Summary. Group health plan compliance is administratively unglamorous and legally unforgiving, and COBRA generates the most litigation because the violations are documentary and uniform — one defective template goes to everyone. This guide covers COBRA end to end: who is covered, what triggers continuation, how long it lasts, the four notices and their deadlines, premiums and termination, and how the rules interact with Medicare, severance, and the marketplace. It then covers the surrounding group health plan obligations that share the same administrative infrastructure, from ERISA documents and reporting through the newer transparency and fee disclosure rules.

Every COBRA case begins the same way. An employee is terminated, elects nothing, incurs medical bills, and later claims the election notice never arrived — or arrived without a required element, or went to an address the employer knew was stale.

The employer's defense depends entirely on records: what was sent, when, to what address, by what method, and what it said. If those records exist, the case ends. If they do not, the employer faces statutory penalties of up to $110 per day per qualified beneficiary under ERISA, an excise tax under the Internal Revenue Code, and liability for the medical claims that would have been covered.

COBRA is a documentation statute. Understanding the substantive rules matters, but the operational discipline — the right notice, sent the right way, at the right time, with proof — is what actually determines outcomes.

Who must comply

Federal COBRA applies to group health plans maintained by employers with 20 or more employees on more than 50% of typical business days in the preceding calendar year. Count full-time and part-time employees, with part-timers counted as a fraction based on hours.

Covered plans include medical, dental, vision, prescription drug, health flexible spending arrangements (with a special limited rule), health reimbursement arrangements, employee assistance programs providing medical care, and on-site clinics. Not covered: life insurance, disability, and most other non-medical benefits.

Governmental and church plans are subject to different rules — federal employee plans have their own continuation program, state and local government plans are covered by the Public Health Service Act provisions, and church plans are generally exempt from federal COBRA (though state law may apply).

State mini-COBRA laws cover employers below the federal threshold in most states, generally with shorter continuation periods (three to eighteen months), different notice requirements, and sometimes coverage through the insurer rather than the employer. For a small employer with a fully insured plan, the insurer usually administers it — but confirm, because the employer typically retains the notice obligation.

Qualified beneficiaries and qualifying events

A qualified beneficiary is an individual covered by the plan on the day before a qualifying event: the covered employee, the employee's spouse, and dependent children. A child born to or adopted by the covered employee during the continuation period is also a qualified beneficiary.

Each qualified beneficiary has an independent right to elect. A spouse may elect even if the employee declines; a dependent child may elect even if the parents do not. This is frequently mishandled, and notices addressed only to the employee do not satisfy the obligation to the spouse — the regulations permit a single notice addressed to both if they reside at the same address, but a notice naming only the employee does not.

Qualifying events and maximum coverage periods:

Event Qualified beneficiaries Maximum period
Termination of employment (other than gross misconduct) Employee, spouse, dependents 18 months
Reduction of hours below eligibility Employee, spouse, dependents 18 months
Death of the covered employee Spouse, dependents 36 months
Divorce or legal separation Spouse, dependents 36 months
Employee's entitlement to Medicare Spouse, dependents 36 months
Loss of dependent child status Dependent child 36 months
Employer's bankruptcy (retiree plans) Retiree, spouse, dependents Special rules

Gross misconduct. Termination for gross misconduct is not a qualifying event, so no COBRA rights arise. The term is not defined in the statute, courts construe it narrowly, and the employer bears the burden. It generally requires intentional, wanton, or deliberate misconduct — not poor performance, not ordinary policy violations, and usually not a single incident of negligence. Denying COBRA on this basis is high-risk, because if a court disagrees the employer is liable for the coverage plus penalties. Most experienced practitioners offer COBRA even in egregious cases and litigate elsewhere.

Reduction of hours includes a move from full-time to part-time, a leave of absence that exhausts FMLA protection, a layoff, and a strike or lockout — any change causing loss of coverage under the plan's eligibility terms.

Extensions:

Disability extension — 11 additional months (29 total). If a qualified beneficiary is determined by the Social Security Administration to have been disabled at any time during the first 60 days of continuation coverage, the 18-month period extends to 29 months for all qualified beneficiaries in the family. Conditions: the beneficiary must notify the plan administrator within 60 days of the SSA determination and before the end of the initial 18 months, and must notify the plan within 30 days if the SSA later determines the beneficiary is no longer disabled. The plan may charge up to 150% of the applicable premium for the extension months.

