Explore Our Blog Library!

A self-funded health plan claims audit is an independent review of paid medical claims that verifies payment accuracy, confirms contract compliance and recovers overpayments. ERISA Section 404 places this oversight duty on the plan sponsor, not the TPA. Most plans review fewer than 5% of claims, leaving the rest unchecked.

A 1,400-employee manufacturer ran its first independent claims audit eighteen months into a new TPA relationship. The review found more than $800,000 in overpayments, including one inpatient claim paid twice and a specialty drug billed well above the contracted rate. None of it had appeared in the TPA's own accuracy reporting.

That gap is not unusual. Industry benchmarks put administrator error rates at 1% to 3% of total claims processed, and most self-funded plans independently review only a small slice of what gets paid. Sixty-seven percent of covered workers, including 80% at large employers, are now enrolled in self-funded plans according to KFF's 2025 Employer Health Benefits Survey, which means the unreviewed portion represents real money moving through systems almost nobody independently checks.

What a Claims Audit Actually Verifies

A claims audit is an independent, line-by-line review of paid medical claims against plan documents, contracted rates and coding rules. Most employers assume this already happens because their TPA reports a high accuracy score every quarter. That figure is usually self-reported and calculated against the TPA's own sample, not an outside standard.

The reality looks different once someone outside the TPA checks the work. Most self-funded employer health plans review fewer than 5% of claims, typically through a stratified sample the TPA selects and grades itself. Grading your own homework produces a different number than an outside reviewer checking the same file.

An audit is not an accusation. It is closer to a financial reconciliation: matching what the plan document promises, what the contract with the provider specifies and what actually got paid.

Audit frequency compounds the problem. It is common for employers to run a full claims audit or provider billing review only once every three years, according to Baker Tilly's analysis of self-funded plan billing reviews. Between those audits, errors accumulate quietly and rarely show up in a quarterly dashboard.

Why the Oversight Gap Exists

The gap exists because TPAs are not the ones bearing financial risk when a claim gets paid wrong. The plan sponsor pays the claim either way, so the administrator has limited financial incentive to catch every error before it goes out the door. That is a structural fact of the outsourcing arrangement, not a statement about any single TPA's intent.

Audit frequency compounds the problem. It is common for employers to run a full claims audit or provider billing review only once every three years, according to Baker Tilly's analysis of self-funded plan billing reviews. Between those audits, errors accumulate quietly and rarely show up in a quarterly dashboard.

Contract language plays a role too. Some administrative services agreements historically limited how many claims a sponsor could audit, who could perform the audit or what data the auditor could access, which narrowed what oversight was even possible.

The Real Cost of an Unreviewed Plan

Unreviewed claims translate directly into dollars the plan never should have paid. Industry benchmarks estimate payment errors typically affect 1% to 3% of total claims dollars, and some comprehensive independent audits identify a wider range depending on plan complexity and TPA type. On a plan paying $20 million a year in claims, even the low end of that range is $200,000 sitting unrecovered.

Think of it like a bank account that is never properly checked. A small error might not seem like much on one transaction, but when thousands of transactions have small errors, the total can become huge.

That is what happens with many healthcare audit findings. It is usually not one big fraud. It is thousands of small errors that nobody was checking for.

The average family health insurance premium is now $26,993. Employers and employees share this cost. When an audit finds and recovers money that was paid incorrectly, that money can help reduce future healthcare costs instead of forcing employers to raise premiums or cut benefits.

What's Actually Happening Behind the Scenes

Coding and Billing Errors

Upcoding, unbundling and duplicate billing are the most common findings in independent audits. A procedure billed at a higher-complexity code than performed, or a bundled service billed as separate line items, both inflate the paid amount without an obvious red flag in a summary report.

Coordination of Benefits Gaps

When a member has coverage under more than one plan, claims should be split according to coordination of benefits rules. Gaps here mean the self-funded plan sometimes pays a share that another payer should have covered.

Why Current Approaches Aren't Enough

Relying solely on the TPA's own reporting leaves the plan sponsor with an incomplete picture, because the reviewer and the reviewed party are the same entity. The table below lays out the practical difference between the status quo and an independent oversight model.

How to Fix It

Red Flags That Signal Your Plan Needs This Now

The ROI of Doing It Right

A comprehensive independent claims audit typically recovers 1% to 3% of annual claims spend in its first year, often more than covering the cost of the audit itself. On a plan spending $30 million annually, that is a recovery range of $300,000 to $900,000 before counting the value of catching future errors sooner.

The fiduciary protection matters as much as the dollar recovery. DOL/EBSA recovered $1.4 billion in FY 2025 and closed 878 civil investigations, with 63% producing monetary or corrective results, and the agency has signaled health plan oversight is a growing FY 2026 focus. A documented, independent audit process is the evidence a plan sponsor needs if that scrutiny ever reaches their plan.

Litigation risk reinforces the same point. Plaintiff firms that spent two decades pursuing excessive-fee claims against 401(k) plans have expanded into health plan cases, including Lewandowski v. Johnson & Johnson and Navarro v. Wells Fargo, both alleging fiduciaries failed to prudently monitor PBM and administrative costs. An audit trail is the difference between a defensible process and an unmonitored one.

Conclusion and Next Steps

Every dollar a self-funded plan pays out should be able to withstand a question: was this claim reviewed, is the payment justified, and can the plan sponsor defend it if asked. Right now, most plans cannot answer that question for the majority of what they pay, because the only review happening is the one the TPA runs on itself.

The fix does not require replacing your TPA relationship. It requires adding an independent layer of oversight, documenting the process, and treating claims accuracy as a fiduciary obligation rather than an assumption. Schedule a claims audit scoping call to see what an independent review would find on your plan.

Frequently Asked Questions

What is a self-funded health plan claims audit?

‍An independent review of paid claims that checks payment accuracy against plan terms, contracted rates and coding rules.

Who is legally responsible for claims accuracy under ERISA?

‍The plan sponsor, under the fiduciary duty in ERISA Section 404, not the TPA that processes the claims.

How often should a self-funded plan be audited?

‍Every twelve to eighteen months, with ongoing quarterly or monthly spot reviews between full audits.

What percentage of claims does a typical TPA review internally?

‍A stratified sample, usually 250 to 400 claims, far short of the full claims population.

How much money does an independent audit typically recover?

‍About 1% to 3% of annual claims spend in the first year, based on industry benchmarks.

Can a TPA restrict how a plan sponsor audits its own claims?‍

Some contracts historically limited audit scope or auditor choice; sponsors should negotiate these restrictions out.

Does an audit create legal protection for plan fiduciaries?

‍Yes. Documented, independent review is core evidence of the prudent process ERISA requires.

What is the difference between a claims audit and dependent eligibility review?

‍A claims audit checks payment accuracy; a dependent eligibility review confirms covered dependents still qualify for the plan.

‍

‍

An ERISA fiduciary breach occurs when a plan sponsor fails to act prudently and solely in participants' interest when managing a health plan, such as failing to monitor a PBM's pricing or negotiate reasonable fees. Recent lawsuits against Johnson & Johnson and Wells Fargo show courts scrutinizing these failures closely, even when claims get dismissed on legal technicalities.

In February 2024, a Johnson & Johnson employee filed a 75-page class action alleging the company let its prescription drug benefit program bleed money through an unmonitored pharmacy benefit manager contract.

Five months later, four Wells Fargo plan participants filed a nearly identical suit, claiming the bank squandered its bargaining power and let Express Scripts overcharge the plan.

In 2025, Illinois recovered $45 million from CVS Caremark after alleging the PBM withheld manufacturer rebates it owed the state's employee health plan. These are not isolated incidents. They are the opening chapters of a litigation wave that mirrors the excessive-fee lawsuits that reshaped 401(k) plan governance a decade ago, and self-funded employer health plans are now the target.

What ERISA Fiduciary Breach Actually Means for a Health Plan

A fiduciary breach happens when the people responsible for running a health plan fail to act with the care, skill and diligence ERISA requires, regardless of whether a lawsuit ever gets filed. Most HR leaders assume fiduciary duty is a retirement plan concept that only applies to 401(k) committees. That assumption is increasingly wrong.

ERISA Section 404 imposes the same prudent expert standard on anyone who exercises discretion over a group health plan's assets or administration. If your organization signs a PBM contract, approves plan design or reviews claims data even occasionally, you likely function as a fiduciary. The exclusive benefit rule adds a second layer, requiring that plan assets be used only to provide benefits and pay reasonable expenses, not to preserve a convenient vendor relationship.

