How to Manage Open Enrollment Compliance for Employer Health Plan Clients

Open enrollment is more than a benefit selection window — it is a concentrated compliance deadline cluster that runs from late summer through the first quarter of the following year. Miss the Summary of Benefits and Coverage distribution deadline. Overlook the Medicare Part D creditable coverage notice. Fail to honor a HIPAA special enrollment request. Each failure carries independent exposure: ERISA civil penalties under DOL enforcement, ACA excise taxes, and — in the most consequential cases — coverage disputes when an employee files a claim and discovers their election was improperly processed. For insurance brokers, managing open enrollment compliance is one of the highest-value services you can deliver to employer clients. The federal notice calendar, ERISA distribution requirements, and ACA affordability rules apply regardless of plan size or carrier; your job is to understand them well enough to keep clients out of trouble and to document your involvement clearly enough to define where your service obligations end.

Prerequisites

• Client's plan year start date and the identity of the plan administrator of record (typically the employer, not the broker or TPA — ERISA §3(16) plan administrator responsibility sits with whoever is named in the plan document)
• Current plan documents: Summary Plan Description (SPD), the underlying plan document or wrap document, and prior-year Summary of Benefits and Coverage (SBC) templates
• Employee roster with Medicare-eligible participants identified, and a list of states where employees reside that have active CHIP premium assistance programs (required for the annual CHIP notice — see Step 2)
• Prior-year ACA reporting (Forms 1094-C/1095-C for ALEs, or 1094-B/1095-B for small self-funded plans — the plan's funding structure determines which form set applies; see Fully Insured vs Self-Funded Health Plans: Which Structure Fits Your Employer Clients? for the full regulatory comparison) to review for completeness and catch any gaps from the prior year
• Carrier and TPA contact list with enrollment file format requirements, election submission deadlines, and special enrollment procedures

Step 1: Set the Enrollment Calendar at Least 90 Days Out

Build the open enrollment compliance calendar backward from the plan year start date. For calendar-year plans with a January 1 effective date, the compliance clock starts no later than October 1. Federal law does not prescribe a specific enrollment window length — ERISA requires only a reasonable opportunity to enroll — but the SBC distribution rule and the Medicare Part D creditable coverage notice deadline create de facto lead-time requirements that push planning into late summer.

Anchor dates for a calendar-year plan:

For off-calendar plan years, shift each date proportionally. A July 1 plan year start means the Medicare Part D notice is still due by October 15 — independent of your plan year cycle — which frequently creates a notice obligation mid-plan-year that employers miss entirely.

Step 2: Distribute All Required Pre-Enrollment Notices

Federal law requires a specific set of notices before employees make benefit elections. Each notice has its own deadline, its own penalty regime, and its own DOL or CMS enforcement pathway. Missing any one of them creates independent compliance exposure.

Summary of Benefits and Coverage (SBC): Required under ACA §2715 (29 CFR §2590.715-2715) for all non-grandfathered group health plans. The SBC must be provided at initial enrollment, at each annual open enrollment, within seven business days of any special enrollment request, and upon request at any time. If plan design changes materially from the prior year, the SBC must be distributed at least 60 days before the plan year begins. Carriers typically provide the SBC template; the broker must confirm it reflects the upcoming plan year's design accurately before distribution. Failure to provide the SBC carries a civil penalty of up to $1,362 per willful failure per participant under 29 CFR §2575.502c-6 (adjusted annually).

Annual Medicare Part D Creditable Coverage Notice: Any employer sponsoring a prescription drug benefit — including coverage embedded in a group health plan — must notify all Medicare-eligible participants and dependents whether the plan's drug coverage is "creditable" (actuarially equivalent to standard Medicare Part D coverage). This notice is required under 42 CFR Part 423, Subpart R, and must be delivered by October 15 of each year regardless of the plan year. Creditable coverage allows participants to delay Medicare Part D enrollment without incurring a late enrollment penalty. Employers who fail to send the notice and whose participants later face a Part D late-enrollment penalty carry CMS creditable coverage disclosure liability. This is the most commonly missed pre-enrollment notice for non-calendar-year plans and for employers who assume the carrier handles it automatically — most carriers do not.

Women's Health and Cancer Rights Act (WHCRA) Notice: Group health plans that provide mastectomy coverage must notify participants of their WHCRA rights — coverage for reconstructive surgery, prosthetics, and physical complications — at initial enrollment and annually thereafter under 29 CFR §2590.702-1. Most carriers include the annual notice in enrollment packets; confirm it is present before distribution.

