Fiduciary Intelligence
July 21, 2026

Fiduciary-Grade Healthcare Operations: A Plan Guide

Abhishek Ghosh

TABLE OF CONTENTS

Fiduciary-grade healthcare operations are the claims oversight, documentation and governance practices a self-funded plan sponsor uses to meet ERISA's prudent expert standard. This includes independent claims audits, documented TPA performance reviews and dependent eligibility checks, rather than relying on a TPA's self-reported accuracy numbers.

In September 2025, Aetna and Optum finalized an $8.4 million settlement over fabricated billing codes that had inflated member costs for nearly a decade before litigation forced disclosure. The case started with one retired plan member who noticed a pattern nobody else was checking.

Most self-funded plan sponsors never look closely enough to find that pattern on their own plan, and industry data suggests TPA error rates run between 1% and 10% of processed claims, depending on the audit methodology used. For a plan paying $20 million a year in claims, that range represents anywhere from $200,000 to $2 million in errors that nobody is actively hunting for.

Key Takeaways
The core problem: Most self-funded health plans independently review fewer than 5% of claims, relying primarily on TPA self-reported accuracy instead of independent verification.
The fiduciary exposure: ERISA Section 404 places the responsibility for prudent oversight on the plan sponsor, not the TPA, regardless of who processes the claims.
The dollar impact: Comprehensive independent claims audits typically recover 1% to 3% of annual claims spend, according to industry benchmarks.
The fix: Build fiduciary-grade healthcare operations through documented, ongoing and independent claims oversight rather than relying on a once-every-few-years audit.
The trend: Regulators and plaintiffs' firms are increasingly applying the 401(k) fee-litigation playbook, which has produced more than $10 billion in settlements, to the oversight of employer-sponsored health plans.
Claims accuracy is only one part of fiduciary responsibility. Self-funded employers increasingly need independent verification, documented oversight and a repeatable governance process to reduce financial leakage, strengthen ERISA compliance and withstand growing regulatory and litigation scrutiny.

What Are Fiduciary-Grade Healthcare Operations

Fiduciary-grade healthcare operations are the documented, independently verified claims oversight processes a plan sponsor uses to satisfy ERISA's prudent expert standard, rather than the minimum administrative reporting a TPA provides by default. Most plan sponsors assume their TPA's self-reported accuracy rate reflects reality. It often does not.

A TPA's administrative services agreement typically guarantees financial and payment accuracy in the 98% range. Independent audits regularly find actual accuracy closer to 96% to 97%, a gap that sounds small until it is multiplied across a plan paying eight or nine figures in annual claims. The difference between "TPA-reported" and "independently verified" is the entire fiduciary question.

Fiduciary-grade operations are not a single product or vendor. They are a standing practice: audit cadence, documentation, and a governance record that shows the plan sponsor acted as a prudent expert would, consistent with the standard set out in ERISA Section 404.

Why the Oversight Gap Exists

The oversight gap exists because TPAs have no direct financial stake in the plan's cost outcomes, and most plan sponsors lack the internal expertise to audit claims data themselves. A TPA is paid a fee to process claims, not a percentage of savings, so accuracy beyond the contracted service level agreement carries little upside for the TPA.

Plan sponsors, meanwhile, are often HR or finance leaders managing benefits as one responsibility among many. Building the coding expertise needed to catch upcoding, unbundling, or duplicate billing in-house is rarely realistic for a mid-size employer.

Restrictive audit clauses compound the problem. Many TPA contracts historically limited the number of claims a sponsor could audit, barred extrapolation of findings, or restricted which outside firms could perform the audit, though state laws such as Maine's L.D. 1906, effective for contracts issued or renewed after January 1, 2026, are starting to prohibit those restrictions.

The Real Cost of Skipping Fiduciary-Grade Oversight

Skipping independent claims oversight costs plans real money and creates fiduciary liability that follows the plan sponsor personally. A full-scope claims audit with 100% review, rather than a sampled TPA self-audit, typically recovers between 1% and 3% of annual claims spend, based on industry-reported audit outcomes.

