Fiduciary oversight in healthcare is becoming the next 401(k) lawsuit wave because self-funded plan sponsors face the same ERISA fiduciary duties that drove two decades of retirement plan litigation. Courts are now applying those standards to TPA contracts, PBM fees, and claims payment accuracy, and DOL enforcement is following the same path.
In 2024, Ann Lewandowski sued Johnson & Johnson, alleging its health plan fiduciaries mismanaged the prescription drug program and cost employees millions in higher premiums and out-of-pocket costs. A New Jersey court dismissed the case twice on standing grounds, most recently in November 2025.
But one month before that dismissal, the Sixth Circuit revived a nearly identical theory in Tiara Yachts v. Blue Cross Blue Shield of Michigan, ruling that a TPA can be held to ERISA fiduciary standards for how it processes and recovers overpaid claims.
Two courts, two different outcomes, one unmistakable signal: the legal theory that reshaped retirement plans twenty years ago has arrived in group health.
What "Fiduciary Oversight" Actually Means for a Self-Funded Health Plan
A self-funded health plan sponsor is a fiduciary the moment it exercises discretion over plan assets, and that duty cannot be delegated away by hiring a TPA. Most benefits leaders assume oversight is the TPA's job because the TPA processes claims, negotiates rates, and issues the reports the plan committee reviews each quarter. That assumption is where the fiduciary exposure begins.
ERISA Section 404 requires a named fiduciary to act with the care, skill, and diligence of a prudent expert, solely in the interest of participants. Hiring a competent TPA satisfies part of that duty. Monitoring the TPA's actual performance, not its self-reported accuracy scores, is the other part, and it is the part most plans skip.
The Tiara Yachts case makes the stakes concrete. The Sixth Circuit found that Blue Cross Blue Shield of Michigan could be a functional fiduciary because it controlled how claims were paid and how overpayment recoveries were split, not because a contract labeled it that way.
Why This Gap Exists Across So Many Plans
Health plan fiduciary duty developed later and more quietly than retirement plan duty. The 401(k) fee cases that started around 2006 forced plan committees to build documented, repeatable review processes for recordkeeper fees and fund lineups.
No equivalent discipline took hold for health plans, largely because TPA reporting looked authoritative enough to satisfy a busy HR or finance leader. Sixty-seven percent of covered workers are now in self-funded plans, according to the 2025 KFF Employer Health Benefits Survey, and at firms with 200 or more employees that figure reaches 80%, so the exposure is concentrated exactly where committees tend to assume the TPA has it handled.
Committees also rarely rotate or renegotiate audit rights when they renew a TPA contract. Restrictive audit clauses, limited sample sizes, and carrier-selected auditors are common, and few benefits teams push back because no one has flagged the gap as a liability issue yet.
The Real Cost of Skipping Independent Oversight
Unreviewed claims translate directly into plan asset losses, and those losses accrue every payment cycle, not just in a bad year. Industry-documented TPA error rates run from 1% to 3% on the low end and up to 5% to 12% when independent auditors review 100% of claims rather than a sample.
A regional manufacturer with 1,400 employees found $812,000 in overpayments across 18 months once it ran an independent audit, including a duplicate $47,000 inpatient claim and 63 ineligible dependents still active on the plan.
The Department of Labor's EBSA recovered $1.4 billion for retirement, health, and welfare plans in fiscal year 2025, with $714.4 million coming from enforcement actions tied to 556 closed civil investigations. That total does not include the far larger pool of overpayments plan sponsors never identify because their contracted audit covers a few hundred claims out of hundreds of thousands.
Cost containment through claims oversight is not a rounding error. It is comparable to finding a leak in a pipe that has been running for years. The plan does not notice the loss on any single bill, but the cumulative drain shows up in renewal premiums the whole workforce eventually pays.
What's Actually Happening Behind the TPA's Reporting
Self-Reported Accuracy Scores Don't Match Independent Findings
TPAs commonly report financial accuracy near 96% to 97% against their own service level agreements. Independent post-payment reviews that examine the full claims file, rather than a carrier-selected sample, routinely find meaningfully higher error rates because the sampling methodology itself is built to minimize findings.