MHPAEA Comparative Analysis Review: Open enrollment is also the right time to confirm that the plan's NQTL comparative analysis — required under the Consolidated Appropriations Act, 2021 (CAA 2021), codified at ERISA §712(a)(8) — is current and reflects the upcoming plan year's benefit design. Any plan amendment, carrier change, or TPA change that affects covered MH/SUD or medical/surgical benefits requires an updated analysis before the new plan year begins. Plans that cannot produce the comparative analysis within 10 business days of a DOL request face per-day, per-participant penalties regardless of whether the plan's substantive design is compliant. For the complete MHPAEA compliance workflow — including the quantitative treatment limitation test, NQTL comparative analysis steps, and the 2024 final rule's data evaluation requirements — see How to Make Employer Health Plans Comply with Mental Health Parity Requirements.

CHIP Premium Assistance Notice: Employers with employees in states that provide CHIP premium assistance must furnish an annual notice informing employees of available state premium assistance for children's health coverage under 29 CFR §2590.701-4 and ERISA §701(f)(3)(B). The Department of Labor publishes an updated model notice annually. As of 2025, most states participate in CHIP premium assistance programs. This notice is frequently overlooked by multi-state employers who focus on their headquarters state only — it applies in every state where employees reside.

HIPAA Special Enrollment Notice: At initial enrollment (and whenever a new hire is added), employees must be informed of their HIPAA special enrollment rights — the right to enroll outside the regular window upon a qualifying life event — under 29 CFR §2590.701-6. Most SPDs include this language; confirm it is present and accurate before furnishing to new participants.

Step 3: Run the Enrollment Period and Honor HIPAA Special Enrollment Rights

The enrollment window itself has two compliance-critical elements: ensuring HIPAA special enrollment requests are properly handled and collecting elections in a format that creates an unambiguous record.

HIPAA Special Enrollment Rights: Employees who did not enroll during initial enrollment — or who need to add dependents — may enroll outside the annual window under 29 CFR §2590.701-6 upon a qualifying event. Qualifying events include: loss of other group health coverage (30-day window to request enrollment), marriage (30 days), birth or adoption (30 days), and gaining eligibility for state Medicaid or CHIP assistance (60 days). Special enrollment requests received within the applicable window must be honored, and coverage must be made effective retroactively to the date of the qualifying event. An employer — or a broker advising an employer — who rejects a timely HIPAA special enrollment request is creating direct ERISA liability. Document every special enrollment request received and the response, including retroactive effective date.

Election Documentation: Every employee's benefit election — and every voluntary declination — should be documented in writing with a timestamp. An undocumented enrollment becomes a coverage dispute when a claim surfaces: the employee asserts they elected coverage; the carrier has no record. Best practice is timestamped confirmation through the carrier's online enrollment portal or a paper election form signed by the employee. The plan administrator must retain enrollment records for the ERISA record retention period — generally not less than six years from the date the record was filed or the plan year to which it relates (ERISA §107). For the complete business document retention framework applicable to ERISA plan sponsors, coordinate with the client's CPA; the retention standards align with the general seven-year rule used for tax records.

Step 4: Process Elections and Confirm Carrier Enrollment

Once the enrollment window closes, submit the final election file to the carrier by the required deadline. Before closing:

• Verify employee elections match what is being submitted to the carrier
• Confirm that employees who declined coverage have signed declinations on file
• Flag new hires who missed open enrollment for their 30-day initial enrollment window
• Exclude COBRA-qualified former employees from new plan year enrollment — former employees who have elected COBRA continuation continue under the prior plan separately and should not appear in the new plan year census (see How to Explain COBRA Continuation Coverage to Employer Clients and Departing Employees for the full election period, notice timeline, and premium mechanics)

After submission, request a confirmation from the carrier — a group billing statement or member roster — showing all enrolled employees and their coverage tiers. Reconcile this against the submitted election file before the plan year effective date. Enrollment discrepancies discovered after January 1 are significantly harder and more expensive to correct retroactively than errors caught during pre-enrollment reconciliation. A billing statement that includes employees who shouldn't be covered or excludes employees who elected coverage is the most common source of post-enrollment coverage disputes.

Step 5: Distribute Post-Enrollment Materials and Confirm SPD Currency

Summary Plan Description (SPD): The SPD is the primary document participants rely on to understand their rights and benefits. Under ERISA §104(b)(1) and 29 CFR §2520.104b-2, the SPD must be provided to new plan participants within 90 days of becoming covered, and to all participants every five years (more frequently if amendments have been made). If the plan was amended during the year — coverage changes, network changes, cost-sharing modifications — a Summary of Material Modifications (SMM) must be distributed within 210 days after the end of the plan year (or within 60 days if the modification represents a material reduction in benefits or services under 29 CFR §2520.104b-3). If a wrap plan document is being used, confirm it reflects all plan year changes before distribution.