Second qualifying event — extension to 36 months. If a second event (death, divorce, Medicare entitlement, or loss of dependent status) occurs during an 18-month period, the spouse and dependents may extend to 36 months from the original event. The beneficiary must notify the plan within 60 days.

Medicare and the 18/36-month interaction. Where a covered employee becomes entitled to Medicare and then terminates employment within 18 months, the spouse and dependents receive coverage for 36 months from the Medicare entitlement date — a rule that produces odd arithmetic and that plans get wrong regularly.

The four notices

1. General (initial) notice. Provided to the covered employee and spouse within 90 days after coverage begins under the plan. Describes COBRA rights and obligations in general terms. The Department of Labor publishes a model notice — use it, updated to reflect the plan's specifics, and keep the version history.

Delivery: first-class mail to the employee and spouse. A single notice to both is permitted if they reside at the same address. Including it in the summary plan description satisfies the requirement only if the SPD is furnished within the 90 days.

2. Employer notice to the plan administrator. For employer-side events (termination, reduction of hours, death, Medicare entitlement, bankruptcy), the employer must notify the plan administrator within 30 days of the event or of the loss of coverage, depending on how the plan measures it. Where the employer is also the administrator, this is internal, and the combined deadline for the election notice is 44 days.

3. Election notice. The plan administrator must furnish it within 14 days of receiving notice of the qualifying event — or within 44 days of the event where the employer is the administrator.

Required content, from the DOL regulations:

  • Identification of the plan and the plan administrator's contact information;
  • Identification of the qualifying event and the qualified beneficiaries;
  • The date coverage terminates;
  • An explanation of the right to elect and the 60-day election period;
  • An explanation of the consequences of not electing or waiving, including the right to revoke a waiver during the election period;
  • The coverage available, the premium amount, and payment procedures and due dates;
  • The maximum coverage period and events causing earlier termination;
  • The extension provisions and the beneficiary's notice obligations for disability and second qualifying events;
  • A statement that more complete information is available in the SPD; and
  • Instructions for updating address information.

Use the DOL model election notice. It is the safest starting point, and courts and the DOL treat material deviations skeptically. Recent litigation has focused on notices that omitted the plan administrator's name and address, failed to identify the coverage, failed to explain how to elect, or included confusing multi-plan language.

4. Notices of unavailability and of early termination. If a plan determines that an individual is not entitled to continuation coverage after a request, it must furnish a notice of unavailability explaining why, within the same 14-day framework. If coverage terminates early, the plan must furnish a notice of early termination as soon as practicable, stating the reason, the date, and any conversion or alternative rights.

Beneficiary-side notices. The qualified beneficiary must notify the plan of a divorce, legal separation, or loss of dependent status within 60 days, and of disability determinations as described above. The plan's procedures for these notices must be described in the SPD and must be reasonable; a plan without stated procedures cannot enforce a deadline.

Election, premiums, and termination

The election period runs 60 days from the later of the date coverage would be lost or the date the election notice is furnished. An election is timely if postmarked within the period. A beneficiary who waives may revoke the waiver at any time during the election period, with coverage then prospective from the revocation.

Retroactivity. Coverage elected is retroactive to the date of the loss, so there is no gap — which is why beneficiaries often wait and elect only if they incur claims. That is lawful and it is the single largest cost driver in COBRA administration.

Premiums.

  • Up to 102% of the applicable premium — the full cost of coverage plus a 2% administrative charge.
  • Up to 150% during the eleven disability extension months.
  • The applicable premium is the cost to the plan for similarly situated non-COBRA beneficiaries, determined for a twelve-month determination period. For self-insured plans, it is actuarially determined or based on past cost.
  • Payment may be required monthly, and the plan may not require payment more frequently.

Payment deadlines:

  • 45 days from the date of election for the first payment, which must cover the period from the loss of coverage.
  • 30-day grace period for each subsequent monthly payment.
  • Insignificant shortfall. If a payment is short by an insignificant amount — the lesser of $50 or 10% of the required amount — the plan must either accept it as full payment or notify the beneficiary and allow a reasonable period (at least 30 days) to pay the difference.