The common misconception is that hiring a reputable TPA or PBM satisfies the duty. It does not. Delegating administration does not delegate the fiduciary's obligation to monitor that vendor's performance on an ongoing basis.

Why the Problem Exists

Health plan fiduciary duty gets overlooked because most plan sponsors treat benefits as an HR function rather than a financial oversight function. The committee structure, meeting cadence and documentation habits that retirement plan fiduciaries built over 20 years of ERISA litigation simply do not exist yet on the health plan side.

PBM and TPA contracts also compound the problem through complexity. Rebate formulas, spread pricing and administrative fee structures are often opaque by design, and few internal teams have the claims data expertise to audit them without outside help.

Finally, self-funded plans grew faster than fiduciary governance kept pace. KFF's 2025 Employer Health Benefits Survey found 67 percent of covered workers are now in self-funded plans, rising to 80 percent at large firms. Many of those plans still run on the oversight habits of a fully insured plan, where the carrier absorbed the risk and the scrutiny.

The Real Cost or Impact

Prescription drug spending is where fiduciary failures show up fastest. KFF found that 36 percent of large firms say drug prices contributed "a great deal" to premium increases in 2025, and the average family premium reached $26,993 that year.

Litigation creates a second layer of cost on top of the original overpayment. The Johnson & Johnson complaint alone was 75 pages and named individual committee members, not just the company. That should concern HR leaders who assume the company will always fully protect them from personal liability.

The Illinois settlement shows that vendor-related payment problems can involve millions of dollars. If similar problems exist across many self-funded employer plans, the total financial impact could be huge.

What's Actually Happening Behind the Scenes

PBM Contracts Nobody Re-Negotiates

Most self-funded plans sign a PBM contract and revisit it only when it expires. The Wells Fargo complaint alleged the company paid Express Scripts administrative fees that "greatly exceeded" what comparable plans paid, a gap that persisted because nobody benchmarked it mid-contract.

Rebates That Never Reach the Plan

Rebate pass-through language sounds protective on paper but is rarely audited in practice. Illinois only uncovered CVS Caremark's shortfall through a formal state investigation into an affiliated rebate aggregator, not through routine contract review.

Formulary and Mail-Order Steering

Both the J&J and Wells Fargo complaints alleged fiduciaries steered participants toward higher-cost mail-order channels and branded drugs without evaluating whether cheaper, clinically equivalent options existed. That is a design choice a committee approved once and never revisited.

No Independent Claims Data Review

In every one of these cases, the plaintiffs' core allegation is not that fiduciaries acted maliciously. It is that nobody with independent authority was checking the PBM's own numbers against outside benchmarks on a recurring basis.

Why Current Approaches Aren't Enough

Most plan sponsors believe their existing TPA or broker relationship already covers this ground. It usually does not, because the entity administering the plan has limited incentive to flag its own pricing.

How to Fix It

Red Flags That Signal the Problem Applies to Your Plan

The ROI of Doing It Right

Independent claims audits typically recover a meaningful share of total plan spend in overpayments and billing errors that routine TPA review misses. On a plan spending $20 million annually, even a modest recovery rate represents a substantial six-figure return.

Beyond recovery, documented fiduciary governance is itself protective. Courts in the Lewandowski and Navarro cases dismissed claims on standing grounds partly because plaintiffs could not tie specific harm to specific fiduciary failures. A plan sponsor with clean documentation is in a materially stronger position if that standing bar shifts in future litigation.

The ongoing savings compound. Fee benchmarking and rebate audits performed annually, rather than once at contract signing, tend to catch cost creep before it accumulates into a multi-year shortfall like the one Illinois uncovered.

Conclusion and Next Steps

Every case examined here traces back to the same gap: nobody independent was checking the numbers. Courts have so far dismissed the highest-profile suits on procedural grounds, but that offers plan sponsors a narrowing window, not a permanent shield. The prudent expert standard doesn't pause while standing law develops.

Start by asking whether your plan could produce, today, a written record of when your PBM contract was last benchmarked and by whom. If the honest answer is "not recently" or "never," that's the gap to close first.

An independent claims audit is the fastest way to establish both the documentation and the cost recovery this article describes.

Frequently Asked Questions

Is an HR director personally liable for ERISA fiduciary breaches?

‍Yes, if they exercise discretion over plan administration. The J&J case named individual committee members, not just the company.

Does hiring a PBM or TPA transfer fiduciary liability to them?

‍No. Delegating administration does not delegate the ongoing duty to monitor that vendor's performance.

Why were the Johnson & Johnson and Wells Fargo lawsuits dismissed?

‍Courts found plaintiffs lacked Article III standing, meaning they hadn't shown concrete, traceable financial injury, not that the conduct was proper.

How often should a self-funded plan audit its PBM?

‍At minimum annually, with rebate pass-through and administrative fees benchmarked independently of the PBM's own reporting.

What is the prudent expert standard under ERISA?

‍It requires fiduciaries to act with the care and skill a knowledgeable person familiar with plan administration would use under similar circumstances.

Can a plan sponsor be sued even if premiums didn't rise?

‍Yes, though recent rulings suggest plaintiffs must show a clearer causal link between fiduciary conduct and specific financial harm.

What triggered the CVS Caremark settlement with Illinois?

‍A state investigation found Caremark's affiliate withheld manufacturer rebates owed to the state's employee health plan over a four-year contract period.

Is a written fiduciary policy legally required?

‍ERISA doesn't mandate a specific document, but documented process is the primary evidence fiduciaries have if their conduct is challenged.

‍

‍

A fiduciary advisor is legally bound under ERISA Section 404 to act solely in a health plan's best interest and disclose every source of compensation. A non-fiduciary advisor only has to recommend suitable options, often while earning commissions that reward higher-cost vendors. That gap can cost self-funded plans millions in unmanaged claims spend.

In 2024, an employee of Johnson & Johnson sued the company's own benefits committee, alleging that mismanaged pharmacy benefit contracts cost the health plan and its participants millions of dollars in inflated drug prices.

The Lewandowski v. Johnson & Johnson case has since been dismissed twice on standing grounds, but it opened a door that had stayed shut for years: ERISA fiduciary breach claims aimed squarely at health plan sponsors, not just retirement plan committees.

Average family premiums for employer-sponsored coverage hit $26,993 in 2025, according to the KFF Employer Health Benefits Survey, a 6 percent jump in a single year. Most plan sponsors have no idea whether the person advising them on that spending is legally required to act in their interest, or simply required to avoid recommending something unsuitable.

What Actually Separates a Fiduciary From a Non-Fiduciary Advisor

A fiduciary advisor owes your plan an undivided duty of loyalty. A non-fiduciary advisor only owes you a suitable recommendation. That single distinction determines who is legally exposed when a decision goes wrong, and it is where most plan sponsors get confused.

Under ERISA Section 404, a fiduciary must act with the care, skill, and diligence of a prudent expert, and must place the plan's interests ahead of their own. A non-fiduciary broker, operating under a suitability standard, can recommend a product that pays a higher commission as long as it technically fits the client's needs. Most employers assume their broker already carries fiduciary obligations. In practice, unless a broker or consultant has signed a written fiduciary acknowledgment for the health plan specifically, they almost certainly have not.

The confusion runs deeper because retirement plan fiduciary roles are well defined under ERISA 3(21) and 3(38), while health and welfare plan fiduciary roles were left comparatively vague for decades.

Why the Confusion Exists

The fiduciary rules that apply to 401(k) plans took shape starting in 2012, when the Department of Labor required retirement plan service providers to disclose their compensation. Group health plans went without an equivalent rule for nearly a decade. Brokers built entire compensation models around that gap, often earning commissions, override bonuses, and contingent payments from carriers without ever disclosing them to the employer.

The CAA closed part of that gap. Under ERISA Section 408(b)(2) as amended by the CAA, any broker or consultant who reasonably expects $1,000 or more in direct or indirect compensation must disclose it in writing to the plan's responsible fiduciary before the arrangement begins. The rule took effect December 27, 2021. Disclosure alone does not create a fiduciary relationship, and most plan sponsors still are not reviewing what lands in their inbox.

The Real Cost of Non-Fiduciary Advice

Family premiums have grown 26 percent over the past five years, according to KFF, while employer contributions absorbed most of that increase. A plan paying $27,000 per family per year has almost no room for advisor conflicts of interest or unreviewed claims spend. Every dollar steered toward a higher-commission vendor instead of the best available option compounds across thousands of employees.

