Compliance Monthly Update
April 2026
A brief update on what happened the prior month in group health plan compliance at the federal level, organized chronologically. An update for the state and local level are further down. If you would like additional information, please reach out to the GBS Compliance Team.
Federal Compliance Update
Regulatory agencies signal upcoming new MHPAEA regulations.
In a March 30 joint status report—filed in litigation challenging 2024 final regulations under the Mental Health Parity and Addiction Equity Act (MHPAEA)—the DOL, IRS, and HHS indicated they do not intend to defend the 2024 final rule. Instead, the agencies stated that they will issue a new proposed rule, including significant revisions to the provisions challenged in the case. The agencies announced this new proposed rule is targeted for release no later than December 31, 2026. (Note that the dates indicated are not binding and frequently slip.) The regulatory agencies had previously announced that they would not enforce the 2024 final regulations with respect to alleged noncompliance occurring prior to a final decision in the litigation, plus an additional 18 months. But this enforcement relief applies only to provisions that are new relative to the 2013 final rule, so earlier statutory and regulatory obligations, including the non-quantitative treatment limitation (NQTL) comparative analysis requirement, remain in effect.
Appeals court dismisses two separate ACA Section 1557 challenges to plans’ exclusion of weight-loss drugs.
The First Circuit has affirmed two lower court dismissals of lawsuits challenging health plans’ exclusion of weight-loss drugs. As a reminder, under ACA Section 1557, covered entities are prohibited from discriminating on the basis of protected characteristics—including race, color, national origin, sex, age, or disability. Only group health plans receiving federal assistance from HHS are considered covered entities under Section 1557, but in practice most plans do not receive federal assistance directly from HHS, therefore most plans are not directly subject to Section 1557. However, most carriers (including related TPAs) are subject to Section 1557 through receipt of Marketplace subsidies. The risk of a Section 1557 lawsuit for employers then, is that a carrier or TPA subject to litigation changes its clients’ plans or requires client indemnification for the carrier’s continued exclusion to avoid further litigation.
- In Whittemore v. Cigna Health, the First Circuit held that a participant did not plausibly allege she had a disability simply by stating she had been diagnosed with obesity and prescribed medication to treat it. The plaintiff filed the lawsuit alleging disability discrimination under ACA Section 1557. The court explained that to state a disability discrimination claim, the participant had to show she was disabled as defined by the ADA—that defines disability as a physical or mental impairment that “substantially limits one or more major life activities.” The participant’s complaint alleged that her obesity substantially limited her in major life activities such as walking, standing, and sleeping. The court, however, concluded that these allegations were conclusory “threadbare recitals of the elements of a cause of action.” The court also rejected the participant’s argument that any individual diagnosed with obesity and prescribed medication for it is, by definition, substantially limited in the operation of major bodily functions—reasoning that such general statements about obesity’s potential health impacts do not plausibly support an inference that every person in that category is disabled under the ADA. So, this case is an example that a medical diagnosis by itself will not automatically rise to disability discrimination under ACA Section 1557.
- Then in Holland v. Elevance Health, the First Circuit affirmed the dismissal of another proposed class action disability discrimination claim for failure to cover weight-loss drugs. In this case, an employee who was diagnosed with obesity and prescribed FDA-approved weight-loss medications sued her health plan’s insurance administrator after it denied coverage based on a plan exclusion for weight-loss medications. The participant alleged that the exclusion violated ACA Section 1557 by discriminating against her on the basis of disability. The First Circuit concluding the participant had not plausibly shown that the exclusion disproportionally impacts people with disabilities. The court noted that the medications are also approved for overweight individuals who are not disabled, so the “fit” between the excluded service and the protected class was not sufficiently close. The court also rejected the claim of intentional discrimination, concluding the exclusion was facially neutral because it applied to all enrollees seeking weight-loss drugs, not just those with obesity.
- While litigation involving ACA Section 1557 claims are in flux, these holdings state that a broad exclusion for weight-loss drugs does not, by itself, state a claim for disability discrimination under ACA Section 1557. So, these decisions offer some reassurance to plan sponsors that have similar weight-loss drug plan exclusions.
2027 Medicare Part D benefit parameters released, and CMS exempts HRAs from Part D creditable coverage disclosure and reporting requirements.
As background, most group health plan sponsors offering prescription drug coverage to Medicare Part D eligible individuals must disclose to those individuals (and to CMS) whether the plan coverage is creditable or non-creditable. For coverage to be creditable, its actuarial value must equal or exceed the actuarial value of the defined standard Medicare Part D coverage. Employers are not required to offer creditable coverage, but they are required to provide Part D eligible individuals with a notice indicating whether the plan offerings are creditable or not. The purpose of the notice is to help individuals make informed decisions about Medicare enrollment and avoid incurring a late enrollment penalty. Reporting to CMS enables the agency to apply the late enrollment penalty to individuals who delay Part D enrollment beyond their initial period triggered by their 65th birthday and who lack creditable coverage for at least 63 days.
