 days of the plan year in which the change takes effect. Your TPA handles both — but you should review the SPD before distribution to confirm it accurately reflects your plan design. Errors in the SPD can create ERISA claims from employees who relied on incorrect benefit descriptions.

Form 5500 Filing

Self-funded plans with 100 or more participants at the start of the plan year are required to file an annual Form 5500 with the Department of Labor. Plans with fewer than 100 participants typically qualify for simplified filing. The 5500 is essentially an annual report on the plan's financial condition and operations — it discloses the amount of claims paid, administrative expenses, stop-loss premiums, and whether the plan maintained adequate funding.³

Your TPA prepares the 5500 data and typically completes the filing using a third-party filing service. You sign it as the plan administrator of record. The due date is the last day of the seventh month following the plan year end — July 31 for a December 31 plan year — with an available extension to October 15. For most self-funded employers under 100 participants, the administrative burden is minimal. For plans above 100 participants, the TPA fee typically includes 5500 preparation as a standard service.

ACA Reporting for Self-Funded Plan Sponsors

1094-C and 1095-C: The Annual ACA Coverage Report

All applicable large employers (50+ FTE) must file Forms 1094-C and 1095-C with the IRS annually, reporting which employees were offered coverage, whether it met minimum value and affordability standards, and which months each employee was enrolled. This reporting obligation exists whether you're fully insured or self-funded.

The practical difference for self-funded plans: because you're not using a carrier's enrollment data feed, your TPA generates the 1095-C data from their enrollment and claims records. Fully-insured employers often receive 1095-C data from the carrier with employer information supplemented by the payroll system. The filing process is largely the same — typically handled through an ACA filing vendor — but the data source is your TPA rather than the carrier. Most TPAs either handle ACA filing directly or integrate with an ACA vendor.⁴

Self-Funded ACA Reporting: The Additional 1095-B Obligation

Self-funded plans have one ACA reporting obligation that fully-insured plans do not: the 1095-B form, which reports minimum essential coverage to all covered individuals — including dependents. Under a fully-insured arrangement, the carrier files 1095-B directly with the IRS and sends copies to covered individuals. Under self-funding, the employer (as plan sponsor) takes on this reporting responsibility. Your TPA or ACA vendor files 1095-B on your behalf based on enrollment records they maintain. This is a genuine additional obligation compared to fully-insured, but it's handled operationally by your TPA — it doesn't create ongoing work for your HR team beyond confirming that enrollment records are accurate.⁵

HIPAA and COBRA Under Self-Funded Plans

HIPAA Privacy and Security Rules: Who Manages What

Under HIPAA, a self-funded health plan is a "covered entity" — which means the plan itself (not the employer) has direct obligations around protecting members' protected health information (PHI). The practical question is how those obligations get performed. For claims-related PHI, your TPA is a "business associate" under HIPAA and must sign a Business Associate Agreement (BAA) with the plan, committing to handle claims data in compliance with HIPAA privacy and security rules.⁶

The obligations that fall to you as the employer: you must maintain a "firewall" between the plan and your employment-related functions, meaning employees who work on health benefits can access PHI for plan administration purposes, but that information cannot be used for employment decisions. You must also designate a HIPAA Privacy Officer and maintain a privacy policy — requirements that apply even to employers with relatively modest self-funded plans. Your TPA can provide template policies and a Privacy Officer designation checklist as part of implementation. This is administrative groundwork, not ongoing burden.

COBRA Administration: Consistent Across Funding Types

COBRA continuation coverage requirements apply to any employer with 20 or more employees, regardless of whether the plan is fully-insured, level-funded, or self-funded. You must provide a general COBRA notice to new enrollees within 90 days of coverage, a qualifying event notice to affected individuals within 14 days of notification by the plan administrator, and an election notice to qualified beneficiaries. Under a fully-insured plan, the carrier or a COBRA administrator handles the operational side. Under self-funding, your TPA handles COBRA administration — and most include it as a standard component of their service package.⁷

The COBRA premium calculation changes slightly under self-funding: the COBRA rate is set at 102% of the applicable premium, where "applicable premium" is the employer's actual cost of providing coverage — calculated from claims funding, stop-loss premiums, and administration fees. Your TPA calculates and notifies COBRA participants of their premium amount. For most employers, this is operationally identical to the fully-insured COBRA process from the employee's perspective.

What You Gain That Fully-Insured Sponsors Don't Have

Claims Data Ownership and Transparency

One of the most underappreciated advantages of self-funding is that you own your claims data. Under a fully-insured arrangement, the carrier holds your group's claims experience and may share a summary report annually — but they're not obligated to provide the underlying data, and many don't. Under self-funding, your TPA's claims system contains your complete claims history: every claim processed, categorized, and timestamped. You can pull utilization reports, identify high-cost conditions driving costs, and use the data to evaluate plan design changes — or to get better underwriting when renewing stop-loss coverage.

This data ownership also gives you a stronger negotiating position when your stop-loss contract renews each year. Instead of accepting a carrier's trend factors applied to your pool, you're presenting your actual, documented claims experience to underwriters. Groups with favorable claims histories consistently get better renewal pricing under self-funded arrangements than under fully-insured structures, precisely because the data is available and transparent.⁸

Plan Design Flexibility

Under a fully-insured plan, your plan design options are limited to whatever the carrier offers — which typically means a menu of deductible levels, copay structures, and network tiers within a standard product framework. State-mandated benefits apply, and the carrier's actuarial assumptions are embedded in the pricing for any design you choose. Under self-funding, you can customize almost any plan provision: the deductible, copay structure, out-of-pocket maximum, specialty drug tiers, and even specific coverage rules for high-cost procedures. And because self-funded plans are governed by ERISA federal law — not state health coverage regulations — many state mandate requirements don't apply, which gives you additional design flexibility depending on your state.⁹

This flexibility has real economic value. Employers who discover their workforce rarely uses certain mandated benefits can often reduce plan costs by designing a leaner plan that better matches actual utilization patterns. Employers in industries with specific healthcare utilization patterns — construction, hospitality, light manufacturing — often find that self-funded plan designs optimized for their workforce cost meaningfully less than carrier standard products priced for the general commercial market.

