TPA administration and fiduciary protection are not the same thing. A TPA processes and pays claims under contract, but ERISA Section 404 keeps fiduciary responsibility with the plan sponsor. Signing a TPA contract does not transfer that duty. Only active, documented oversight of claims activity satisfies the prudent expert standard.
Stop Mistaking TPA Administration for Fiduciary Protection
Most self-funded plan sponsors sign a service agreement with a TPA and treat the relationship as a handoff. Once claims start getting paid, the assumption is that someone else is now watching the store. Independent research on claims administration tells a different story.
TPA error rates on processed claims commonly run between 1% and 6% of total volume, and on a plan spending $20 million a year on medical claims, even a conservative 2% error rate is $400,000 in avoidable losses. Fiduciary protection for self-funded health plans does not come from the TPA contract. It comes from what the plan sponsor does after the contract is signed.
What TPA Administration Actually Covers
Administering a health plan and protecting it as a fiduciary are two different jobs, and most TPA contracts only cover the first one. A TPA agreement typically spells out claims processing timelines, network access and customer service standards. It rarely includes an obligation to catch every coding error, flag every ineligible dependent or independently verify that billed rates match contracted rates.
Plan sponsors often assume that paying a reputable, well-known TPA is itself a form of due diligence. That assumption is understandable. It is also incomplete under ERISA, where the duty to monitor a service provider cannot be delegated away, even when claims decision authority has been assigned to the TPA.
The result is a structural gap. The TPA handles volume and workflow. The plan sponsor, as the named fiduciary, remains on the hook for verifying that the volume was handled correctly. Nothing in a standard administrative services agreement closes that gap on its own.
Why the Problem Exists
TPAs are built and compensated to process claims at scale, not to flag every dollar that could have been billed more cheaply. Their internal accuracy metrics are typically self-reported, drawn from small samples of their own work, and rarely audited by an outside party before being shared with the plan.
Prompt payment timelines add pressure in the same direction. Most administrative agreements require claims to be paid within 21 to 30 days of receipt, which leaves limited room for a detailed line-item review before a check goes out. Speed and accuracy pull against each other, and speed usually wins by contract design.
Plan sponsors compound the gap by treating the TPA relationship as "set and forget." Committees review premium trends and utilization reports at renewal, but few build a recurring, independent claims review into the plan's operating calendar. Without that cadence, errors accumulate quietly for years.
The Real Cost or Impact
A 2% to 6% error rate sounds small until it is applied to a plan's total claims spend. On a mid-size plan paying $15 million a year in claims, even the low end of that range represents $300,000 moving through the plan incorrectly, year after year, without anyone flagging it. Multiply that across a plan's life span and the number stops looking like a rounding error.
The financial exposure is only part of the picture. In FY 2024, the Department of Labor's Employee Benefits Security Administration recovered nearly $1.4 billion for plans, participants and beneficiaries, a large share of it tied to weak oversight of service providers and plan assets. That is federal enforcement money, not internal audit findings, which means it followed a formal investigation into how a plan was being run.
Self-funded plans are now the dominant funding model in the employer market. KFF's 2025 Employer Health Benefits Survey found that 67% of covered workers are enrolled in self-funded arrangements, rising to 80% at larger firms. That scale means the fiduciary exposure sitting inside unreviewed claims data is not a niche problem. It touches most employer-sponsored health coverage in the country.
What's Actually Happening Behind the Scenes
Sampling Audits Instead of Full Review
Most claims oversight today runs on small statistical samples rather than a full look at every payment. A TPA might review a few hundred claims out of hundreds of thousands processed in a year and extrapolate an accuracy rate from that subset. The math works fine for a general trend line. It does very little to catch the specific overpayment sitting in the other 95% of claims that never got a second look.