On the enforcement side, the Department of Labor's Employee Benefits Security Administration recovered $1.4 billion for retirement, health, and welfare plans in fiscal year 2025, with $714.4 million of that tied directly to civil enforcement actions. EBSA closed 878 civil investigations that year alone, a volume that signals oversight failures are common, not rare.

Litigation risk is following the same curve. The 401(k) excessive-fee lawsuit model, which produced more than $10 billion in settlements over the past decade, is now being applied to health plan administration, with plaintiffs' firms using DOL enforcement patterns as a roadmap for building breach-of-fiduciary-duty claims against plan sponsors.

What's Actually Happening Behind the Scenes

Sampled Audits Miss Most of the Plan

A standard TPA audit typically reviews a stratified sample of 250 to 400 claims out of hundreds of thousands processed annually, then extrapolates an overall accuracy score from that small slice. The unreviewed remainder, often more than 95% of total claims, never gets examined at all.

Coding Errors Hide in High-Dollar Claims

Upcoding, unbundling, and duplicate billing tend to concentrate in complex, high-dollar claims, exactly the claims a small random sample is least likely to catch. Specialty pharmacy and inpatient facility claims carry disproportionate risk for this reason.

Dependent Eligibility Drifts Without Anyone Noticing

Ex-spouses, aged-out children, and other ineligible dependents routinely remain on plan rolls for years because eligibility verification is rarely built into ongoing claims workflows. Each ineligible dependent represents ongoing claims spend the plan should never have paid.

Automated Adjudication Approves Errors at Scale

A growing share of claims are approved through automated adjudication with no human review, which processes errors just as efficiently as it processes legitimate claims. Duplicate claims and coordination-of-benefits failures are especially prone to slipping through automated systems undetected.

Why Current Approaches Aren't Enough

Most plans still treat claims oversight as a periodic compliance task instead of an ongoing operational discipline. The table below shows how that status quo compares with a fiduciary-grade approach.

Dimension Status Quo Approach Fiduciary-Grade Approach
Audit Frequency Once every 2 to 3 years Continuous or quarterly review
Claims Reviewed Sampled (250 to 400 claims) 100% claims review using analytics
Auditor Selection TPA-recommended or TPA-owned firm Independent firm with no TPA affiliation
Documentation Informal and rarely retained Board minutes, committee charters and retained audit reports
Dependent Eligibility Reviewed sporadically, if at all Ongoing, separate audit workstream
Contract Terms Restrictive audit clauses are common Unrestricted audit rights with negotiated performance guarantees

How to Build Fiduciary-Grade Healthcare Operations

1
Commission an Independent Claims Audit
Engage an audit firm with no ownership, referral or financial relationship with your TPA. Require a comprehensive review of 100% of claims using analytics instead of relying on a limited statistical sample.
2
Strengthen Your Audit Rights
Review your administrative services agreement and remove restrictive audit clauses wherever possible. Ensure the plan can audit any claim, at any time, using any qualified independent firm, while eliminating unnecessary limitations on recoveries.
3
Separate Eligibility Audits
Treat dependent eligibility verification as its own recurring audit workstream instead of combining it with claims review. Many employers recover significant savings within months by identifying ineligible dependents early.
4
Document Every Oversight Decision
Preserve more than audit findings. Maintain committee minutes, board documentation, governance records and retained audit reports that clearly demonstrate a prudent oversight process to regulators, auditors and potential litigants.
5
Negotiate Outcome-Based TPA Guarantees
Move beyond service-level metrics such as processing speed and call-center performance. Tie TPA guarantees to independently verified financial accuracy and measurable claims performance.
6
Create an Ongoing Oversight Calendar
Replace infrequent audits with a structured monthly or quarterly review calendar. Regular oversight creates continuous accountability and establishes a documented fiduciary process that stands up to regulatory and legal scrutiny.
Fiduciary-grade healthcare operations are built through continuous oversight, independent verification and documented governance. Together, these practices improve claims accuracy, reduce financial leakage and create a defensible record of prudent fiduciary decision-making under ERISA.