Plans may not require payment during the election period, and may suspend coverage pending payment provided coverage is reinstated retroactively once payment is made. Many administrators do exactly that, and providers should be told the claim status is pending rather than denied.

Early termination is permitted only for:

  • Failure to pay timely;
  • The employer ceasing to maintain any group health plan;
  • The beneficiary becoming covered under another group health plan after electing (with limits where the other plan has a preexisting condition exclusion that applies, now largely inapplicable post-ACA);
  • The beneficiary becoming entitled to Medicare after electing;
  • Cause that would permit termination of a non-COBRA participant, such as fraud; or
  • Expiration of the maximum period.

Note the sequencing on other coverage and Medicare: termination is permitted only if the other coverage or Medicare entitlement begins after the election. A beneficiary already enrolled in other coverage at the time of election may still elect COBRA.

Open enrollment and plan changes. Qualified beneficiaries have the same rights as active employees to change plan options at open enrollment, and to add dependents under HIPAA special enrollment rules — a new spouse or newborn may be added, though only the original qualified beneficiaries have independent election rights.

COBRA in context

Severance agreements. Employers frequently agree to pay the COBRA premium for a period. Points to get right:

  • Say precisely what is being paid — the employer's share, the full premium, or a taxable lump sum equal to it — and for how many months.
  • The employee still must elect. An employer subsidy does not substitute for an election, and a released employee who never elected has no coverage regardless of what the agreement says.
  • Tax treatment. Direct payment of premiums for a former employee is generally excludable from income; a cash payment is taxable wages. A subsidy structured as a taxable lump sum is simpler administratively and more expensive to the employee.
  • Nondiscrimination. Subsidies for selected individuals in a self-insured plan raise issues under IRC § 105(h), and for insured plans under the ACA's nondiscrimination provision (enforcement of which has been deferred pending regulations).
  • The maximum period is not extended by a subsidy. Eighteen months is eighteen months.

The ACA marketplace. Loss of employer coverage is a special enrollment event permitting marketplace enrollment within 60 days. For many former employees, a subsidized marketplace plan costs far less than 102% of a group premium. Employers should say so in the separation materials — it is helpful, it is accurate, and it reduces the plan's COBRA claims experience. Note that electing COBRA does not forfeit the ability to move to the marketplace later, but a voluntary drop of COBRA mid-period is generally not a special enrollment event, while exhausting COBRA is.

Medicare. An individual who does not enroll in Medicare Part B when first eligible because they have COBRA coverage faces a late enrollment penalty, because COBRA is not "coverage based on current employment." This is a genuine and expensive trap, and it should be flagged in materials provided to Medicare-eligible individuals.

Mergers and acquisitions. COBRA obligations for M&A qualified beneficiaries follow specific rules: in a stock sale, the buyer's group generally assumes the obligation because the entity continues; in an asset sale, the seller's plan retains the obligation if the seller continues to maintain a group health plan, and the buyer's plan may assume it if the seller ceases to do so and the buyer continues the business operations without interruption. Address this expressly in the purchase agreement — it is a real liability and it is regularly overlooked.

The surrounding obligations

COBRA lives inside a broader compliance structure sharing the same administrative machinery.

ERISA plan documents. Every group health plan must have a written plan document and must furnish a summary plan description to participants within 90 days of coverage and every five years thereafter (or ten if unchanged). A summary of material modifications is required within 210 days after the plan year of a change, or 60 days for a material reduction in group health benefits. Insurance certificates are not plan documents, and the most common finding in a DOL health plan audit is that the employer has certificates and booklets but no plan document and no compliant SPD — a wrap document solves this inexpensively.

Form 5500. Required for plans with 100 or more participants at the beginning of the plan year, due seven months after plan year end with a two-and-a-half-month extension. A Summary Annual Report must be furnished to participants. Small unfunded, fully insured plans are generally exempt.

