The Internal Revenue Service (IRS) has released its annual cost-of-living adjustments applicable to employee benefit plans for 2023. A year-to-year comparison of limitations can be found here: 2023 Annual Limitations Chart

These contribution limits are generally adjusted for inflation and, consistent with prior years, the IRS has increased the limits based on a cost-of-living index. For 2023, the adjustments to qualified retirement plan limitations include an increase in the contribution limit (section 415 limitation) for defined contribution plans from $61,000 to $66,000, and an increase to the annual compensation limit for purposes of Internal Revenue Code Section 401(a)(17) from $305,000 to $330,000 (from $450,000 to $490,000 for certain governmental plans).Continue Reading IRS Releases 2023 Cost of Living Adjustments for Benefit Plans

In response to the ever-increasing cost of prescription drugs, the 2021 Consolidated Appropriations Act (Public Law 116-260) introduced a new prescription drug reporting mandate intended to make prescription drug pricing more transparent and to assist the Departments of Labor, Treasury, and Health and Human Services with preparing a biannual, publicly available report on prescription drug pricing. The first of these extensive reports is due on December 27, 2022.Continue Reading The Time has Come for New Prescription Drug Reporting Mandate

On November 22, 2022, the U.S. Department of Labor (the “DOL”) published a regulation entitled “Prudence and Loyalty in Selecting Plan Investments and Exercising Shareholder Rights” (the “Final Rule”). The Final Rule follows proposed rules regarding ESG investing and proxy voting by plan fiduciaries, issued on October 14, 2021 (the “Proposed Rule”) and amends prior regulations on the same topic issued by the DOL under President Trump in 2020 (the “2020 Rule”).

In the Final Rule, the DOL repeatedly emphasized that the regulation was primarily aimed at removing and remedying the chilling effect on ESG investing by plan fiduciaries created by the 2020 Rule. While the Final Rule takes a more permissive stance on the consideration of climate change and other ESG factors in investment decisions by plan fiduciaries than the 2020 Rule, the DOL cautioned that a plan fiduciary should not subordinate the interests of plan participants and beneficiaries to any collateral benefits (i.e., ESG objectives).

The Final Rule largely tracks the Proposed Rule, with a few notable exceptions summarized below.Continue Reading DOL Finalizes Rule Regarding ESG Investing and Proxy Voting by Plan Fiduciaries

The Affordable Care Act contains broad provisions requiring health insurers and group health plans to make substantial amounts of information available to the public to facilitate transparency in health care pricing, and several recent Executive Orders have also focused on the availability of health pricing information. In 2020, under the authority of the Affordable Care Act, the Departments of Health and Human Services, Labor, and the Treasury issued transparency in coverage regulations (often referred to as the “TiC Rules”), which require most health plans and health insurance issuers in the group and individual markets (“Plans and Issuers”) to publicly disclose health plan pricing and cost sharing information. The first deadline under the TiC Rules was originally set for January 1, 2022, but was delayed to July 1, 2022 in part due to the enactment of the Consolidated Appropriation Act (which contained additional, and somewhat overlapping, transparency in coverage rules).

Specifically, by July 1, 2022, the TiC rules require that each Plan and Issuer make two “machine readable files” (or “MRFs”) of pricing information available on its public website. Generally speaking, the MRFs that must be available must include (1) the payment rates negotiated between plans or issuers and providers for all covered items and services (the “In-Network File”), and (2) the unique amounts a plan or issuer allowed, as well as the associated billed charged for covered items or services furnished by out-of-network providers during a specified time period (the “Out-of-Network File”). (The deadline for a third file, which must contain pricing information for prescription drugs, was originally January 1, 2022, and has been extended indefinitely pending coordination with similar requirements under the Consolidated Appropriations Act.) Plans and Issuers are not required to disclose information that would violate health privacy laws. The MRFs must be updated monthly and clearly note the date they were last updated. The MRFs must be in a non-proprietary, open-standards format that is “platform independent” and available to the public without restrictions that would impede re-use, such as a JSON file. Microsoft Word, Microsoft Excel, and PDF files are not acceptable because they are proprietary formats.Continue Reading Transparency in Coverage Deadline Looms – Are You Ready?

