ERISA and Employer Plan Regulation

The Employee Retirement Income Security Act of 1974 (ERISA) establishes the federal framework governing employer-sponsored health and welfare benefit plans, shielding them from a patchwork of conflicting state insurance laws. Understanding ERISA is essential for anyone navigating the employer-based coverage market, which covers approximately 159 million Americans (Kaiser Family Foundation, 2023 Employer Health Benefits Survey). This page covers ERISA's scope, its operational mechanics, the plan types it governs, and the practical boundaries where federal and state authority diverge.

Definition and scope

ERISA is a federal statute codified at 29 U.S.C. § 1001 et seq. that preempts most state laws that "relate to" employer-sponsored employee benefit plans. Originally enacted to protect pension assets, ERISA's Title I welfare benefit plan provisions apply equally to employer health plans — covering medical, dental, vision, and disability benefits provided through employment.

ERISA applies to private-sector employers of virtually any size. Government employers — federal, state, and local — and churches are explicitly excluded under 29 U.S.C. § 1003(b). This exclusion affects a substantial portion of the workforce; the federal government alone employs approximately 2.9 million civilian workers (Office of Personnel Management, FedScope).

The statute imposes four categories of requirements on covered plans:

Reporting and disclosure — Plans must furnish Summary Plan Descriptions (SPDs), Summary of Benefits and Coverage documents, and annual Form 5500 filings with the Department of Labor.
Fiduciary standards — Plan administrators must act solely in the interest of participants and beneficiaries.
Claims and appeals procedures — ERISA mandates minimum timelines and participant rights for benefit claim adjudication.
Civil enforcement — Participants may sue in federal court under 29 U.S.C. § 1132 to recover benefits or enforce plan terms.

Crucially, ERISA's preemption clause at § 514 displaces state insurance mandates for self-funded plans, while the "savings clause" at § 514(b)(2)(A) preserves state insurance regulation for fully insured plans. This distinction is the single most consequential regulatory boundary in employer health coverage. The self-funded vs. fully insured employer plans distinction determines which regulatory regime actually applies to a given workforce.

How it works

Plan administrators — typically the employer itself or a designated benefits committee — bear fiduciary duties under ERISA. Those duties require prudent management of plan assets, selection of qualified service providers, and avoidance of prohibited transactions with parties in interest.

For fully insured plans, the employer purchases an insurance policy from a licensed carrier. The carrier bears the underwriting risk, and state insurance law governs the policy terms — premium rates, mandated benefits, and network adequacy standards. ERISA still governs the administrative layer: claims procedures, SPD disclosures, and fiduciary obligations remain federal.

For self-funded plans, the employer assumes the financial risk directly, often contracting with a Third Party Administrator (TPA) to process claims. Because no insurance policy exists, the state savings clause cannot apply, and state benefit mandates do not reach the plan. Large employers and government contractors with more than 1,000 employees frequently self-fund because this structure allows national plan uniformity and cost control.

Stop-loss insurance — a reinsurance product protecting self-funded employers against catastrophic individual or aggregate claims — is itself subject to state regulation, since it is a contract of insurance sold to the employer rather than a benefit plan. The Department of Labor regulates ERISA plans through the Employee Benefits Security Administration (EBSA).

The National Health Insurance Authority hub provides an orientation to how these federal frameworks intersect with the broader U.S. insurance landscape, including marketplace plans and public programs.

Common scenarios

Scenario 1 — Multi-state self-funded employer with an HMO option

A corporation operating in 30 states may offer a self-funded PPO as its primary plan while also carving out a fully insured HMO option for employees in a specific region. The self-funded PPO sits entirely under ERISA; the HMO option, being a purchased insurance policy, remains subject to state HMO regulation in each state where it is offered. HMO Authority provides detailed reference material on HMO plan structures, network requirements, and referral rules that affect how these regional carve-outs operate within an ERISA framework.

Scenario 2 — Employer offering an EPO to reduce out-of-network costs

Employers seeking to reduce out-of-network utilization increasingly offer Exclusive Provider Organization plans. When fully insured, those EPOs carry state network adequacy requirements; when self-funded, the employer's plan document governs. EPO Authority covers the structural rules of EPO plans — including their no-referral, closed-network design — which employers must evaluate against their workforce geography before plan adoption.

Scenario 3 — Small employer pairing an HDHP with an HSA

Employers with fewer than 50 full-time equivalent employees are not subject to the ACA's employer shared-responsibility mandate (26 U.S.C. § 4980H), but they may still offer ERISA-governed health plans. High-deductible health plans paired with Health Savings Accounts have become a common strategy. HDHP Authority documents IRS-defined minimum deductible thresholds — $1,600 for self-only coverage and $3,200 for family coverage in 2024 per IRS Revenue Procedure 2023-23 — and the HSA contribution limits that make this pairing viable under ERISA-governed plans.

Decision boundaries

The central analytical question in ERISA compliance is whether a given legal requirement applies to the plan. Four boundary tests clarify most disputes:

Federal vs. state mandate applicability

Plan Type	State Benefit Mandates	State Rate Regulation	ERISA Fiduciary Rules
Self-funded (private employer)	No — preempted	No — preempted	Yes
Fully insured (private employer)	Yes — via savings clause	Yes	Yes
Government or church plan	Varies by jurisdiction	Varies	No — excluded

ACA integration

ERISA plans are not exempt from the Affordable Care Act. The ACA amended ERISA directly and the Internal Revenue Code to impose coverage mandates — prohibition on lifetime dollar limits, dependent coverage to age 26, and preventive care without cost-sharing — on all group health plans, including self-funded ones. See ACA requirements for insurers and employers for the full enumeration of these federal floors.

HIPAA portability

ERISA plans must comply with HIPAA's portability and nondiscrimination provisions, limiting preexisting condition exclusion periods and prohibiting health-status discrimination among similarly situated employees. These rules apply regardless of funding method.

Mental health parity

The Mental Health Parity and Addiction Equity Act (MHPAEA), enforced jointly by the Departments of Labor, Treasury, and Health and Human Services, applies to all ERISA-governed group health plans with more than 50 participants. Plans cannot impose quantitative or non-quantitative treatment limitations on mental health or substance use disorder benefits that are more restrictive than those applied to medical and surgical benefits (MHPAEA, 29 U.S.C. § 1185a).

Employers selecting among plan types — HMO, EPO, HDHP, or PPO — should evaluate these regulatory layers as part of plan design, since the funding method determines which state-level consumer protections reach employees and which do not.

References

The law belongs to the people. Georgia v. Public.Resource.Org, 590 U.S. (2020)