Fiduciary duties. A group health plan is an ERISA plan, and the people selecting vendors and paying fees are fiduciaries. The Consolidated Appropriations Act, 2021, added a compensation disclosure requirement: brokers and consultants expecting $1,000 or more must disclose their direct and indirect compensation to the plan fiduciary, who must evaluate whether the arrangement is reasonable. Document that evaluation, because litigation over health plan fees — following the pattern established in the retirement plan context — has begun.

Transparency and related requirements. Machine-readable files of in-network rates and out-of-network allowed amounts; an internet-based price comparison tool; the gag clause prohibition attestation, filed annually, certifying that the plan's contracts do not restrict access to cost and quality data; and the No Surprises Act protections, including balance billing limits for emergency and certain non-emergency services, the independent dispute resolution process, continuity of care, and provider directory requirements. These fall on the plan, and self-insured employers cannot assume the third-party administrator handles them without a contractual commitment.

HIPAA. Both the portability rules — special enrollment for loss of other coverage, marriage, birth, adoption, and Medicaid/CHIP events, generally within 30 days (60 for Medicaid/CHIP) — and the privacy and security rules, which apply to the plan and require a notice of privacy practices, a business associate agreement with each vendor, and administrative separation between the plan and the employer's HR functions.

Mental health parity. The Mental Health Parity and Addiction Equity Act requires parity in financial requirements and treatment limitations, and the CAA added a requirement that plans perform and document a comparative analysis of any nonquantitative treatment limitations, available to regulators on request. Enforcement has been active and the analyses regulators have received have frequently been found inadequate.

Section 125 cafeteria plans. A written plan document is required, elections must be irrevocable absent a permitted change in status, and nondiscrimination testing applies. A plan operating without a document loses the pre-tax treatment for everyone.

ACA employer mandate. An applicable large employer — 50 or more full-time and full-time-equivalent employees in the prior year — must offer minimum essential coverage providing minimum value and that is affordable to at least 95% of full-time employees and their dependent children, or face an assessment under IRC § 4980H. Affordability is measured against a percentage of household income, indexed annually, with three safe harbors (W-2, rate of pay, and federal poverty line). Reporting on Forms 1094-C and 1095-C is required, with furnishing to employees and filing with the IRS, and penalties for late or incorrect returns are substantial.

Building the administration

Insource or outsource. Most employers use a third-party COBRA administrator, and it is generally the right decision — the notices, deadlines, premium collection, and record retention are exactly the kind of repetitive process a specialist does better and more cheaply.

But outsourcing does not transfer liability. The plan administrator — usually the employer — remains responsible under ERISA. Litigation names the employer, and the defense depends on the employer's ability to show that the vendor performed.

What the vendor agreement must include:

  • The specific notices the vendor will send, using which templates, and a commitment to update them for legal changes.
  • Timing commitments tied to the statutory deadlines.
  • The data feed — how and how quickly the employer transmits qualifying events, and what happens if the feed fails.
  • Proof of mailing retained and producible, with the method used.
  • Address handling, including what the vendor does with returned mail and how it obtains updated addresses.
  • Record retention for at least six years, and delivery of records on termination of the relationship.
  • Indemnification for the vendor's failures, backed by insurance, with the limit stated.
  • Audit rights, exercised.
  • Reporting — a monthly report of events transmitted, notices sent, elections received, and premiums collected, reviewed by someone at the employer.

What the employer must do regardless:

  • Transmit qualifying events promptly. The 30-day employer notice deadline is the employer's, and a payroll feed that runs monthly will miss it.
  • Maintain accurate addresses, and update them when a departing employee provides a forwarding address.
  • Send the general notice at enrollment, which is frequently missed for new hires.
  • Retain the records, independently of the vendor.

Proof of delivery

Because most COBRA litigation is about whether a notice was received, the method and the record matter more than anything else.

The legal standard is a good-faith effort to comply, and courts have consistently held that actual receipt is not required — the plan must show it sent the notice by a method reasonably calculated to reach the beneficiary.

What satisfies it:

  • First-class mail to the last known address, with a contemporaneous record of what was sent, to whom, at what address, on what date, generated by a system rather than reconstructed.
  • A declaration of the mailing procedure — a description of the routine business practice for generating and mailing notices, which permits an inference of mailing.
  • Certified mail is not required and has a practical drawback: an unclaimed certified letter proves non-receipt, while first-class mail supports a presumption of delivery. Many practitioners send both — first class for the presumption and certified for the record.