At long last, the Department of Labor has provided guidance on interpreting requirements imposed on group health plan fiduciaries as a part of the Consolidated Appropriations Act, or CAA. On December 27, 2020, Congress amended Section 408(b)(2) of ERISA through its enactment of the CAA. Section 408(b)(2) provides a prohibited transaction exemption for transactions between plans that are subject to Title I of ERISA and “parties in interest” with respect to such plan for the provision of services that are necessary for the establishment or operation of the plan, provided that the compensation paid by the plan to the provider is “reasonable.” One requirement for compensation to be considered reasonable for purposes of Section 408(b)(2) is that the plan fiduciary receive disclosure regarding the compensation received by the service provider. Prior to the CAA, these disclosure requirements only applied to certain retirement plan service providers. However, the CAA expanded these requirements to providers of brokerage or consulting services to group health plans who expect to receive $1,000 or more in direct or indirect compensation  (“Covered Providers”). In addition to disclosing the direct compensation received from a group health plan for its services, Covered Providers must also disclose indirect compensation received from third parties. The disclosure is intended to ensure that plan fiduciaries are informed as to the potential for conflicts of interests as a result of, and the reasonableness of compensation in connection with, third-party payments received by a Covered Provider. The new rules imposed by the CAA took effect on December 27, 2021.

Shortly after these provisions of the CAA took effect (and more than a year after the passage of the CAA), the Department of Labor (“DOL”) released Field Assistance Bulletin 2021-03 (the “Bulletin”) on December 30, 2021, which states that the DOL will focus its enforcement efforts on cases where Covered Providers are not acting in accordance with a good faith, reasonable interpretation of the applicable requirements of Section 408(b)(2). The Bulletin also includes guidance in the form of several questions and answers. The Bulletin confirms that while compensation arrangements relating to the provision of services to pension plans and group health plans differ in many respects, Covered Providers may look to prior DOL guidance issued with respect to pension plans (where applicable) to determine their own obligations with respect to Section 408(b)(2). As a result, the DOL states that it does not believe that comprehensive regulations are needed, but will instead monitor the situation to determine whether (and what) additional guidance may be needed.Continue Reading DOL Provides Long-Awaited Guidance on Service Provider Health Plan Disclosures and Related Enforcement Policy

The Internal Revenue Service has come through on its annual holiday gift of releasing annual cost-of-living adjustments applicable to employee benefit plans. A year-to-year comparison of limitations applicable to benefit plans can be found here: 2022 Annual Limitations Chart

As in prior years, most of the benefit plan limitations have increased. Notably, these increases include

“Doesn’t that violate HIPAA?”  This is a question we hear regularly from employers, businesses and individuals who are concerned that asking someone for their COVID-19 vaccination status could raise issues under the Health Insurance Portability and Accountability Act (“HIPAA”) Privacy Rule.  The answer is no – it is not a problem to ask and it is not a problem to require disclosure of COVID-19 vaccinated status.  This is fairly clear on the face of the regulations themselves.  While vaccination information is classified as health information that is generally covered by the HIPAA Privacy Rule, HIPAA generally only provides protections with respect to disclosures by covered entities (such as health care providers and health plans) and their business associates.  HIPAA therefore does not apply to most employers, and does not apply when an individual employee discloses to their employer information about the employee’s own health status, including COVID-19 vaccination status.

The Department of Health and Human Services (“HHS”) has recently provided further reassurance regarding the inapplicability of HIPAA with respect to certain information about vaccination status in the form of lengthy FAQs posted to their website on September 30, 2021.Continue Reading Can Employers Ask for Proof of COVID-19 Vaccination Status Under HIPAA?

