.jpeg)
Pharmacy data oversight means using your plan’s prescription claims to check that your PBM prices, pays and reports claims as your contract requires. Under ERISA, self-funded plan sponsors must carefully monitor service providers and make sure their compensation is reasonable. Reviewing detailed pharmacy claims regularly and recording the results helps fiduciaries show they met that responsibility.
The three largest pharmacy benefit managers handled nearly 80 percent of the roughly 6.6 billion prescriptions filled in the United States in 2023, according to the Federal Trade Commission. Your self-funded plan probably uses one of them.
Could you prove to a regulator this week that your PBM priced every claim according to your contract? Pharmacy data oversight helps you answer yes, and the Department of Labor is creating rules that expect you to have that proof.
What Pharmacy Data Oversight Means for a Self-Funded Plan
Pharmacy data oversight means regularly checking your plan’s prescription claims against your PBM contract and plan documents. A PBM summary report shows what the vendor chooses to share, while detailed claim data shows what your plan actually paid. Many sponsors assume an annual report or discount guarantee provides the same level of detail.
Relying on a summary report is like checking your bank balance without reading the statement. The total may look right while individual charges are wrong. A pricing guarantee can be met on average even when some claims are priced incorrectly, and a summary report will not show you which ones.
The responsibility falls on sponsors because self-funding means every claim dollar comes from the plan. The KFF 2025 Employer Health Benefits Survey found that 67 percent of covered workers were in self-funded plans, including 80 percent at larger firms. Stop-loss coverage limits major losses but does not check whether your PBM priced everyday claims correctly.
Why the Oversight Gap Exists
The gap exists because the data, the contract terms and the internal expertise all sit outside the sponsor's reach. The Department of Labor says fiduciaries often cannot see the full payments that PBMs and their affiliates receive from drug manufacturers and pharmacies. That visibility problem is structural, so it does not point to bad intent by any one party.
Contracts add a second barrier. A benefits advisory firm notes that the audit rights DOL is proposing go beyond what most PBMs currently agree to. Sponsors who signed years ago may hold narrower rights than they assume, which matters most when a problem surfaces.
Internal capacity is the third barrier. Benefits committees often lack a pharmacist or data analyst, and many TPAs lack dedicated pharmacy analytics tools. Renewal talks then focus on headline discounts instead of claim behavior.
The Real Cost of Skipping Pharmacy Oversight
The cost shows up in plan dollars first. An FTC staff report found that pharmacies affiliated with the three largest PBMs generated more than $7.3 billion above estimated acquisition cost on specialty generic drugs from 2017 to 2022. PBM industry representatives have disputed the report's accuracy. The full findings are in the FTC's January 2025 release.
Legal exposure is the second cost. ERISA Section 409 makes a breaching fiduciary personally liable to restore plan losses. Recent suits against Wells Fargo and Johnson & Johnson allege that sponsors failed to manage their pharmacy benefit prudently, and a similar case targets JPMorgan Chase.
Two of those suits were dismissed for lack of standing, while a New York federal court let parts of the JPMorgan case proceed in March 2026. Standing rulings say nothing about whether the sponsors' oversight met ERISA's prudence standard. The Wells Fargo plaintiffs alleged, based on Form 5500 data, that the plan paid over $25 million in administrative fees to its PBM.
What Is Actually Happening Behind the Scenes
Spread Pricing
Spread pricing occurs when a PBM bills the plan more for a drug than it reimburses the pharmacy and keeps the difference. The FTC estimated that the three largest PBMs earned $1.4 billion this way on specialty generics. A plan cannot see that gap unless someone compares plan-paid and pharmacy-paid amounts claim by claim.
Affiliated Pharmacy Markups
Affiliated pharmacy markups arise when a PBM directs prescriptions to a pharmacy it owns and pays that pharmacy more than unaffiliated ones. The FTC found the largest PBMs reimbursed their own pharmacies at higher rates on nearly every specialty generic it examined. Those affiliated pharmacies captured 68 percent of specialty drug dispensing revenue in 2023, up from 54 percent in 2016.