What does not satisfy it:

  • Email or an online portal alone, unless the DOL's electronic disclosure safe harbor conditions are met — which require either that the participant has work-related computer access as an integral part of their duties, or affirmative consent, plus notice of the availability and the right to a paper copy. A terminated employee generally does not meet the work-access condition, which is why COBRA notices go on paper.
  • A notice addressed only to the employee where a spouse is a qualified beneficiary at a different address.
  • Reliance on a vendor's assertion, without the underlying record.

An audit checklist

  • Is there a written plan document and a current SPD for every health and welfare benefit, and were they distributed?
  • Is the general notice sent to every new enrollee and spouse within 90 days, with proof?
  • Are qualifying events transmitted to the administrator within 30 days, and is there a report confirming it?
  • Do election notices go out within 44 days of the event, using a current model-based template?
  • Does the template contain every required element?
  • Are notices addressed to spouses and dependents at their known addresses?
  • Is there proof of mailing for every notice, retrievable by name and date?
  • Are notices of unavailability and early termination actually sent?
  • Are premiums set at no more than 102% (150% for disability months), and recalculated annually?
  • Are the 45-day and 30-day payment rules and the insignificant-shortfall rule applied?
  • Are disability and second qualifying event extensions administered, with the beneficiary notice procedures described in the SPD?
  • Are records retained for at least six years?
  • Is the ALE determination run annually, with 1094-C and 1095-C filed and furnished?
  • Is the gag clause attestation filed annually?
  • Is the MHPAEA comparative analysis documented?
  • Has the broker compensation disclosure been received and evaluated, with the evaluation documented?
  • Are HIPAA business associate agreements in place with every vendor touching protected health information?
  • Does the M&A playbook address which plan carries COBRA obligations?

A closing observation

Nothing in this guide is intellectually difficult. It is a set of deadlines, templates, and records, and the entire body of COBRA litigation exists because those things are boring and get delegated to a system nobody audits.

The audit is the whole recommendation. Once a year, pull five terminated employees at random, and trace each one: the event date, the date it was transmitted, the date the notice was generated, what it said, where it went, and what proof exists. If all five are clean, the process works. If any is not, the same defect applies to everyone, and fixing it costs a template revision and a process change rather than a settlement.

That exercise takes an afternoon, and it is the single most valuable thing an employer can do in this area.

Enforcement and remedies

Who enforces. Three agencies share jurisdiction: the Department of Labor for the ERISA notice and disclosure provisions, the Internal Revenue Service for the excise tax provisions, and the Department of Health and Human Services for public sector plans. Participants enforce privately under ERISA § 502.

Statutory penalties. ERISA § 502(c)(1) permits a court, in its discretion, to award up to $110 per day for each day a required notice is not furnished, running from the date of the failure, and the penalty runs per qualified beneficiary. Courts consider prejudice, bad faith, the length of the delay, and the number of requests in setting an amount, and awards range from zero to the maximum.

The excise tax. IRC § 4980B imposes an excise tax of $100 per day per qualified beneficiary (capped at $200 per day per family) for each day of a COBRA failure, subject to minimum amounts for failures not corrected before an audit and to a reasonable-cause exception. Employers are required to self-report on Form 8928, and the failure to self-report is itself a compliance problem that surfaces in due diligence.

Benefits and consequential damages. A beneficiary who did not receive notice and incurred medical expenses may recover the benefits that would have been paid, and courts have awarded out-of-pocket costs and, in some circuits, other appropriate equitable relief under § 502(a)(3). Attorney's fees are available in the court's discretion.

Class actions. The uniformity of the defect is what makes these cases attractive: one deficient template establishes liability for every recipient. Filings have concentrated on notices that omitted the plan administrator's identity or address, that failed to explain how to elect, that used confusing multi-employer or multi-plan language, or that were furnished in a language the workforce could not read where the plan operated in a bilingual environment.