Independent claims audits show why this matters beyond premiums. TPA self-reported error rates typically run 1 to 3 percent, according to Willis Towers Watson, but independent third-party reviews that examine claims the TPA never flagged routinely find error rates between 5 and 15 percent. On a plan processing tens of millions in annual claims, that gap alone can represent six figures in unrecovered overpayments every year.

EBSA's enforcement record adds another layer of cost. The agency recovered $1.4 billion for benefit plans, participants, and beneficiaries in fiscal year 2025, with 63 percent of closed civil investigations producing monetary or corrective results. Plan sponsors who cannot demonstrate a prudent process for selecting and monitoring advisors are the ones investigators focus on first.

What's Actually Happening Behind the Scenes

Commission Structures and Spread Pricing

Many non-fiduciary brokers are paid through carrier commissions tied to premium volume, which means their income rises when the plan's costs rise. Some arrangements also involve spread pricing, where a vendor bills the plan more than it actually pays a provider and keeps the difference. Neither practice is illegal on its own, but neither one is disclosed by default.

Undisclosed or Buried Compensation

CAA disclosures technically satisfy the law even when compensation is described in vague, bundled categories rather than itemized dollar figures. A plan sponsor who receives a disclosure but never asks a follow-up question has, in effect, accepted whatever arrangement the broker chose to describe.

Undisclosed or Buried Compensation

CAA disclosures technically satisfy the law even when compensation is described in vague, bundled categories rather than itemized dollar figures. A plan sponsor who receives a disclosure but never asks a follow-up question has, in effect, accepted whatever arrangement the broker chose to describe.

Claims Oversight That Never Happens

Most self-funded plans review a small sample of claims once a year through the TPA's own reporting, rather than an independent party examining the full claims file. That self-reported review structure is precisely why error rates identified by outside auditors run several times higher than what TPAs report internally.

Claims Oversight That Never Happens

Most self-funded plans review a small sample of claims once a year through the TPA's own reporting, rather than an independent party examining the full claims file. That self-reported review structure is precisely why error rates identified by outside auditors run several times higher than what TPAs report internally.

Why Current Broker Relationships Aren't Enough

How to Fix It

Red Flags That Signal the Problem Applies to Your Plan

The ROI of Doing It Right

Plans that move from TPA self-reporting to independent, full-file claims review typically recover findings in the range of $500 to $1,200 per employee per year, based on independent audit firm data. A 1,500-employee plan sitting in the middle of that range recovers well over $1 million annually in previously invisible overpayments. Fiduciary-grade compensation review adds a second layer of savings by exposing commission structures that inflate premium costs without improving service.

Beyond the dollar recovery, a documented fiduciary process is itself protection. When EBSA investigates or a participant files a claim, the plans that fare best are the ones that can show a prudent, ongoing process rather than a single annual conversation with a broker.

Conclusion and Next Steps

The gap between fiduciary and non-fiduciary advice is not a technicality. It determines who is legally required to put your plan first, and it shapes every dollar your organization spends on premiums, claims, and vendor fees. Plan sponsors who treat this as a compliance checkbox rather than an ongoing process are the ones facing DOL inquiries and participant lawsuits.

Start with a written fiduciary acknowledgment, an itemized compensation review, and an independent claims audit. These three steps alone move a plan from reactive to prudent.

Frequently Asked Questions

Is my benefits broker automatically a fiduciary?

No. Most brokers operate under a suitability standard unless they sign a written fiduciary acknowledgment for the health plan.

What does ERISA Section 404 require of a fiduciary?

Acting solely in the plan's interest with the care and skill of a prudent expert, avoiding conflicts of interest.

Does the CAA make brokers fiduciaries?

No. It only requires compensation disclosure for brokers earning $1,000 or more; it does not change their legal standard.

How often should a self-funded plan audit its claims?

At minimum annually, using an independent auditor reviewing the full claims file rather than a small sample.

What is spread pricing?

When a vendor bills the plan more than it pays a provider and retains the difference, often undisclosed.

Can a plan sponsor be personally liable for fiduciary breaches?

Yes. ERISA allows personal liability for fiduciaries who fail to act prudently or loyally.

What triggered the recent wave of health plan fiduciary lawsuits?

The 2024 Lewandowski v. Johnson & Johnson case, alleging mismanaged PBM contracts inflated drug costs plan-wide.

What's the fastest first step toward fiduciary protection?

Request itemized CAA compensation disclosures and an independent claims audit within the next renewal cycle.

‍

The Department of Labor (DOL) often starts investigating a self-funded health plan when employees complain about their benefits, required compliance documents are missing, fee disclosures are incomplete, or the employer cannot prove it is monitoring its third-party administrator (TPA). In FY 2025, the DOL completed 878 civil investigations and recovered $714.4 million. If several employees raise similar complaints about the same plan, it may prompt the DOL to take a closer look.

A mid-size employer gets a letter from the Department of Labor. Not a lawsuit. A request for documents. The plan sponsor has never seen the claims data behind their own health plan, has no comparative analysis on file, and has no record of ever asking the TPA a hard question.

That letter is not random. EBSA closed 878 civil investigations in FY 2025 and recovered $714.4 million in the process, and most of those cases started with a pattern someone could have caught first.

What "DOL Audit Triggers" Actually Means

A DOL audit trigger is any pattern, complaint, or documentation gap that gives EBSA a reason to open a formal investigation into a self-funded health plan. Most plan sponsors assume audits are random, similar to a tax audit lottery. That assumption is wrong.

EBSA investigations are largely pattern-driven. Complaint volume, missing required disclosures, and known compliance gaps like NQTL comparative analyses generate referrals long before any letter arrives.

The gap between assumption and reality matters because plan sponsors who believe audits are random tend to under-invest in the documentation that would protect them. Prudent process, not luck, is what EBSA looks for once an investigation opens.

Why This Problem Exists

Self-funded plans hand claims processing, network access, and much of the compliance workload to a TPA. That arrangement creates a documentation and accountability gap that most sponsors never notice until it's tested.

ERISA places fiduciary responsibility for the plan on the sponsor, not the TPA. Selecting a service provider is itself a fiduciary act, and DOL guidance is explicit that hiring a TPA does not end the sponsor's duty to monitor performance and fees on an ongoing basis.

Most HR and finance teams were never trained to monitor a TPA the way they'd monitor a retirement plan recordkeeper. The retirement side of ERISA has decades of litigation and case law teaching sponsors to document process. The health side is catching up fast, and sponsors who haven't adjusted are exposed.

The Real Cost and Impact

EBSA's FY 2025 numbers show the scale of federal enforcement. The agency closed 878 civil investigations, and 556 of those, or 63 percent, produced monetary results or required corrective action, totaling $714.4 million in recoveries from enforcement alone.

Complaint-driven referrals are a meaningful share of that activity. EBSA opened 291 investigations from Benefits Advisor referrals in FY 2025, cases that typically start with repeated complaints about the same plan, employer, or service provider rather than a scheduled review.

DOL audits aren't the only concern. Many claim payment errors can remain hidden because most TPAs use sampling to review claims rather than examining every paid claim. Independent audits that review 100% of claims often identify overpayments that sampling-based reviews did not detect.

What's Actually Happening Behind the Scenes

MHPAEA Comparative Analysis Gaps

Mental health parity compliance is one of the clearest current audit triggers. A joint DOL and CMS review examined 56 plans for MHPAEA compliance and found 33 violations, and nearly every noncompliant plan was self-funded or included a self-funded option.

For plan years beginning on or after January 1, 2025, a named ERISA fiduciary must certify that the plan followed a prudent process to select and monitor whoever performs the NQTL comparative analysis. A comparative analysis that was written once and filed away does not meet that bar.

Participants can request a copy of the comparative analysis at any time under ERISA Section 104, which starts a 30-day disclosure clock. A plan that cannot produce a current, complete analysis on short notice has already created its own audit trigger.

Missing CAA 2021 Disclosures

The Consolidated Appropriations Act, 2021 requires brokers and consultants earning more than $1,000 annually in direct or indirect compensation to disclose those fees to the plan sponsor. Sponsors are responsible for confirming those disclosures exist and reviewing them, not just receiving them.

Gag clause attestations, another CAA 2021 requirement, must be submitted annually confirming the plan hasn't agreed to contract terms that restrict access to cost and quality data. A missed attestation is a simple, easily documented compliance failure, which makes it an easy first data point for an investigator.

Why Current Compliance Approaches Aren't Enough

How to Fix It

Red Flags That Signal Your Plan Is Exposed

The ROI of Doing It Right

Independent oversight isn't just a compliance cost. Claims-auditing benchmarks across the industry typically show recoverable overpayments in the low single digits as a percentage of annual claims spend, and for many self-funded plans that translates into six or seven figures a year in identified errors alone.