- On April 6, CMS published final regulations relieving health reimbursement arrangements (HRAs) and individual coverage HRAs (ICHRAs), effective beginning in 2027, of the obligation to provide notices of creditable coverage to Medicare Part D eligible individuals and to CMS. CMS reasoned that since HRAs are designed to provide cost savings through pre-tax reimbursements and to supplement other coverage—applying creditable coverage concepts is inapplicable, confusing, and burdensome. In short, CMS views HRAs as inherently distinct from prescription drug plans and as being designed to supplement prescription drug coverage rather than function as prescription drug coverage themselves.
- The final regulations also update the simplified method that group health plans not receiving a retiree drug subsidy may use to demonstrate creditable coverage. Plan sponsors can determine creditable status using either the simplified determination method or an actuarial evaluation. Under the final rule, for plan years beginning in 2027, a plan’s prescription drug coverage will be deemed creditable under the simplified method if it: (1) provides reasonable coverage for brand name and generic prescription drugs and biologicals, (2) provides reasonable access to retail pharmacies, and (3) is designed to pay on average at least 73% (adjusted annually) of participants’ prescription drug expenses.
- CMS also announced the 2027 parameters for the defined standard Medicare Part D prescription drug benefit which continue to reflect the Inflation Reduction Act’s changes to the structure of the Part D benefit. Key 2027 parameters include an annual deductible of $700 (up from $615 in 2026) and an annual out-of-pocket threshold of $2,400 (up from $2,100 in 2026). Other 2027 parameters include the cost-sharing amounts for certain low-income subsidy-eligible individuals and the cost threshold and limit for the retiree drug subsidy program.
HHS releases HIPAA Security Rule risk management educational video.
On April 8, HHS released an educational video (titled “Risk Management Under the HIPAA Security Rule”) detailing the risk management requirements under HIPAA as well as findings and conclusions from HHS’ HIPAA investigations. As background, HHS previously released a webinar (titled “The HIPAA Security Rule Risk Analysis Requirement”) on how covered entities and business associates should conduct a comprehensive risk analysis of all electronic protected health information (ePHI) to identify potential risks and vulnerabilities to its confidentiality, integrity, and availability. Covered entities and business associates then must create a risk management plan (based on the risk analysis) to implement appropriate safeguards that reduce identified risks to a reasonable and appropriate level. This newly released video is intended to raise awareness and provide practical guidance on the risk management requirement (in addition to the risk analysis requirement). HHS emphasizes that risk management is not a one-time compliance exercise or paperwork obligation. Instead, risk management by HIPAA covered entities and business associates must implement, maintain, and document ongoing security measures that actually reduce risks to ePHI.
DOL announces shift in enforcement priorities.
The DOL’s Employee Benefits Security Administration (EBSA), that regulates and investigates ERISA plans, issued Field Assistance Bulletin (FAB) 2026-01 on April 14 reforming its employee benefit plan enforcement priorities. The FAB titled “Guiding Principles for EBSA Enforcement Priorities” sets out the following four priorities in that the EBSA will:
- Focus enforcement on the most egregious conduct and significant harm by plan fiduciaries, namely matters of conflicts of interest and self-dealing rather than matters of prudence. Specifically, the FAB states, “[given] that ERISA is a law of process and not results, EBSA must avoid cases that unfairly second-guess process-based fiduciary judgments.”
- Ensure, whenever possible and consistent with its mission, that it does not regulate by enforcement and instead promotes fairness, prior notice and clarity to the regulated community, stating, “novel legal theories or interpretations of ERISA should not be first articulated during enforcement actions. Instead, they should be subject to the ordinary regulatory and sub-regulatory processes.”
- Require proper review by senior agency officials of all critical enforcement initiatives, including enforcement where the legal theories or enforcement is novel, where there is (or is reasonably likely to be) a split in the circuits or where the enforcement would represent a change in EBSA’s position.
- Strive for timely and responsive enforcement. As the FAB states, “[routine] investigations involving less complicated issues, such as delinquent employee contributions, disclosure and bonding violations, should be completed within 18 months, unless there are exigent circumstances that are communicated to the Director of Enforcement. … More complex investigations must be completed within 30 months unless there are exigent circumstances.” As with the 2nd priority above, this principle addresses much of the recent open-ended audit activity, with some cases that have lasted as long as eight years.
IRS provides updated FAQs and a sample plan document for Section 127 education assistance programs.