The defense playbook, when a claim arrives: produce the template, the mailing record, and the mailing procedure declaration; establish that the notice was reasonably calculated to reach the beneficiary; establish the absence of prejudice where possible (the beneficiary had other coverage, or would not have elected); and, if the notice was in fact defective, evaluate an early offer of retroactive coverage, which frequently moots the claim for benefits and substantially reduces the penalty exposure.

Recurring administrative problems

The leave-of-absence gap. An employee goes on FMLA leave, the employer maintains coverage as required, and the employee does not return. The qualifying event occurs on the last day of FMLA leave — or earlier, if the employee gives unequivocal notice of not returning — and the eighteen months run from that date, not from the original leave date. Employers frequently miss the event entirely because the employee was never processed as a termination.

The reduction in hours that nobody flagged. A full-time employee moves to part-time and loses eligibility. Payroll processes the schedule change; nobody processes a qualifying event; the employee's coverage terminates and no notice is sent. This is the single most commonly missed qualifying event, and the fix is a rule in the HRIS that any change in status affecting benefits eligibility generates a COBRA event.

Divorce and dependent age-outs. The plan learns of these only if the beneficiary notifies it, and beneficiaries frequently do not. The employer's obligation is to have a stated notice procedure in the SPD, to accept notice when it comes, and to send the election notice within fourteen days. Where the plan learns of a divorce from another source — a name change, a payroll deduction change — process it.

Rehires. An employee rehired during a COBRA period who becomes eligible under the active plan may be dropped from COBRA. Coordinate the two enrollments so the individual is not paying COBRA premiums for coverage they also have as an active employee.

Retiree coverage. Where an employer offers retiree medical, the interaction with COBRA depends on whether the retiree coverage is part of the same plan and whether it is offered on the same terms. Get this analyzed once, in writing, because the answer determines whether a retirement is a qualifying event.

Plan termination. If the employer ceases to maintain any group health plan, COBRA obligations end. If it maintains any, continuation must be offered under an available plan. An employer terminating one plan while maintaining another — dropping a PPO while keeping an HMO — has not ended its obligations.

Employee contributions during unpaid leave. Where an employee remains covered but has no wages from which to deduct, the plan must have a stated policy: pay-as-you-go, catch-up on return, or prepayment. Without one, disputes follow, and a termination for non-payment that was never properly noticed is a COBRA problem layered on an FMLA problem.

Primary authority

COBRA is three statutes with slightly different definitions pointing at the same coverage, plus an ERISA enforcement overlay.

  • 29 U.S.C. §§ 1161–1169 — the ERISA COBRA provisions: qualifying events in § 1163, the notice requirements in § 1166, the continuation period and early termination rules in § 1162, and the small-employer exception in § 1161(b).
  • 26 U.S.C. § 4980B — the excise tax that gives COBRA its teeth: $100 per qualified beneficiary per day, capped at $200 per family per day.
  • 42 U.S.C. §§ 300bb-1 to 300bb-8 — the Public Health Service Act parallel for state and local government plans.
  • 26 C.F.R. §§ 54.4980B-1 to 54.4980B-10 — the operative regulations, including the definition of a group health plan, the disability extension, and the rules for business reorganizations in § 54.4980B-9.
  • 29 C.F.R. § 2590.606-1 to 606-4 — the DOL notice regulations, and the model general and election notices the Department publishes.
  • 29 U.S.C. § 1132(c)(1) — the statutory penalty of up to $110 per day for failing to furnish a required notice on request, the most common private claim.
  • 29 U.S.C. § 1024(b) and 29 C.F.R. § 2520.104b-1 — SPD delivery, including the electronic disclosure safe harbors.
  • 26 U.S.C. § 4980H and § 6056 — the ACA employer mandate and the Forms 1094-C and 1095-C reporting that interacts with an offer of COBRA.
  • 26 U.S.C. § 9801 and § 9802 (HIPAA portability) — special enrollment rights, and the reason a COBRA election is often the wrong advice.

Related articles

This guide is provided for general informational purposes and does not constitute legal advice. COBRA deadlines and notice content requirements are regulatory and detailed, state continuation laws differ, and ACA reporting thresholds and affordability percentages are indexed annually. Consult qualified employee benefits counsel before modifying a plan or a notice process.