Beyond dollars recovered, a documented oversight process is the single strongest piece of evidence a fiduciary can produce during an EBSA inquiry. Prudent process, not a clean outcome, is what ERISA actually requires.

The plans least likely to face a lengthy, costly investigation are the ones that can hand over a complete file the day a request arrives.

Conclusion and Next Steps

DOL audit triggers aren't a mystery, and they aren't random. They come from documentable gaps: complaints that pile up, a comparative analysis that's gone stale, fee disclosures nobody tracked, and a TPA relationship nobody independently checked. Self-funded employers who close those gaps before a letter arrives put themselves in a fundamentally different position than plans that wait.

Start with an honest inventory. If your plan can't produce a current comparative analysis, a full CAA 2021 disclosure file, and a recent independent claims audit today, that's the starting point for next quarter's fiduciary calendar.

Frequently Asked Questions

What triggers a DOL audit of a self-funded health plan?

Common triggers include repeated participant complaints, incomplete MHPAEA comparative analyses, missing CAA 2021 fee disclosures, and no documented TPA oversight process.

How many investigations did EBSA close in FY 2025?

EBSA closed 878 civil investigations in FY 2025, with 556 producing monetary results or corrective action.

How much did EBSA recover in FY 2025?

EBSA recovered $1.4 billion across all enforcement programs, including $714.4 million from civil investigations alone.

Is the plan sponsor or the TPA responsible for ERISA compliance?

The plan sponsor holds fiduciary responsibility under ERISA, even though the TPA handles day-to-day claims administration.

Does hiring a TPA satisfy fiduciary duty?

No. Selecting a TPA is itself a fiduciary act, and sponsors must also monitor performance and fees on an ongoing basis.

How often should a self-funded plan complete a claims audit?

Most compliance advisors recommend a recurring, independent audit rather than a one-time review, since TPA self-reported metrics rarely catch every error.

What is an MHPAEA comparative analysis?

It's a required written analysis comparing how a plan applies nonquantitative treatment limitations to mental health versus medical and surgical benefits.

Can participants request a copy of the comparative analysis?

Yes. Participants can request it at any time under ERISA Section 104, which starts a 30-day disclosure deadline.

‍

‍

‍

‍

‍

‍

‍

Fiduciary oversight in healthcare is becoming the next 401(k) lawsuit wave because self-funded plan sponsors face the same ERISA fiduciary duties that drove two decades of retirement plan litigation. Courts are now applying those standards to TPA contracts, PBM fees, and claims payment accuracy, and DOL enforcement is following the same path.

In 2024, Ann Lewandowski sued Johnson & Johnson, alleging its health plan fiduciaries mismanaged the prescription drug program and cost employees millions in higher premiums and out-of-pocket costs. A New Jersey court dismissed the case twice on standing grounds, most recently in November 2025.

But one month before that dismissal, the Sixth Circuit revived a nearly identical theory in Tiara Yachts v. Blue Cross Blue Shield of Michigan, ruling that a TPA can be held to ERISA fiduciary standards for how it processes and recovers overpaid claims.

Two courts, two different outcomes, one unmistakable signal: the legal theory that reshaped retirement plans twenty years ago has arrived in group health.

What "Fiduciary Oversight" Actually Means for a Self-Funded Health Plan

A self-funded health plan sponsor is a fiduciary the moment it exercises discretion over plan assets, and that duty cannot be delegated away by hiring a TPA. Most benefits leaders assume oversight is the TPA's job because the TPA processes claims, negotiates rates, and issues the reports the plan committee reviews each quarter. That assumption is where the fiduciary exposure begins.

ERISA Section 404 requires a named fiduciary to act with the care, skill, and diligence of a prudent expert, solely in the interest of participants. Hiring a competent TPA satisfies part of that duty. Monitoring the TPA's actual performance, not its self-reported accuracy scores, is the other part, and it is the part most plans skip.

The Tiara Yachts case makes the stakes concrete. The Sixth Circuit found that Blue Cross Blue Shield of Michigan could be a functional fiduciary because it controlled how claims were paid and how overpayment recoveries were split, not because a contract labeled it that way.

Why This Gap Exists Across So Many Plans

Health plan fiduciary duty developed later and more quietly than retirement plan duty. The 401(k) fee cases that started around 2006 forced plan committees to build documented, repeatable review processes for recordkeeper fees and fund lineups.

No equivalent discipline took hold for health plans, largely because TPA reporting looked authoritative enough to satisfy a busy HR or finance leader. Sixty-seven percent of covered workers are now in self-funded plans, according to the 2025 KFF Employer Health Benefits Survey, and at firms with 200 or more employees that figure reaches 80%, so the exposure is concentrated exactly where committees tend to assume the TPA has it handled.

Committees also rarely rotate or renegotiate audit rights when they renew a TPA contract. Restrictive audit clauses, limited sample sizes, and carrier-selected auditors are common, and few benefits teams push back because no one has flagged the gap as a liability issue yet.

The Real Cost of Skipping Independent Oversight

Unreviewed claims translate directly into plan asset losses, and those losses accrue every payment cycle, not just in a bad year. Industry-documented TPA error rates run from 1% to 3% on the low end and up to 5% to 12% when independent auditors review 100% of claims rather than a sample.

A regional manufacturer with 1,400 employees found $812,000 in overpayments across 18 months once it ran an independent audit, including a duplicate $47,000 inpatient claim and 63 ineligible dependents still active on the plan.

The Department of Labor's EBSA recovered $1.4 billion for retirement, health, and welfare plans in fiscal year 2025, with $714.4 million coming from enforcement actions tied to 556 closed civil investigations. That total does not include the far larger pool of overpayments plan sponsors never identify because their contracted audit covers a few hundred claims out of hundreds of thousands.

Cost containment through claims oversight is not a rounding error. It is comparable to finding a leak in a pipe that has been running for years. The plan does not notice the loss on any single bill, but the cumulative drain shows up in renewal premiums the whole workforce eventually pays.

What's Actually Happening Behind the TPA's Reporting

Self-Reported Accuracy Scores Don't Match Independent Findings

TPAs commonly report financial accuracy near 96% to 97% against their own service level agreements. Independent post-payment reviews that examine the full claims file, rather than a carrier-selected sample, routinely find meaningfully higher error rates because the sampling methodology itself is built to minimize findings.

Sample Sizes Are Too Small to Catch Systemic Errors

Standard ASO audit clauses often cap the review at 300 to 350 claims per year. A peer-reviewed comparison of 100% claims audits against random-sample audits found the sampling approach missed error totals ranging from $200,000 to $750,000 that a full review caught.

Cross-Plan Offsetting and Spread Pricing Blur Whose Money Moves Where

In Peterson v. UnitedHealth Group, the Eighth Circuit found that using one employer's plan assets to offset another employer's overpayment was in tension with ERISA fiduciary duties. Spread pricing, where a TPA bills the plan more than it pays the provider, has been well documented in pharmacy benefit management and is now surfacing in medical claims reviews as well.

Dependent Eligibility Drift Goes Unchecked for Years

Employees change marital status, dependents age out, and COBRA elections lapse, but few plans run a dedicated eligibility audit outside of open enrollment. These reviews are often the fastest-paying audit workstream because ineligible dependents represent pure ongoing cost with no offsetting value.

Why TPA Self-Reporting Isn't Enough Anymore

How to Close the Fiduciary Oversight Gap

Red Flags That Signal Your Plan Is Exposed

The ROI of Independent Oversight Done Right

Plans that run independent claims audits commonly recover the full cost of the audit within the first review cycle, and ongoing monitoring compounds those savings across every subsequent plan year. Dependent eligibility audits alone often pay for themselves within months because every ineligible dependent removed is a recurring cost eliminated, not a one-time recovery.

The fiduciary protection value is harder to price but arguably more important. A documented, repeatable oversight process is the same evidence that helped a health plan sponsor defeat a DOL fiduciary breach claim in prior litigation, because the court found the sponsor had not simply delegated authority and looked away.

Conclusion and Next Steps

The parallel between today's health plan fiduciary exposure and the 401(k) excessive fee wave of the past two decades is not a marketing analogy. It is the same statute, the same duty to monitor, and increasingly the same courts applying settled retirement plan precedent to group health claims. The J&J dismissal shows plaintiffs still face real standing hurdles, but Tiara Yachts and EBSA's 2026 enforcement pivot show the underlying theory is gaining traction, not losing it.