ACA Affordability Confirmation: For employers that are Applicable Large Employers under IRC §4980H, confirm the employee premium contribution for the new plan year satisfies at least one of the three ACA affordability safe harbors before the plan year begins. For 2025, the Federal Poverty Line safe harbor treats coverage as affordable if the employee-only premium for the lowest-cost MEC option does not exceed 9.02% of the federal poverty level for a single individual (approximately $127/month in 2025 per IRS Rev. Proc. 2024-37). Setting employer contributions without verifying affordability is the most consistent source of §4980H(b) penalty notices — which typically arrive 12 to 18 months after the plan year ends. For the complete ALE threshold analysis, FTE calculation methodology, and §4980H penalty structure, see the ACA Employer Mandate compliance guide.

Step 6: Complete ACA Reporting (Forms 1094 and 1095)

ACA information reporting under IRC §§6055 and 6056 is mandatory regardless of whether any §4980H penalties were triggered. The reporting obligation runs in parallel with open enrollment and closes the prior year's compliance cycle during the same period the new year's enrollment is underway.

For Applicable Large Employers (50+ FTEs):

• Form 1095-C: Must be furnished to each full-time employee by January 31 of the year following the coverage year. Line 14 (offer of coverage codes) must accurately reflect the actual offer made in each calendar month — not just the plan year design. Line 16 (safe harbor and exemption codes) must correspond to the affordability safe harbor the employer used.
• Form 1094-C: The transmittal filed with the IRS, including aggregate group membership information if the employer is a member of an ALE controlled group.
• IRS filing deadline: February 28 (paper) or March 31 (electronic). Electronic filing is mandatory for employers filing 10 or more information returns in the aggregate (combining W-2s, 1099s, and ACA forms per IRS regulations effective for returns filed on or after January 1, 2024).

For Small Employers with Self-Funded Plans:

• Form 1095-B: Furnished to covered individuals by January 31.
• Form 1094-B: IRS transmittal.

Penalties under IRC §6722 for failure to furnish correct statements to recipients are $330 per return for 2025 (with a calendar-year cap for non-intentional failures). Intentional disregard carries no cap.

Common Open Enrollment Compliance Mistakes

Missing the Medicare Part D notice. The October 15 deadline is fixed and applies regardless of plan year. Employers who run a July 1 plan year frequently assume open enrollment is months away and miss the Medicare Part D deadline entirely. Confirm this notice is sent to all Medicare-eligible participants and their dependents — including covered spouses — not just retirees or employees over 65.

Failing to document employee declinations. A signed declination is the plan administrator's primary defense when an employee later asserts they were never offered coverage or that their election was improperly recorded. Collecting and retaining declinations is as important as collecting elections. Undocumented enrollments and undocumented declinations are the two most common sources of open enrollment-related coverage disputes.

Missing the CHIP notice for multi-state employers. The annual CHIP premium assistance notice is required in every state where eligible employees reside — not just in the employer's headquarters state. Employers with employees across multiple states who send the notice only to their home state are partially out of compliance.

Not honoring timely HIPAA special enrollment requests. A plan that rejects a 30-day special enrollment window request because it came in outside of open enrollment is in violation of HIPAA special enrollment rules (29 CFR §2590.701-6). The qualifying event window runs independently of the employer's chosen open enrollment period. Train HR administrators on what qualifies and how to process requests correctly.

Running enrollment without carrier confirmation. Relying on the submitted election file as the source of truth — without requesting and reconciling a carrier confirmation roster before the effective date — leaves enrollment discrepancies undiscovered until an employee's claim is denied. A pre-effective-date reconciliation takes less than a day and prevents the most common post-enrollment disputes.

Furnishing an outdated SPD. When a carrier or plan design changes, the SPD must be updated before the new plan year. An employer who continues distributing last year's SPD after a material plan modification creates both an ERISA disclosure violation and potential coverage dispute liability if an employee relies on the outdated document.

Frequently Asked Questions

How far in advance should an employer start open enrollment to meet all notice deadlines?

For calendar-year plans, compliance work should begin by October 1 at the latest. The Medicare Part D creditable coverage notice must be delivered by October 15 — before the Medicare Annual Enrollment Period opens — and SBCs must be distributed at least 60 days before plan year start if material plan design changes were made. Working backward from January 1, the full notice calendar requires at least 90 days of preparation.