As background, under an IRS Code Section 127 educational assistance program, an employer can provide up to $5,250 per year (indexed annually) in tax-free qualified education benefits to employees for tuition, fees and similar expenses, books, supplies, equipment, and principal and interest payments on qualified education loans. This month, IRS provided FAQ guidance about educational assistance programs and also provided a sample plan document.
- On April 20, the IRS issued Fact Sheet 2026-10 with updated FAQs about educational assistance programs reflecting changes made by the 2025 One Big Beautiful Bill (OBBB) Act. In particular, the FAQs state that the current $5,250 tax exclusion limit for 2026 will be adjusted for inflation beginning in 2027. The FAQs also clarifies the permanent extension for tax-free employer contributions toward qualified education loans (that previously had a sunset date at the end of 2025).
- The IRS also issued Publication 5993, that provides a sample plan document for qualified educational assistance programs that satisfies the requirements under IRS Code Section 127. Employers are required to have a plan document in place in order to establish an education assistance program. So, employer who have a Section 127 education assistance program (or who are planning to adopt one), may want to use the new IRS sample plan document as their template.
State/Local Compliance Update
A brief update on what happened the prior month in group health plan compliance at the state and local level, listed alphabetically. If you would like additional information, please reach out to the GBS Compliance Team.
California
New health benefit requirement for Los Angeles hotels and related businesses.
Beginning July 1, 2026, the Citywide Hotel Worker Minimum Wage Ordinance will require covered employers with hotels (and ancillary businesses) in Los Angeles to pay a health benefit rate of $8.15 per hour for the provision of health care benefits for a covered employee and their dependents. If no health benefits are provided, the $8.15 is required to be provided as an additional hourly wage. And if the covered employer’s hourly health benefit payment is less than $8.15, the difference is required be paid to the covered employee as an additional hourly wage. Employers may satisfy their health benefit rate obligation by providing health, dental, vision, mental health, disability income benefits, increased compensation, or a combination thereof. Employers who own, control, or operate a hotel in Los Angeles (or who have a business in a hotel) should determine if the ordinance applies. And if so, they will want to calculate whether they are making sufficient health benefit payments for each covered employee (and if not, work with their payroll department to provide additional wages) to those employees.
Maryland
Final regulations for Maryland’s paid family and medical leave program released.
As a reminder, the Maryland Time to Care Act (TCA) created the Maryland Family and Medical Leave Insurance (FAMLI) program. The law will require all Maryland employers to provide workers up to 12 weeks (in some cases 24 weeks) of job-protected paid leave to care for themselves or certain family members when specific criteria are met. Benefits are set to begin January 2028.
- Employers have three options for providing FAMLI benefits:
- State plan. The default option is for employer to pay premiums for coverage to be provided through a state-administered plan.
- Self-funded equivalent private insurance plan. Employers can either self-administer the benefits or hire a third-party administrator/insurance carrier to administer the benefits on a self-funded basis.
- Insured equivalent private insurance plan. Employers can hire an insurance carrier approved by the Maryland Insurance Administration to provide the benefits on an insured basis.
- The premiums are currently set at 0.9% of payroll up to the Social Security wage base, and this amount may be modified in the future by the State. Employers will be allowed to charge employees up to 50% of the premium cost of the state plan (regardless of whether they offer the state plan or a private plan). Premiums payments are set to begin January 2027.
- Final regulations have now been published that will help employers comply with the FAMLI program including how to create online employer accounts, information on the required employee notices, coordination with other benefits, etc.
- The Maryland FAMLI website has also been recently updated with guidance for employers.
- Employers have three options for providing FAMLI benefits:
Ohio
Ohio enacts PBM reform law.
On March 31, Governor DeWine signed HB 229 that provides comprehensive reforms for PBMs operating in the state—including enhanced licensing, transparency, disclosure, and operational standards (effective July 1, 2027). Here are the key provisions of the law:
- All PBMs must apply for and obtain a license from the Ohio Department of Insurance, with annual renewal requirements and clear eligibility standards for both individuals and business entities.
- A PBM must account to the plan sponsor, on at least an annual basis, for any of the following items received by the PBM: pricing discounts, rebates of any kind, inflationary payments, credits, claw backs, fees, grants, charge backs, drug product reimbursements, or other benefits received by the PBM. In addition to the accounting obligation, the PBM must give the plan sponsor access to all financial and utilization information used by the PBM in relation to the pharmacy benefit management services provided to that plan sponsor.
- A PBM must disclose in writing to the plan sponsor the terms and conditions of any contract or arrangement between the PBM and any other party relating to the pharmacy benefit management services provided to the plan sponsor.