Plan sponsors who wait for a lawsuit to force the issue will be building their prudent process defense after the fact, which is the position no fiduciary wants to be in. Start with a claims audit scope review this quarter, confirm your audit rights before your next renewal, and document the committee's review process going forward.

Frequently Asked Questions

Is my company a fiduciary for our self-funded health plan?

‍Yes, if you exercise any discretion over plan administration or assets. Most self-funded employers are named fiduciaries under ERISA Section 402.

Can our TPA also be held liable as a fiduciary?

‍Yes. Courts including the Sixth Circuit in Tiara Yachts have found TPAs can be functional fiduciaries when they control claims payment and recovery decisions.

How often should we audit our health plan claims?

‍Annual audits are the baseline. Quarterly or continuous monitoring catches errors before they compound across a full plan year.

What is a "prudent expert standard" under ERISA?

‍It requires fiduciaries to act with the care, skill, and diligence a knowledgeable person would use in managing plan assets, not just good intentions.

Does our TPA's self-reported accuracy rate satisfy our fiduciary duty to monitor?

‍No. Duty to monitor requires independent verification, not reliance on a service provider's self-graded performance.

What percentage of claims typically contain errors?

‍Industry estimates range from 1% to 3% under standard sampling, and 5% to 12% when independent auditors review the full claims file.

Is D&O insurance enough to cover a fiduciary breach claim?

‍Usually not. ERISA Section 409 imposes personal liability on fiduciaries, and standard D&O policies frequently exclude ERISA fiduciary breach claims.

Why are health plan lawsuits increasing now instead of years ago?

‍Retirement plan litigation matured first and established the legal playbook. DOL enforcement priorities and court rulings like Tiara Yachts are now applying that same scrutiny to health plans.

‍

‍

‍

‍

‍

TPA administration and fiduciary protection are not the same thing. A TPA processes and pays claims under contract, but ERISA Section 404 keeps fiduciary responsibility with the plan sponsor. Signing a TPA contract does not transfer that duty. Only active, documented oversight of claims activity satisfies the prudent expert standard.

Most self-funded plan sponsors sign a service agreement with a TPA and treat the relationship as a handoff. Once claims start getting paid, the assumption is that someone else is now watching the store. Independent research on claims administration tells a different story.

TPA error rates on processed claims commonly run between 1% and 6% of total volume, and on a plan spending $20 million a year on medical claims, even a conservative 2% error rate is $400,000 in avoidable losses. Fiduciary protection for self-funded health plans does not come from the TPA contract. It comes from what the plan sponsor does after the contract is signed.‍

What TPA Administration Actually Covers

Administering a health plan and protecting it as a fiduciary are two different jobs, and most TPA contracts only cover the first one. A TPA agreement typically spells out claims processing timelines, network access and customer service standards. It rarely includes an obligation to catch every coding error, flag every ineligible dependent or independently verify that billed rates match contracted rates.

Plan sponsors often assume that paying a reputable, well-known TPA is itself a form of due diligence. That assumption is understandable. It is also incomplete under ERISA, where the duty to monitor a service provider cannot be delegated away, even when claims decision authority has been assigned to the TPA.

The result is a structural gap. The TPA handles volume and workflow. The plan sponsor, as the named fiduciary, remains on the hook for verifying that the volume was handled correctly. Nothing in a standard administrative services agreement closes that gap on its own.

Why the Problem Exists

TPAs are built and compensated to process claims at scale, not to flag every dollar that could have been billed more cheaply. Their internal accuracy metrics are typically self-reported, drawn from small samples of their own work, and rarely audited by an outside party before being shared with the plan.

Prompt payment timelines add pressure in the same direction. Most administrative agreements require claims to be paid within 21 to 30 days of receipt, which leaves limited room for a detailed line-item review before a check goes out. Speed and accuracy pull against each other, and speed usually wins by contract design.

Plan sponsors compound the gap by treating the TPA relationship as "set and forget." Committees review premium trends and utilization reports at renewal, but few build a recurring, independent claims review into the plan's operating calendar. Without that cadence, errors accumulate quietly for years.

The Real Cost or Impact

A 2% to 6% error rate sounds small until it is applied to a plan's total claims spend. On a mid-size plan paying $15 million a year in claims, even the low end of that range represents $300,000 moving through the plan incorrectly, year after year, without anyone flagging it. Multiply that across a plan's life span and the number stops looking like a rounding error.

The financial exposure is only part of the picture. In FY 2024, the Department of Labor's Employee Benefits Security Administration recovered nearly $1.4 billion for plans, participants and beneficiaries, a large share of it tied to weak oversight of service providers and plan assets. That is federal enforcement money, not internal audit findings, which means it followed a formal investigation into how a plan was being run.

Self-funded plans are now the dominant funding model in the employer market. KFF's 2025 Employer Health Benefits Survey found that 67% of covered workers are enrolled in self-funded arrangements, rising to 80% at larger firms. That scale means the fiduciary exposure sitting inside unreviewed claims data is not a niche problem. It touches most employer-sponsored health coverage in the country.

What's Actually Happening Behind the Scenes

Sampling Audits Instead of Full Review

Most claims oversight today runs on small statistical samples rather than a full look at every payment. A TPA might review a few hundred claims out of hundreds of thousands processed in a year and extrapolate an accuracy rate from that subset. The math works fine for a general trend line. It does very little to catch the specific overpayment sitting in the other 95% of claims that never got a second look.

Coordination of Benefits Gaps

Coordination of benefits (COB) failures happen when a plan pays as primary on a claim that should have been paid by another carrier first. These errors are common in households with two working spouses or dependents aging onto other coverage. TPAs process COB updates reactively, based on member-submitted information, which means stale COB data can sit in the system for months before anyone notices the plan paid more than it owed.

Dependent Eligibility Drift

Dependent eligibility drift describes ineligible dependents, a divorced spouse, an adult child who aged out, staying on the plan because no one re-verified eligibility after enrollment. Every claim paid on behalf of an ineligible dependent is plan money spent outside the terms of the plan document, which is itself a fiduciary concern independent of the dollar amount involved.

Vendor Accountability and Legal Exposure

Courts have started drawing a sharper line around who actually carries fiduciary risk in these relationships. In *Tiara Yachts, LLC v. Blue Cross Blue Shield of Michigan*, the Sixth Circuit held that functional conduct, not contract labels, determines fiduciary status and liability. That precedent matters for any plan sponsor assuming that a well-worded services agreement automatically shields them from claims-related fiduciary exposure.

Why Current Approaches Aren't Enough

Renewal-cycle reviews and TPA-provided performance dashboards give plan sponsors a general sense of direction. They rarely provide the kind of documented, independent evidence that would hold up if a participant or the Department of Labor challenged how the plan was overseen.

How to Fix It

Red Flags That Signal the Problem Applies to Your Plan

The ROI of Doing It Right

Independent audits regularly identify overpayments in the 2% to 6% range of total claims spend, and those recoveries frequently offset the cost of the audit itself within the first review cycle. For a plan spending $20 million annually, recovering even the low end of that range translates into hundreds of thousands of dollars back in plan assets.

The ongoing value compounds once oversight becomes routine instead of occasional. A plan that reviews claims quarterly catches errors before they repeat across multiple pay cycles, which lowers the total leakage over time rather than just the one-time recovery from a single audit.

The fiduciary protection component is harder to price but just as real. Documented, independent oversight gives the plan sponsor evidence of a prudent process, which is the standard ERISA actually asks fiduciaries to meet. That documentation is the difference between a defensible governance record and an unverified assumption that the TPA had it covered.

Conclusion and Next Steps

TPA administration keeps claims moving. Fiduciary protection for self-funded health plans only comes from what a plan sponsor does to verify that movement is accurate, documented and reviewed on a defined schedule. Those are not the same function, and treating them as interchangeable leaves plan assets and personal fiduciary exposure sitting unmonitored.

The next step is straightforward: schedule an independent claims audit, formalize the benefits committee's charter, and build documentation habits before a complaint or investigation forces the issue. Talk to an independent claims audit specialist.

Frequently Asked Questions

Does hiring a TPA transfer fiduciary liability to them?

No. ERISA keeps the duty to monitor service providers with the plan sponsor, even when claims decisions are delegated to the TPA.

What percentage of claims do TPAs typically get wrong?

Industry-documented error rates on processed claims generally fall between 1% and 6%, depending on the source and plan complexity.

How often should a self-funded plan conduct an independent claims audit?

At least annually, with many advisors recommending quarterly or ongoing monitoring for larger plans.

