Employers who offer health insurance must follow a mix of federal and state statutes that dictate eligibility, coverage standards, cost‑sharing limits, and reporting requirements. This guide explains the major laws—such as the Affordable Care Act, ERISA, COBRA, HIPAA, and state mandates—what they mean for both employers and employees, and how businesses can stay compliant.
- Core Federal Framework
- Affordable Care Act (ACA)
- Employee Retirement Income Security Act (ERISA)
- Consolidated Omnibus Budget Reconciliation Act (COBRA)
- Health Insurance Portability and Accountability Act (HIPAA)
- State‑Specific Requirements
- Examples of State Mandates
- Key Compliance Steps for Employers
- Common Misconceptions
- Factual Comparison Table
- Enforcement and Penalties
- Resources for Ongoing Compliance
More from this site
Keep reading the latest coverage
Core Federal Framework
The United States relies on several federal statutes to regulate employer‑provided health coverage. Understanding each law's scope helps employers avoid penalties and ensures workers receive promised benefits.
Affordable Care Act (ACA)
- Applies to employers with 50+ full‑time equivalent employees (Applicable Large Employers).
- Mandates offering minimum essential coverage that is affordable and provides minimum value.
- Non‑compliant employers may face the Employer Shared Responsibility Payment.
Employee Retirement Income Security Act (ERISA)
- Sets fiduciary standards for employer‑sponsored health plans.
- Requires plan documents, summary plan descriptions, and annual reporting (Form 5500).
- Provides participants the right to sue for breaches of fiduciary duty.
Consolidated Omnibus Budget Reconciliation Act (COBRA)
- Allows qualified beneficiaries to continue coverage for up to 18 months (or longer in certain cases) after a qualifying event.
- Employers must give a 60‑day notice and allow premium payments up to 102% of the plan cost.
Health Insurance Portability and Accountability Act (HIPAA)
- Protects the privacy of health information and limits certain disclosures.
- Applies to group health plans and their business associates.
State‑Specific Requirements
Many states impose additional obligations that can be stricter than federal rules. Employers must check local statutes where they operate.
Examples of State Mandates
- California: Requires employers to provide a health insurance stipend if they do not offer coverage.
- Massachusetts: Enforces a health insurance affordability threshold lower than the ACA's definition.
- New York: Requires coverage of certain essential health benefits not explicitly listed in the ACA.
Key Compliance Steps for Employers
Following a systematic approach reduces risk and streamlines administration.
- Determine applicability: Count full‑time equivalents to assess ACA obligations.
- Review plan documents: Ensure ERISA‑required disclosures are up to date.
- Set affordability: Calculate employee contributions using the ACA's safe‑harbor methods (percentage of household income, federal poverty line, or rate of pay).
- Establish COBRA processes: Draft notices, track qualifying events, and set premium collection mechanisms.
- Audit state requirements: Verify any additional coverage, reporting, or benefit‑level mandates.
Common Misconceptions
Clarifying frequent misunderstandings helps both HR teams and employees.
- "Small businesses are exempt from all health‑insurance laws." Only the ACA's employer‑shared‑responsibility provisions are waived for < 50 > FTEs; other laws like ERISA and COBRA still apply.
- "Employees can't keep coverage after leaving a job." COBRA gives eligible workers a right to continuation, and some states have additional "mini‑COBRA" extensions.
- "Employer contributions are tax‑free for employees." Contributions are generally pre‑tax, but they count toward the employee's gross income for ACA affordability calculations.
Factual Comparison Table
| Law | Primary Obligation | Typical Employer Size Trigger |
|---|---|---|
| ACA – Employer Shared Responsibility | Offer affordable, minimum‑value coverage or pay penalty | ≥50 FTEs |
| ERISA | Fiduciary duties, reporting, disclosure | Any employer offering a qualified plan |
| COBRA | Provide continuation coverage after qualifying events | Any employer with ≥20 employees |
| HIPAA | Protect health‑information privacy | All group health plans |
| State Mandates (e.g., CA, MA, NY) | Additional benefit or affordability rules | Varies by state |
Enforcement and Penalties
Non‑compliance can trigger civil fines, tax penalties, and private lawsuits.
- ACA penalty: Up to $2,750 per full‑time employee per year (2024 figures).
- ERISA violations: Up to $2,500 per participant per violation, plus possible treble damages.
- COBRA non‑compliance: $100 per day per affected individual, up to $10,000.
- State penalties: Vary widely; some impose per‑employee fines or require corrective action plans.
Resources for Ongoing Compliance
Staying current requires regular reference to official guidance and professional counsel.
- U.S. Department of Labor – Employee Benefits Security Administration (EBSA) website.
- IRS Publication 15‑B (Employer's Tax Guide to Health Plans).
- State labor department portals for local health‑insurance statutes.
- Professional employer organizations (PEOs) and benefits consultants.