- A PBM must disclose in writing to the plan sponsor any activity, policy, practice, contract, or arrangement of the PBM that directly or indirectly presents any conflict of interest concerning the PBM’s relationship with or obligation to the plan sponsor.
Tennessee
Sixth Circuit rules ERISA preempts portions of Tennessee PBM law.
On April 7, the Sixth Circuit affirmed a lower court decision holding that a Tennessee PBM law (that included “any willing provider” and cost sharing limits) is preempted by ERISA. The initial lawsuit was brought in response to the law’s requirements on self-insured health plans, requiring these plans to include any pharmacy willing to meet the plan’s terms and conditions into its provider network. The law also included “anti-steering” provisions, prohibiting plans from offering cost-sharing incentives (or disincentives) to participants to use one pharmacy over another. The law expressly included ERISA-covered plans in the statutory definition of a “covered entity” and a “pharmacy benefits manager,” thus attempting to directly regulate self-insured plans. The Sixth Circuit held that network and cost-sharing provisions of the law fundamentally restricted ERISA plans’ benefit designs and upset nationally uniform plan administration. Importantly, the Court took a practical approach and looked at the specific effect of the state law on ERISA-covered plans. In so doing, the 6th Circuit joins the 10th Circuit in holding that ERISA permits states to impose only indirect and non-acute economic burdens on plans, which do not have the effect of binding a plan to a specific benefit design choice.
Virginia
Virginia enacts PBM reform laws.
The Virginia legislature has passed several bills that will regulate PBMs and enact drug pricing reform. Two of the bills have been signed by Governor Spanberger, and one is still awaiting her signature.
- On March 30, the Virginia legislature passed HB 483, which is currently awaiting Governor Spanberger’s signature. The bill would establish a Prescription Drug Affordability Advisory Panel and adopt the “maximum fair prices” established under the Inflation Reduction Act for drugs purchased by Virginia-regulated health plans and state employee plans. ERISA-regulated self-funded plans would be able to opt in. The panel is also charged with developing policy recommendations and strategies to improve prescription drug affordability within the Commonwealth. It will report annually to the governor and legislature on prescription drug pricing trends and make policy recommendations. Under the bill, PBMs are required to report financial information to the panel—including administrative fees, formulary management fees, rebate retention, and network access fees. State-regulated health plans must report how the cost savings obtained from maximum fair prices benefit enrollees, particularly with respect to cost sharing.
- SB 669 was signed by Governor Spanberger on March 31. Effective July 1, 2026, SB 669 expands Virginia’s regulation of carriers and PBMs by adding new prohibited practices—including charging electronic claim processing fees, reversing claims without prior written notice or just cause, reducing payments to effective reimbursement rates not agreed to in a provider agreement, and retroactively denying or reducing claims except in limited circumstances. Building on an existing spread pricing ban, SB 669 mandates pass-through pricing, requires PBMs to offer fee-only compensation arrangements upon plan sponsor request, and requires PBMs to direct 100% of manufacturer rebates to the carrier or plan (to offset cost sharing and reduce premiums) or to the covered individual at the point of sale.
- Lastly, HB 1214 was signed by Governor Spanberger on April 13. HB 1214 reduces the existing aggregate cost-sharing cap for prescription insulin from $50 to $35 per 30-day supply, regardless of the amount or type of insulin prescribed. The law also sets an aggregate cost-sharing cap of $35 for a 30-day supply of diabetes equipment and supplies—including blood glucose meters and strips, continuous glucose monitors and supplies, and insulin pump supplies. The new caps are applicable to policies delivered, issued, reissued, amended, or extended on or after January 1, 2027.
Virginia enacts paid family and medical leave program.
- On April 22, Governor Spanberger signed SB2/HB1207 creating a state-wide paid family and medical leave (PFML) program. Payroll contributions will begin on April 1, 2028, and benefits will begin on December 1, 2028. Under the new PFML program, employers must provide eligible employees with job-protected leave to bond with a new child, or care for themselves or a covered family member. Eligible employees may receive up to 12 weeks of paid leave up to 80% of the employee’s average weekly wage, subject to a statutory cap at 100% of the statewide average weekly wage. Employers with 11 or more employees must remit both the employer and employee portions of the contributions (up to 50% may be deducted from employee wages). Employers with up to 10 employees must remit only the employee portion and are exempt from the employer contribution. The contribution amount is based on the employee’s wages up to the Social Security wage cap and is adjusted annually. Employers may provide benefits either through the state-run plan or through a private plan (that may be either self-funded or provided through a third-party carrier). Employers must give their employees written notice about the PFML program when they are hired and again annually that explains PFML‑provided rights, benefits, requirements, job protections, remedies, and anti‑discrimination protections. Employers must also post and maintain a notice provided by the State.