Can a plan sponsor be sued personally for fiduciary breaches?

Yes. Individuals who exercise discretion over plan administration can face personal liability for breaches of fiduciary duty under ERISA.

Is a sampling audit from the TPA enough to satisfy fiduciary duty?

Sampling audits provide limited assurance. Independent, broader reviews offer stronger documentation of a prudent oversight process.

What is coordination of benefits and why does it matter for audits?

Coordination of benefits (COB) determines which plan pays first when a person has multiple coverages. Errors here often cause plans to overpay.

Does the TPA's size or reputation reduce fiduciary risk?

Not directly. Fiduciary risk is tied to oversight practices and documentation, not the TPA's brand or market share.

What should a benefits committee document to show prudent process?

Meeting minutes, audit reports, corrective action plans and vendor monitoring records, generally retained for at least six years.

‍

‍

‍

‍

‍

‍

A 1,400-employee manufacturer ran its first independent claims audit in 2024 after 18 months of routine TPA reporting had shown nothing unusual. The audit found $812,000 in overpayments, including a $47,000 inpatient claim paid twice, 63 ineligible dependents still active on the plan, and a specialty drug billed at 240% of the contracted rate. None of it had surfaced in the TPA's own reviews.

That gap between what a TPA reports and what an independent audit finds is not an isolated incident. It is a structural feature of how most self-funded plans operate today, and it is one that plan sponsors are increasingly on the hook for.

What Independent Claims Oversight Actually Means

Independent claims oversight is a third-party review of paid medical claims, conducted by an auditor with no financial relationship to the TPA that processed them. Most employers assume their TPA already does this work through its own quality assurance process. That assumption is the core misunderstanding this article addresses.

A TPA's internal audit measures the TPA's own performance using the TPA's own sample, methodology, and reporting standards. That is not oversight. It is self-assessment, and self-assessment has an obvious structural weakness: the entity being reviewed controls what gets reviewed.

Independent oversight replaces that arrangement with an outside party who audits a much larger share of claims, applies clinical and coding expertise the TPA's routine review does not, and reports findings directly to the plan sponsor rather than filtering them through the vendor being evaluated.

Why the Problem Exists

The root cause is not incompetence. Most TPAs process millions of claims accurately and efficiently, and their sampling audits are a legitimate part of normal operations. The problem is scope and incentive, not effort.

TPA sampling audits typically examine a small slice of total claims, often under 5%, leaving the remaining volume unreviewed by anyone with genuine independence. Complex errors such as coordination of benefits failures, upcoding, and unbundling require clinical coding expertise that standard sampling processes are not built to catch at scale.

There is also a quieter incentive dynamic. A TPA that repeatedly identifies its own errors invites tougher contract terms and more scrutiny at renewal. That is simply how vendor relationships work, not an accusation of misconduct, but it explains why relying solely on a vendor's self-reported accuracy leaves a structural blind spot that only independent review can close.

The Real Cost or Impact

The financial exposure from unreviewed claims is measured in real dollars, not theoretical risk. One documented audit of a TPA's claims processing found financial accuracy of 96.8% and payment accuracy of 96.1%, both below the plan's contracted 98% service level agreement, even though the TPA had self-reported 100% accuracy (Baker Tilly). At claims volumes of $10 million to $50 million a year, even a 2% to 5% error rate translates into hundreds of thousands of dollars annually (AIM Benefits).

Coordination of benefits failures are a common driver of this leakage. When a plan pays as primary on a claim that should have been billed secondary, the overpayment on that single claim can run 60% to 80% higher than it should. Multiply that pattern across a workforce of several thousand employees and the leakage compounds every renewal cycle.

There is also a regulatory dimension. EBSA recovered more than $1.4 billion for retirement, health, and welfare benefit plans and their participants in fiscal year 2025, with more than half of that total coming from enforcement actions rather than voluntary correction (U.S. Department of Labor). That figure reflects a broader enforcement environment in which undocumented vendor oversight is increasingly treated as a fiduciary gap, not an administrative footnote.

What's Actually Happening Behind the Scenes

Sampling Instead of Full Review

Most TPA audits work from a statistical sample rather than a full claims review. That approach is efficient for catching obvious errors but is not designed to surface the low-frequency, high-dollar errors, like a duplicate inpatient claim or a specialty drug billed above contract rate, that do the most damage to a plan's budget.

Eligibility Drift

Dependents who age out, spouses who gain other coverage, and employees who terminate but stay active in the claims system for months are a quiet but persistent source of leakage. Eligibility files are rarely reconciled against claims payment in real time, so ineligible claims can accumulate for a full plan year before anyone notices.

Coding Errors That Require Clinical Judgment

Upcoding bills a higher-acuity service code than the documentation supports. Unbundling charges separately for procedures that should be billed under one comprehensive code. Both require someone with clinical and coding expertise to catch, which is exactly the kind of review that high-volume, low-touch sampling processes tend to under-resource.

Why Current Approaches Aren't Enough

Annual TPA-led sampling audits satisfy a contractual checkbox, but they were never designed to serve as fiduciary evidence. The table below shows where the gap sits.

How to Fix It

Red Flags That Signal the Problem Applies to Your Plan

The ROI of Doing It Right

Independent claims audits routinely recover overpayments well above the cost of the audit itself, which is one reason the practice has become standard among large, well-governed plans. Beyond direct dollar recovery, ongoing oversight tends to reduce the error rate in future claims cycles because TPAs adjust processing behavior once they know independent review is a permanent fixture, not a one-time event.

The fiduciary protection value is harder to put a single number on, but it is arguably more important. A plan sponsor who can show continuous, independent review of claims payment occupies a materially stronger position in a DOL inquiry or participant lawsuit than one relying solely on an annual vendor-run sample.

Given that EBSA closed 878 civil investigations in FY 2025, with 556 resulting in repayments or required corrective action (per DOL enforcement data), documented independent oversight is no longer a nice-to-have. It is the evidence a plan sponsor needs on file before anyone asks for it.

Frequently Asked Questions

What is independent claims oversight?

‍A third-party review of paid medical claims by an auditor with no financial ties to the TPA, distinct from a TPA's internal quality checks.

Why can't I rely on my TPA's own audit?

‍A TPA auditing its own claims creates a conflict of interest and typically reviews only a small sample of total volume.

Who is legally responsible for claims errors under ERISA?

‍The plan sponsor, not the TPA, carries fiduciary liability for how the plan's claims are paid.

How often should a self-funded plan run an independent audit?

‍Best practice is quarterly or continuous review, not a single annual engagement, since leakage reappears every plan year.

What is the prudent expert standard?

‍ERISA Section 404 requires fiduciaries to act with the care and skill a knowledgeable expert would use, which independent audits help document.

What kinds of errors do independent audits usually find?

‍Duplicate payments, ineligible dependents, coordination of benefits failures, upcoding, and unbundling are the most common categories.

Does an independent audit replace my TPA relationship?

‍No. It adds an accountability layer alongside the TPA, not a replacement for claims processing services.

What size plan needs independent claims oversight?

‍Any self-funded plan, but the dollar exposure grows quickly for employers with 100 or more covered employees and claims spend in the millions.

‍

‍

A self-funded hospital system trusted its TPA's self-reported claims accuracy of 100%, year after year. An independent audit of a stratified sample of roughly 200 medical claims told a different story.

Financial accuracy landed near 96.8% and payment accuracy at 96.1%, both below the 98% service level agreement in the contract. The plan had data. Nobody outside the TPA had checked whether the data was true.

What Claims Data Transparency Actually Means

Claims data transparency is access to claims pricing, utilization or payment information, not verification that the information is accurate. Plan sponsors often equate transparency with oversight because both involve data. They are not the same function.

Transparency answers "what did we pay." Oversight answers "should we have paid that." A plan can have full access to its claims feed and still have no process for catching a duplicate payment, an ineligible dependent or a specialty drug billed above the contracted rate.

The Transparency in Coverage rule illustrates the gap well. It produced what has been called one of the largest government-mandated data releases in history, yet researchers found the machine-readable files inconsistent in structure, thin on index information and often too large for a standard computer to process. Access without usability is not transparency in any meaningful sense.

Why the Gap Exists

The gap exists because TPAs report their own performance, and self-reporting carries no independent verification. A TPA's contract may guarantee 99% payment accuracy while the TPA's own internal data shows a 1.4% claims processing error rate, a discrepancy that surfaced in one carrier's administrative services agreements. The guarantee and the reality are not required to match unless someone checks.