What are the penalties for failing to distribute the Summary of Benefits and Coverage?

The DOL can assess a civil penalty of up to $1,362 per willful failure per participant under 29 CFR §2575.502c-6. For a group with 100 employees, a willful failure to distribute the SBC could theoretically generate $136,200 in penalties. Penalties are assessed based on willfulness; the DOL typically pursues documented failures surfaced through employee complaints or audit, not technical deficiencies in timing.

Are HIPAA special enrollment rights the same as ACA special enrollment periods?

No. HIPAA special enrollment rights (29 CFR §2590.701-6) apply to employer-sponsored group health plans and are administered by the plan administrator — they run year-round independent of the annual enrollment window. ACA special enrollment periods apply to Marketplace (individual market) coverage and are governed by different rules under 45 CFR §155.420. An employee losing employer coverage can trigger both a HIPAA special enrollment right for a new employer's group plan and an ACA special enrollment period for Marketplace coverage simultaneously.

Does a fully insured plan have different notice obligations than a self-funded plan?

Most ERISA notice obligations — SBC, CHIP, WHCRA, Medicare Part D creditable coverage — apply regardless of funding arrangement. The primary difference is in ACA reporting: for fully insured plans, the insurance carrier files Forms 1094-B and 1095-B to report individual coverage. For self-funded plans, the employer files those forms directly. ALEs file Forms 1094-C and 1095-C regardless of whether the plan is fully insured or self-funded.

What is a wrap plan document and why does an employer need one?

A wrap plan document integrates all employer-sponsored benefit programs (medical, dental, vision, FSA) into a single ERISA plan document that satisfies the SPD content requirements of ERISA §102. Without a wrap document, the carrier's certificate of coverage is the plan document by default — and certificates of coverage are drafted to describe coverage terms, not to satisfy ERISA's mandatory SPD content: claims procedures, ERISA rights statement, named plan administrator, plan number, and plan year. DOL audit letters routinely request the plan document within 30 days, and responding with only a certificate is a compliance failure that triggers penalties under ERISA §502.

Can an insurance broker be held liable for an employer's open enrollment compliance failure?

Yes, under certain circumstances. If the broker's service agreement includes enrollment administration, notice coordination, or compliance guidance, failures in those areas can result in E&O claims. More commonly, employer clients who receive ERISA penalties or face coverage disputes look for any party who should have identified the gap. Brokers who document their scope of services clearly — and who specify what is not included — are better positioned than those who informally absorb compliance responsibilities. Benefits brokers providing multi-year enrollment compliance services should also confirm their claims-made E&O policy's retroactive date covers all prior advisory periods; plan design and notice failures can surface well after the plan year ends. For how claims-made trigger mechanics work for broker professional liability, see Occurrence vs Claims-Made E&O Coverage: Which Policy Structure Protects Your Clients?.

What happens if an employee misses open enrollment?

Employees who miss the annual enrollment window are generally locked out of benefit changes until the next enrollment period, unless they experience a HIPAA qualifying event. Under 29 CFR §2590.701-6, qualifying events include loss of other coverage, marriage, birth, adoption, and gaining Medicaid or CHIP eligibility. The plan must allow enrollment within 30 days of most qualifying events (60 days for Medicaid/CHIP). A plan that refuses timely special enrollment requests is in violation of HIPAA's guaranteed availability rules and subject to ERISA civil penalties.

How does HSA eligibility interact with open enrollment benefit elections?

Employees who want to fund an HSA for the new plan year must elect enrollment in a qualifying High Deductible Health Plan (HDHP) during open enrollment. HSA eligibility attaches on the first day of HDHP coverage under IRC §223. If an employer offers both HDHP and non-HDHP options, employees who elect the non-HDHP — or who carry other disqualifying coverage (Medicare, a general-purpose health FSA, or non-HDHP spousal coverage) — cannot contribute to an HSA. The open enrollment election form must reflect the HDHP selection accurately; a carrier enrollment error that places an employee in the wrong plan tier eliminates HSA eligibility for the period of the error. For a complete breakdown of HSA, HRA, and FSA eligibility rules, contribution limits, and tax treatment across employee classes, see the HRA vs HSA vs FSA comparison guide.

Arvori helps insurance brokers manage open enrollment compliance calendars, track ERISA and ACA notice obligations, and document their advisory services across their employer client book. Learn more at arvori.app.