On June 17, 2021, the Supreme Court in a 7-2 decision rejected a challenge to the individual mandate and the overall constitutionality of the Patient Protection and Affordable Care Act (the “ACA”) in the third major challenge to the law to reach the high court. The decision in California et. al. v. Texas et. al., 593 U. S. ___ (2021), was somewhat anticlimactic as the basis for the decision was that the plaintiffs did not have standing to bring the action. Accordingly, the Court did not address or provide guidance on the substantive constitutionality or severability issues raised in the lower courts. The decision does, however, signal that even a conservative Court is unlikely to overturn the ACA any time soon and so compliance with the various provisions of the ACA will be required. The decision has also been heralded as a victory for patients who are able to keep their health coverage as the country exits a year and half long pandemic. In addition, Democrats have expressed an intent to try to expand the ACA’s reach by adding provisions designed to make health care more affordable and accessible to the American people.
Continue Reading States Lack Standing – ACA Remains Standing

On May 18, 2021, the IRS furnished much-needed guidance to employers on how to implement the COBRA premium subsidy provisions under the American Rescue Plan Act (ARPA). Notice 2021-31 includes more than seven dozen Q&As, which cover topics including eligibility requirements, applicable coverage periods and limitations, and notice and election procedures.

As summarized in our prior post, ARPA includes a 100% COBRA premium subsidy for “assistance eligible individuals” who elect (or who previously elected) COBRA continuation coverage for the period from April 1, 2021 through September 30, 2021. “Assistance eligible individuals” are generally those whose terminations occur as a result of an involuntary termination of employment (other than due to gross misconduct, for which COBRA is not available) or due to a reduction of hours.

ARPA provides that, by May 31, 2021, employers are required to distribute a notice regarding the COBRA premium subsidies to “assistance eligible individuals.” Given the May 31 deadline, employers were anxiously awaiting guidance from the IRS on many of the aspects of the COBRA premium subsidies. Pending issuance of guidance by the IRS under ARPA, many looked to the guidance that was issued to implement the 2009 American Recovery and Reinvestment Act (ARRA) COBRA subsidy for some indication of how the IRS might interpret ARPA’s provisions. Fortunately, much of the ARPA guidance—particularly relating to what constitutes an involuntary termination of employment—is consistent with that prior ARRA guidance.Continue Reading IRS Issues Much Needed COBRA Guidance

On April 14th, 2021, the Department of Labor (“DOL“) issued cybersecurity guidance to plan sponsor and fiduciaries, recordkeepers and other service providers and participants and beneficiaries of plans regulated by the Employee Retirement Income Security Act of 1974, as amended (“ERISA”). The guidance is presented in three separate parts: Tips for Hiring a Service Provider with Strong Cybersecurity Practices, Cybersecurity Program Best Practices and Online Security Tips for Participants and Beneficiaries.

Over the past ten years, cybersecurity has become an area of critical importance to plan sponsors, plan administrators and plan participants. With plans holding trillions in assets as well as sensitive participant information, retirement accounts have been attractive targets for cyber-enabled fraud. Plan participants are known to check their retirement account balances less frequently than personal banking, credit card or other financial accounts. As a result, there can be a delay before attacks on retirement accounts are discovered, making tracing and recovery efforts exceptionally difficult. Plans also permit electronic access to funds and rely upon outside service providers, which provide additional access points for breach. There is a growing body of litigation involving participants who have suffered retirement plan losses due to cyberattacks. Bartnett v. Abbott Laboratories, No. 20-cv-02127 (ND Ill., 2020) (motion to dismiss participant suit against plan sponsor and administrator granted, but denied with respect to third party record-keeper); Leventhal v. The MandMarblestone Group LLC, No. 18-cv-2727 (ED PA, 2019) (motion to dismiss suit by plan sponsor and participant against third party administrator denied); and Berman v. Estee Lauder, No. 4:19-cv-06489 (ND CA, 2019) (participant suit against plan sponsor, committee and third party record-keeper settled).Continue Reading U.S. Department of Labor Weighs in on Cybersecurity for ERISA Plans