TPAs also lack a direct financial incentive tied to plan cost outcomes. Their compensation structure is generally built around processing volume and service fees, not around minimizing the plan's total spend, so error prevention competes with throughput.

Most plans compound the problem by reviewing claims infrequently. Annual audits built into ASO agreements often sample only 300 to 350 claims out of hundreds of thousands processed in a year. A snapshot that small can miss systemic issues entirely.

The Real Cost of Assuming Transparency Equals Oversight

Unverified claims errors compound into six- and seven-figure losses for mid-size self-funded plans. Industry claims audit findings put TPA error rates between 3% and 10% of processed claims, well above the 1% to 3% error rate typically cited as an industry baseline.

Independent claims analysis across a large multi-employer dataset found error detection rates of 5% to 15%, with average recoverable findings between $500 and $1,200 per covered employee per year. For a plan with 1,000 covered employees, that range alone represents $500,000 to $1.2 million in annual exposure.

The consequences are not only financial. In September 2025, Aetna and Optum reached an $8.4 million settlement tied to fabricated billing codes that concealed administrative fees inside medical charges for nearly a decade before litigation forced disclosure. Transparency did not surface that pattern. Litigation did.

What's Actually Happening Behind the Scenes

Benefit Determination Errors

The most common category of claims error involves how a plan's own provisions get applied: deductibles, coinsurance, copays and plan-specific exclusions. These errors are rarely intentional. They happen because claims processing blends automated adjudication with manual review, and manual steps introduce inconsistency.

Dependent Eligibility Drift

Dependents who age out, divorce out or otherwise lose eligibility often stay on a plan for months or years because no one is cross-checking enrollment against life events. Dependent eligibility audits are frequently the fastest-paying workstream in a claims review because the savings start the moment ineligible members are removed.

Duplicate and Miscoded Claims

Duplicate payments, upcoding and unbundling do not show up in a pricing dashboard. They show up when someone compares the billed procedure codes against the medical record or the plan's coding logic, a step that transparency tools are not built to perform.

Why Current Approaches Aren't Enough

Most plan sponsors rely on the transparency and reporting the TPA already provides. That approach leaves the same party that processed the claim responsible for verifying it, which is a conflict most plans would not accept in any other financial function.

How to Fix It

Red Flags That Signal the Problem Applies to Your Plan

The ROI of Doing It Right

Independent claims audits routinely recover a meaningful share of the errors they identify, and the ongoing savings from corrected TPA behavior often exceed the one-time recovery. [internal link: claims audit ROI calculator] Dependent eligibility reviews in particular tend to pay for themselves within months, since removing an ineligible dependent stops future claims immediately rather than only recovering past ones.

Beyond dollars, a documented audit and monitoring process is the clearest evidence a plan sponsor has that it met the prudent expert standard under ERISA Section 404. That documentation matters most in the moment a plan can least afford to be without it: a DOL inquiry or a participant lawsuit. EBSA alone recovered $1.4 billion for plans, participants and beneficiaries in fiscal year 2025, a reminder that enforcement activity in this space is active and ongoing, not theoretical.

Frequently Asked Questions

Is claims data transparency required by law?

Yes. The Transparency in Coverage rule and the Consolidated Appropriations Act, 2021 require pricing disclosures, but neither requires payment accuracy verification.

Does transparency alone satisfy ERISA fiduciary duty?

No. ERISA Section 404 requires a prudent process for monitoring plan expenses, which access to data does not fulfill by itself.

How often should a self-funded plan audit its claims?

Most fiduciary advisors recommend an independent audit at least annually, supplemented by ongoing quarterly or monthly monitoring.

What percentage of claims typically contain errors?

Independent audits commonly find error rates between 3% and 10%, above the 1% to 3% often cited as an industry baseline.

Who is legally responsible for claims accuracy, the plan sponsor or the TPA?

The plan sponsor. ERISA places fiduciary responsibility on the plan sponsor even though the TPA processes the claims.

Can a plan sponsor audit claims without the TPA's permission?

Audit rights depend on the ASO agreement. Sponsors should negotiate unrestricted audit access before signing or renewing a contract.

What is the difference between a claims audit and ongoing monitoring?

An audit reviews a sample retrospectively. Ongoing monitoring reviews claims continuously, closer to the time they are paid.

Are machine-readable pricing files useful for claims oversight?

They provide pricing context but are not designed to verify individual claim accuracy, and many are difficult to process without specialized tools.

‍

‍

‍

‍

Fiduciary-grade healthcare operations are the claims oversight, documentation and governance practices a self-funded plan sponsor uses to meet ERISA's prudent expert standard. This includes independent claims audits, documented TPA performance reviews and dependent eligibility checks, rather than relying on a TPA's self-reported accuracy numbers.

In September 2025, Aetna and Optum finalized an $8.4 million settlement over fabricated billing codes that had inflated member costs for nearly a decade before litigation forced disclosure. The case started with one retired plan member who noticed a pattern nobody else was checking.

Most self-funded plan sponsors never look closely enough to find that pattern on their own plan, and industry data suggests TPA error rates run between 1% and 10% of processed claims, depending on the audit methodology used. For a plan paying $20 million a year in claims, that range represents anywhere from $200,000 to $2 million in errors that nobody is actively hunting for.

What Are Fiduciary-Grade Healthcare Operations

Fiduciary-grade healthcare operations are the documented, independently verified claims oversight processes a plan sponsor uses to satisfy ERISA's prudent expert standard, rather than the minimum administrative reporting a TPA provides by default. Most plan sponsors assume their TPA's self-reported accuracy rate reflects reality. It often does not.

A TPA's administrative services agreement typically guarantees financial and payment accuracy in the 98% range. Independent audits regularly find actual accuracy closer to 96% to 97%, a gap that sounds small until it is multiplied across a plan paying eight or nine figures in annual claims. The difference between "TPA-reported" and "independently verified" is the entire fiduciary question.

Fiduciary-grade operations are not a single product or vendor. They are a standing practice: audit cadence, documentation, and a governance record that shows the plan sponsor acted as a prudent expert would, consistent with the standard set out in ERISA Section 404.

Why the Oversight Gap Exists

The oversight gap exists because TPAs have no direct financial stake in the plan's cost outcomes, and most plan sponsors lack the internal expertise to audit claims data themselves. A TPA is paid a fee to process claims, not a percentage of savings, so accuracy beyond the contracted service level agreement carries little upside for the TPA.

Plan sponsors, meanwhile, are often HR or finance leaders managing benefits as one responsibility among many. Building the coding expertise needed to catch upcoding, unbundling, or duplicate billing in-house is rarely realistic for a mid-size employer.

Restrictive audit clauses compound the problem. Many TPA contracts historically limited the number of claims a sponsor could audit, barred extrapolation of findings, or restricted which outside firms could perform the audit, though state laws such as Maine's L.D. 1906, effective for contracts issued or renewed after January 1, 2026, are starting to prohibit those restrictions.

The Real Cost of Skipping Fiduciary-Grade Oversight

Skipping independent claims oversight costs plans real money and creates fiduciary liability that follows the plan sponsor personally. A full-scope claims audit with 100% review, rather than a sampled TPA self-audit, typically recovers between 1% and 3% of annual claims spend, based on industry-reported audit outcomes.

On the enforcement side, the Department of Labor's Employee Benefits Security Administration recovered $1.4 billion for retirement, health, and welfare plans in fiscal year 2025, with $714.4 million of that tied directly to civil enforcement actions. EBSA closed 878 civil investigations that year alone, a volume that signals oversight failures are common, not rare.

Litigation risk is following the same curve. The 401(k) excessive-fee lawsuit model, which produced more than $10 billion in settlements over the past decade, is now being applied to health plan administration, with plaintiffs' firms using DOL enforcement patterns as a roadmap for building breach-of-fiduciary-duty claims against plan sponsors.

What's Actually Happening Behind the Scenes

Sampled Audits Miss Most of the Plan

A standard TPA audit typically reviews a stratified sample of 250 to 400 claims out of hundreds of thousands processed annually, then extrapolates an overall accuracy score from that small slice. The unreviewed remainder, often more than 95% of total claims, never gets examined at all.

Coding Errors Hide in High-Dollar Claims

Upcoding, unbundling, and duplicate billing tend to concentrate in complex, high-dollar claims, exactly the claims a small random sample is least likely to catch. Specialty pharmacy and inpatient facility claims carry disproportionate risk for this reason.

Dependent Eligibility Drifts Without Anyone Noticing

Ex-spouses, aged-out children, and other ineligible dependents routinely remain on plan rolls for years because eligibility verification is rarely built into ongoing claims workflows. Each ineligible dependent represents ongoing claims spend the plan should never have paid.