Frequently Asked Questions

Do we need an ERISA attorney to set up a self-funded plan?

You don't need an ERISA attorney for routine setup — most TPAs include plan document drafting, SPD preparation, and 5500 support as part of their standard implementation service. However, having an ERISA attorney review your plan document before finalization is strongly recommended for plans above 50 participants, since the plan document governs all benefit decisions and disputes. ERISA counsel also helps you understand your fiduciary duties as the plan administrator of record and can draft or review your Business Associate Agreement with the TPA. For ongoing compliance questions — claims denials, appeals procedures, amendments — having an ERISA attorney available as a resource is worth the relationship cost.

What questions should we ask a TPA before signing an agreement?

Ask for a complete list of services included in the administrative fee versus billed separately — some TPAs charge extra for 5500 preparation, COBRA administration, or ACA filing. Ask how they handle stop-loss coordination: do they have a preferred stop-loss carrier, and do they receive commissions from that carrier? Ask about data portability: if you leave the TPA, do you get your full claims history in a usable format? Ask about their claims turnaround time and error rate benchmarks. And ask explicitly which ERISA, HIPAA, and ACA obligations they perform on your behalf versus which remain your direct responsibility. A TPA that can't answer that last question clearly is a TPA worth being cautious about.

How does stop-loss coverage work, and is it included in a level-funded plan?

Stop-loss coverage reimburses the plan when individual claims exceed a set threshold — called the specific stop-loss attachment point — or when total claims for the year exceed an aggregate attachment point. Specific stop-loss protects against a single catastrophic claimant; aggregate stop-loss protects against a year where total claims across the group run far above projections. In a level-funded plan, stop-loss coverage is bundled into your monthly payment — it's priced as part of the fixed monthly rate, so you know exactly what your maximum annual exposure is. In a traditional self-funded arrangement, stop-loss is purchased separately from a stop-loss carrier. Either way, stop-loss coverage is what makes self-funded and level-funded plans financially viable for employers with 20-250 employees — without it, a single high-cost claim could create an unmanageable budget impact.

What happens to our compliance obligations if we move back to a fully-insured plan after self-funding?

If you transition back to a fully-insured arrangement, most compliance obligations shift back to the carrier. You'll still need to file final Form 5500 data for the last self-funded plan year and wind down your TPA agreement properly — ensuring all outstanding claims are processed or transferred. COBRA obligations continue for any qualified beneficiaries still on COBRA coverage from the self-funded period. Your ERISA plan document should be amended to reflect the transition and the new carrier's group policy. Your TPA or ERISA counsel can walk through the transition checklist. The transition itself is straightforward; the operational complexity is in making sure the runout period — the time after your self-funded plan year ends when claims for services already rendered are still being processed — is properly managed.

We're 65 employees — is that large enough to self-fund, or do we need to be bigger?

65 employees is well within the range where self-funding and level-funding are viable and frequently advantageous. The practical threshold for most TPAs and stop-loss underwriters is 25-50 employees — below that, there isn't enough claims data to underwrite effectively. At 65 employees, you can access level-funded products from most major carriers and TPAs, get stop-loss pricing from multiple markets, and likely see meaningful savings if your group has average or better claims experience. The key variable isn't just headcount — it's claims history. If you've had one or two years of group claims data under a fully-insured plan, bring that to any self-funded quote request. It gives underwriters something concrete to price against, and it's your strongest tool for getting competitive renewal pricing from day one.

References

1. U.S. Department of Labor. "Understanding Your Fiduciary Responsibilities Under a Group Health Plan." dol.gov/sites/dolgov/files/EBSA/about-ebsa/our-activities/resource-center/publications/understanding-your-fiduciary-responsibilities.pdf
2. U.S. Department of Labor. "Summary Plan Descriptions." dol.gov/agencies/ebsa/laws-and-regulations/laws/erisa
3. Internal Revenue Service. "Form 5500 Corner." irs.gov/retirement-plans/form-5500-corner
4. Internal Revenue Service. "Affordable Care Act Information Returns (AIR)." irs.gov/businesses/corporations/affordable-care-act-information-returns-air
5. Centers for Medicare and Medicaid Services. "Self-Insured Group Health Plans and ACA Reporting." cms.gov
6. U.S. Department of Health and Human Services. "HIPAA for Individuals." hhs.gov/hipaa
7. U.S. Department of Labor. "COBRA Continuation Coverage." dol.gov/agencies/ebsa/workers-and-families/family-and-medical-leave/cobra-continuation-health-coverage
8. SHRM. "Self-Funded Health Plans." shrm.org/topics-tools/tools/toolkits/self-funded-health-plans
9. Kaiser Family Foundation. "Self-Insured Health Plans: State Variation and Recent Trends by Firm Size." kff.org/health-costs

This content is for educational purposes and does not constitute legal or compliance advice. Consult your ERISA counsel and benefits advisor for guidance specific to your organization's situation.