Rebate Gaps and Adjudication Errors
Rebate leakage happens when contract terms allow some manufacturer payments to stay outside the rebates your plan should receive. A PBM may advertise a strong discount while the rebate definition excludes many of the dollars the plan could otherwise receive. Adjudication errors are more straightforward, such as paying claims for uncovered drugs or paying more than the contract allows. Milliman notes that pharmacy claims audits can review 100 percent of claims to identify these types of recurring problems.
Why Current Approaches Are Not Enough
Annual PBM reviews can fall short because they may focus on the vendor’s summary instead of the underlying claims. The DOL proposed a rule on January 29, 2026, under ERISA Section 408(b)(2) that would require PBMs to provide initial and semiannual disclosures about their compensation and financial arrangements. The proposal would also give plan fiduciaries the right to audit those disclosures. The DOL fact sheet explains how the proposal would work.
The final rule could change, but the direction is clear. Congress has also acted. The Consolidated Appropriations Act, 2026 adds new PBM reporting, disclosure and compensation requirements that generally apply to plan years beginning on or after August 3, 2028, or January 1, 2029 for calendar-year plans.
Waiting for those dates would leave two full plan years without a better process. The table shows what closes that gap.
How to Fix It in Seven Steps
A sound oversight routine starts with data you already own and a calendar you can keep. These seven steps build the evidence a fiduciary needs.
Red Flags That Your Plan Is Exposed
Seven warning signs suggest your pharmacy oversight would struggle under scrutiny. Any one of them justifies a closer look this quarter. Several together suggest the committee is relying on trust instead of evidence.
The ROI of Doing It Right
The return comes from recovered dollars, better contract terms and a defensible fiduciary record. Segal reported that a large county public employee plan covering 45,000 people recovered $5.4 million through PBM audits, with annual spend above $550 million. That recovery equals roughly 1 percent of total spend.
No public benchmark sets a typical recovery rate. Results depend on contract language, drug mix and how much data the PBM releases. Audit findings can also inform renewal negotiations on pricing, rebates and audit terms.
Documentation is the fiduciary protection. The DOL proposal would give relief to fiduciaries who reasonably relied on PBM disclosures and took corrective action after finding noncompliance, though the PBM would not share that relief. A written record of what you tested and what you did is what supports that position.
Conclusion and Next Steps
Pharmacy data oversight turns a broad fiduciary duty into a routine you can prove on demand. Sponsors who begin now will hold a dated record long before any final rule or statute reaches their plan year. That record is what a committee, an auditor or an EBSA investigator will ask to see first.
Start with three actions this quarter. Request claim-level files from your PBM or TPA. Read your audit clause carefully, then add pharmacy to the next committee agenda.
If you want an independent view, schedule a pharmacy claims review with our team. We test your claim file against your contract and deliver findings your committee can act on.
Frequently Asked Questions
Does ERISA require self-funded sponsors to monitor their PBM?
Yes. ERISA Section 404(a)(1)(B) requires prudent administration, and Section 408(b)(2) requires reasonable service contracts with reasonable compensation.
Is the DOL's PBM fee disclosure rule final?
Not at last check. The DOL proposed it January 29, 2026 and extended comments to April 15. Confirm current status on DOL.gov.
What data should we request from the PBM?
Claim-level files showing drug, quantity, dispensing pharmacy, plan-paid amount, pharmacy-paid amount, fees and rebate allocation for every prescription.
What does a pharmacy claims audit test?
A pharmacy claims audit checks each claim against contract pricing and plan coverage rules to find overpayments and errors.
How often should we review pharmacy claims?
Review quarterly for trends and audit independently once a year. That cadence surfaces drift before renewal talks begin.
Can our TPA handle oversight for us?
A TPA can supply data and analysis, but you remain responsible for monitoring the work. Pairing a TPA with an independent auditor adds objectivity.
Can the DOL investigate our health plan?
Yes. EBSA has authority to investigate ERISA-covered health plans, including how fiduciaries selected and monitored service providers.
What if the PBM refuses to share claim data?
Review your contract audit clause first. Escalate through counsel or your consultant and document every request. Refusal is itself a finding worth recording.