Sample Sizes Are Too Small to Catch Systemic Errors
Standard ASO audit clauses often cap the review at 300 to 350 claims per year. A peer-reviewed comparison of 100% claims audits against random-sample audits found the sampling approach missed error totals ranging from $200,000 to $750,000 that a full review caught.
Cross-Plan Offsetting and Spread Pricing Blur Whose Money Moves Where
In Peterson v. UnitedHealth Group, the Eighth Circuit found that using one employer's plan assets to offset another employer's overpayment was in tension with ERISA fiduciary duties. Spread pricing, where a TPA bills the plan more than it pays the provider, has been well documented in pharmacy benefit management and is now surfacing in medical claims reviews as well.
Dependent Eligibility Drift Goes Unchecked for Years
Employees change marital status, dependents age out, and COBRA elections lapse, but few plans run a dedicated eligibility audit outside of open enrollment. These reviews are often the fastest-paying audit workstream because ineligible dependents represent pure ongoing cost with no offsetting value.
Why TPA Self-Reporting Isn't Enough Anymore
How to Close the Fiduciary Oversight Gap
Red Flags That Signal Your Plan Is Exposed
The ROI of Independent Oversight Done Right
Plans that run independent claims audits commonly recover the full cost of the audit within the first review cycle, and ongoing monitoring compounds those savings across every subsequent plan year. Dependent eligibility audits alone often pay for themselves within months because every ineligible dependent removed is a recurring cost eliminated, not a one-time recovery.
The fiduciary protection value is harder to price but arguably more important. A documented, repeatable oversight process is the same evidence that helped a health plan sponsor defeat a DOL fiduciary breach claim in prior litigation, because the court found the sponsor had not simply delegated authority and looked away.
Conclusion and Next Steps
The parallel between today's health plan fiduciary exposure and the 401(k) excessive fee wave of the past two decades is not a marketing analogy. It is the same statute, the same duty to monitor, and increasingly the same courts applying settled retirement plan precedent to group health claims. The J&J dismissal shows plaintiffs still face real standing hurdles, but Tiara Yachts and EBSA's 2026 enforcement pivot show the underlying theory is gaining traction, not losing it.
Plan sponsors who wait for a lawsuit to force the issue will be building their prudent process defense after the fact, which is the position no fiduciary wants to be in. Start with a claims audit scope review this quarter, confirm your audit rights before your next renewal, and document the committee's review process going forward.
Frequently Asked Questions
Is my company a fiduciary for our self-funded health plan?
Yes, if you exercise any discretion over plan administration or assets. Most self-funded employers are named fiduciaries under ERISA Section 402.
Can our TPA also be held liable as a fiduciary?
Yes. Courts including the Sixth Circuit in Tiara Yachts have found TPAs can be functional fiduciaries when they control claims payment and recovery decisions.
How often should we audit our health plan claims?
Annual audits are the baseline. Quarterly or continuous monitoring catches errors before they compound across a full plan year.
What is a "prudent expert standard" under ERISA?
It requires fiduciaries to act with the care, skill, and diligence a knowledgeable person would use in managing plan assets, not just good intentions.
Does our TPA's self-reported accuracy rate satisfy our fiduciary duty to monitor?
No. Duty to monitor requires independent verification, not reliance on a service provider's self-graded performance.
What percentage of claims typically contain errors?
Industry estimates range from 1% to 3% under standard sampling, and 5% to 12% when independent auditors review the full claims file.
Is D&O insurance enough to cover a fiduciary breach claim?
Usually not. ERISA Section 409 imposes personal liability on fiduciaries, and standard D&O policies frequently exclude ERISA fiduciary breach claims.
Why are health plan lawsuits increasing now instead of years ago?
Retirement plan litigation matured first and established the legal playbook. DOL enforcement priorities and court rulings like Tiara Yachts are now applying that same scrutiny to health plans.