Coordination of Benefits Gaps
Coordination of benefits (COB) failures happen when a plan pays as primary on a claim that should have been paid by another carrier first. These errors are common in households with two working spouses or dependents aging onto other coverage. TPAs process COB updates reactively, based on member-submitted information, which means stale COB data can sit in the system for months before anyone notices the plan paid more than it owed.
Dependent Eligibility Drift
Dependent eligibility drift describes ineligible dependents, a divorced spouse, an adult child who aged out, staying on the plan because no one re-verified eligibility after enrollment. Every claim paid on behalf of an ineligible dependent is plan money spent outside the terms of the plan document, which is itself a fiduciary concern independent of the dollar amount involved.
Vendor Accountability and Legal Exposure
Courts have started drawing a sharper line around who actually carries fiduciary risk in these relationships. In *Tiara Yachts, LLC v. Blue Cross Blue Shield of Michigan*, the Sixth Circuit held that functional conduct, not contract labels, determines fiduciary status and liability. That precedent matters for any plan sponsor assuming that a well-worded services agreement automatically shields them from claims-related fiduciary exposure.
Why Current Approaches Aren't Enough
Renewal-cycle reviews and TPA-provided performance dashboards give plan sponsors a general sense of direction. They rarely provide the kind of documented, independent evidence that would hold up if a participant or the Department of Labor challenged how the plan was overseen.
How to Fix It
Red Flags That Signal the Problem Applies to Your Plan
The ROI of Doing It Right
Independent audits regularly identify overpayments in the 2% to 6% range of total claims spend, and those recoveries frequently offset the cost of the audit itself within the first review cycle. For a plan spending $20 million annually, recovering even the low end of that range translates into hundreds of thousands of dollars back in plan assets.
The ongoing value compounds once oversight becomes routine instead of occasional. A plan that reviews claims quarterly catches errors before they repeat across multiple pay cycles, which lowers the total leakage over time rather than just the one-time recovery from a single audit.
The fiduciary protection component is harder to price but just as real. Documented, independent oversight gives the plan sponsor evidence of a prudent process, which is the standard ERISA actually asks fiduciaries to meet. That documentation is the difference between a defensible governance record and an unverified assumption that the TPA had it covered.
Conclusion and Next Steps
TPA administration keeps claims moving. Fiduciary protection for self-funded health plans only comes from what a plan sponsor does to verify that movement is accurate, documented and reviewed on a defined schedule. Those are not the same function, and treating them as interchangeable leaves plan assets and personal fiduciary exposure sitting unmonitored.
The next step is straightforward: schedule an independent claims audit, formalize the benefits committee's charter, and build documentation habits before a complaint or investigation forces the issue. Talk to an independent claims audit specialist.
Frequently Asked Questions
Does hiring a TPA transfer fiduciary liability to them?
No. ERISA keeps the duty to monitor service providers with the plan sponsor, even when claims decisions are delegated to the TPA.
What percentage of claims do TPAs typically get wrong?
Industry-documented error rates on processed claims generally fall between 1% and 6%, depending on the source and plan complexity.
How often should a self-funded plan conduct an independent claims audit?
At least annually, with many advisors recommending quarterly or ongoing monitoring for larger plans.
Can a plan sponsor be sued personally for fiduciary breaches?
Yes. Individuals who exercise discretion over plan administration can face personal liability for breaches of fiduciary duty under ERISA.
Is a sampling audit from the TPA enough to satisfy fiduciary duty?
Sampling audits provide limited assurance. Independent, broader reviews offer stronger documentation of a prudent oversight process.
What is coordination of benefits and why does it matter for audits?
Coordination of benefits (COB) determines which plan pays first when a person has multiple coverages. Errors here often cause plans to overpay.
Does the TPA's size or reputation reduce fiduciary risk?
Not directly. Fiduciary risk is tied to oversight practices and documentation, not the TPA's brand or market share.
What should a benefits committee document to show prudent process?
Meeting minutes, audit reports, corrective action plans and vendor monitoring records, generally retained for at least six years.