Red Flags That Signal Your Plan Needs This Now

1
Commission an Independent Claims Audit
Engage an audit firm with no ownership, referral or financial relationship with your TPA. Require a comprehensive review of 100% of claims using analytics instead of relying on a limited statistical sample.
2
Strengthen Your Audit Rights
Review your administrative services agreement and remove restrictive audit clauses wherever possible. Ensure the plan can audit any claim, at any time, using any qualified independent firm, while eliminating unnecessary limitations on recoveries.
3
Separate Eligibility Audits
Treat dependent eligibility verification as its own recurring audit workstream instead of combining it with claims review. Many employers recover significant savings within months by identifying ineligible dependents early.
4
Document Every Oversight Decision
Preserve more than audit findings. Maintain committee minutes, board documentation, governance records and retained audit reports that clearly demonstrate a prudent oversight process to regulators, auditors and potential litigants.
5
Negotiate Outcome-Based TPA Guarantees
Move beyond service-level metrics such as processing speed and call-center performance. Tie TPA guarantees to independently verified financial accuracy and measurable claims performance.
6
Create an Ongoing Oversight Calendar
Replace infrequent audits with a structured monthly or quarterly review calendar. Regular oversight creates continuous accountability and establishes a documented fiduciary process that stands up to regulatory and legal scrutiny.
Fiduciary-grade healthcare operations are built through continuous oversight, independent verification and documented governance. Together, these practices improve claims accuracy, reduce financial leakage and create a defensible record of prudent fiduciary decision-making under ERISA.

The ROI of Doing It Right

Independent, full-scope claims audits typically recover 1% to 3% of annual claims spend in direct overpayment findings, and dependent eligibility audits frequently pay for themselves within months of completion.

Beyond direct recovery, fiduciary-grade documentation is itself a form of risk transfer. A plan sponsor that can produce board minutes, audit reports, and a documented TPA review process has evidence of the prudent expert standard that ERISA requires, which matters considerably if EBSA or a plaintiff's firm ever comes asking.

Think of it the way a building owner thinks about fire code compliance. The inspection itself does not prevent every fire, but the documented compliance record is what protects the owner when something goes wrong anyway. Claims audit documentation functions the same way for plan fiduciaries.

Conclusion and Next Steps

Fiduciary-grade healthcare operations are becoming the baseline expectation, not a differentiator, as EBSA enforcement activity and health plan litigation both continue climbing. Plan sponsors that wait for a regulator or a plaintiff's attorney to ask the first question have already lost the advantage of showing a prudent, documented process.

Start with an independent audit scoped to review all claims, not a sample, and build the documentation habit alongside it.

Frequently Asked Questions

What does "fiduciary-grade" mean for a health plan?

It means claims oversight and documentation practices that meet ERISA's prudent expert standard, not just a TPA's minimum reporting.

Who is legally responsible for claims accuracy on a self-funded plan?

The plan sponsor, under ERISA Section 404, regardless of which TPA processes the claims.

How often should a self-funded plan conduct a claims audit?

Independent audits should happen continuously or quarterly, not once every two to three years.

What percentage of claims contain errors?

Industry-documented TPA error rates range from roughly 1% to 10%, depending on audit scope and methodology.

How much money can a claims audit typically recover?

Full-scope, 100% claims audits typically recover 1% to 3% of annual claims spend.

Can a TPA restrict how a plan sponsor audits its own claims?

Some contracts historically did, though new state laws are increasingly prohibiting these restrictions.

Should a plan sponsor use the TPA's recommended audit firm?

No. Independent firms with no ownership or referral ties to the TPA reduce conflict-of-interest risk.

What is the fastest way to reduce fiduciary risk right now?

Document the plan's governance process, including committee minutes and retained audit reports, alongside commissioning an independent audit.