Automated Adjudication Approves Errors at Scale

A growing share of claims are approved through automated adjudication with no human review, which processes errors just as efficiently as it processes legitimate claims. Duplicate claims and coordination-of-benefits failures are especially prone to slipping through automated systems undetected.

Why Current Approaches Aren't Enough

Most plans still treat claims oversight as a periodic compliance task instead of an ongoing operational discipline. The table below shows how that status quo compares with a fiduciary-grade approach.

How to Build Fiduciary-Grade Healthcare Operations

Red Flags That Signal Your Plan Needs This Now

The ROI of Doing It Right

Independent, full-scope claims audits typically recover 1% to 3% of annual claims spend in direct overpayment findings, and dependent eligibility audits frequently pay for themselves within months of completion.

Beyond direct recovery, fiduciary-grade documentation is itself a form of risk transfer. A plan sponsor that can produce board minutes, audit reports, and a documented TPA review process has evidence of the prudent expert standard that ERISA requires, which matters considerably if EBSA or a plaintiff's firm ever comes asking.

Think of it the way a building owner thinks about fire code compliance. The inspection itself does not prevent every fire, but the documented compliance record is what protects the owner when something goes wrong anyway. Claims audit documentation functions the same way for plan fiduciaries.

Conclusion and Next Steps

Fiduciary-grade healthcare operations are becoming the baseline expectation, not a differentiator, as EBSA enforcement activity and health plan litigation both continue climbing. Plan sponsors that wait for a regulator or a plaintiff's attorney to ask the first question have already lost the advantage of showing a prudent, documented process.

Start with an independent audit scoped to review all claims, not a sample, and build the documentation habit alongside it.

Frequently Asked Questions

What does "fiduciary-grade" mean for a health plan?

It means claims oversight and documentation practices that meet ERISA's prudent expert standard, not just a TPA's minimum reporting.

Who is legally responsible for claims accuracy on a self-funded plan?

The plan sponsor, under ERISA Section 404, regardless of which TPA processes the claims.

How often should a self-funded plan conduct a claims audit?

Independent audits should happen continuously or quarterly, not once every two to three years.

What percentage of claims contain errors?

Industry-documented TPA error rates range from roughly 1% to 10%, depending on audit scope and methodology.

How much money can a claims audit typically recover?

Full-scope, 100% claims audits typically recover 1% to 3% of annual claims spend.

Can a TPA restrict how a plan sponsor audits its own claims?

Some contracts historically did, though new state laws are increasingly prohibiting these restrictions.

Should a plan sponsor use the TPA's recommended audit firm?

No. Independent firms with no ownership or referral ties to the TPA reduce conflict-of-interest risk.

What is the fastest way to reduce fiduciary risk right now?

Document the plan's governance process, including committee minutes and retained audit reports, alongside commissioning an independent audit.

‍

‍

‍

‍

‍

‍

‍

‍

‍

Payment integrity is a technical process that checks whether individual claims were coded and priced correctly. Fiduciary intelligence is a governance framework that documents whether the plan sponsor prudently monitored its vendors, as ERISA Section 404 requires. Payment integrity catches claim errors. Fiduciary intelligence protects the people legally responsible for the plan.

Most self-funded plans confuse a claims tool with a legal defense, and the gap between them is where lawsuits start.

A mid-size manufacturer with 1,400 employees paid $340,000 in claims for a coordination of benefits failure that ran undetected for eighteen months (Willis Towers Watson). The plan's payment integrity vendor never flagged it because the claims were coded correctly.

The problem wasn't accuracy. It was that nobody on the plan sponsor's side could show they had monitored the TPA's handling of COB determinations at all. That gap, between a clean claim and a documented oversight process, is the entire subject of this article.

Why Payment Integrity Is Not the Same as Fiduciary Responsibility

Sixty-seven percent of covered workers in the United States are enrolled in self-funded health plans, and that share climbs to 80 percent among firms with 200 or more employees (Kaiser Family Foundation, 2025).

Every one of those employers carries fiduciary duties under the Employee Retirement Income Security Act (ERISA) regardless of whether they know it. Payment integrity is one useful tool for managing plan spend.

It is not the same thing as meeting that legal duty, and treating the two as interchangeable leaves plan sponsors exposed.

What Payment Integrity Actually Does

Payment integrity is the set of technical processes and software that verify whether a submitted claim was billed, coded, and priced correctly before or after payment. It answers a narrow question: did the plan pay the right dollar amount for this specific service.

Most people assume payment integrity is a comprehensive safeguard for the plan. It is not designed to be one. It is a claims-accuracy layer, built to catch duplicate billing, upcoding, and pricing errors against contracted rates. The global payment integrity market has grown to roughly $9 billion, expanding at about 7 percent annually as payers invest more heavily in automated claims review (McKinsey).

The tools are genuinely useful. They catch a meaningful share of overpayments that would otherwise slip through automated adjudication. What they do not do is document whether the plan sponsor exercised the kind of ongoing, independent oversight that ERISA requires of a fiduciary.

A payment integrity report can show a clean claims file and still leave a plan sponsor unable to answer basic questions about vendor monitoring, fee reasonableness, or conflict of interest review.

Why the Gap Exists

The gap between payment integrity and fiduciary protection exists because most self-funded plans were designed for administrative efficiency, not employer oversight. Standard administrative services agreements typically treat a small sampling audit as the complete review, and plan sponsors accept it because it has been considered the industry standard for decades.

TPAs may have limited incentives to identify their own payment errors. Industry studies report claims processing error rates of 2% to 6%, depending on the source and plan complexity (Baker Tilly). At the same time, many TPAs report self-audit accuracy rates close to 99% (ClaimInformatics). This does not necessarily mean either number is wrong. They measure different things. Self-audits often focus on processing accuracy and system rules, not whether the correct amount was ultimately paid.

There is also a structural asymmetry in who has access to the data. Many TPAs release detailed claims files only upon request, often in formats that require technical expertise to analyze (Benosphere). Under ERISA Section 404(a)(1)(B), the fiduciary must act "with the care, skill, prudence, and diligence" of a prudent expert (U.S. Department of Labor). It is difficult to meet that standard when the party being monitored controls the data used to monitor it.

The Real Cost of Treating Payment Integrity as Sufficient

Self-funded employers spending between $10 million and $100 million annually in healthcare claims face $200,000 to $2 million in unrecovered leakage under even a conservative 2 percent error rate (ClaimInformatics). Payment integrity tools recover some of that. Independent claims audits with full review typically recover an additional 1 percent to 3 percent of annual claims spend on top of whatever the TPA's own systems caught (Benosphere).

The financial cost is real but it is not the largest exposure. The fiduciary cost is. ERISA fiduciaries who breach their duties can be held personally liable to restore plan losses, and courts have referred to fiduciary obligations under the statute as among "the highest known to law" (ASPPA). A plan sponsor that relied entirely on a TPA's self-reported payment integrity metrics, with no independent verification, has a documentation problem the moment a participant or the Department of Labor asks how oversight was performed.

Consider the analogy of a building inspector who only checks whether individual bricks meet code. That inspector can sign off on every brick and still miss that the foundation was never surveyed. Payment integrity checks bricks. Fiduciary intelligence checks whether anyone verified the foundation.

What's Actually Happening Behind the Scenes

Sampling Gaps

A standard TPA audit reviews a stratified sample, commonly 200 to 400 claims, against plan documents (Baker Tilly). For a plan processing 80,000 claims annually, that represents roughly 0.3 percent to 0.5 percent of total claims volume (Benosphere). The remaining 99.5 percent goes unreviewed by anyone independent of the TPA.

Coordination of Benefits Failures

COB errors occur when a plan pays as primary when another payer, such as Medicare or a spouse's plan, should have paid first. A COB failure can produce a 60 percent to 80 percent overpayment on the affected claim (Benosphere), and these errors are difficult for automated payment integrity tools to catch because the claim itself may be coded correctly.

Vendor Fee Structures on Recovered Dollars

When TPAs or carrier-affiliated vendors do identify and recover overpayments, they frequently retain a substantial share. Post-pay recovery programs commonly take 40 percent to 50 percent of recovered dollars (ClaimInformatics), which means even a functioning payment integrity process may return less value to the plan than the raw recovery number suggests.

Governance Documentation

DOL guidance emphasizes that fiduciaries must document their decision-making process, not simply achieve a good outcome (DOL elaws Fiduciary Advisor). A payment integrity dashboard, no matter how sophisticated, is not itself governance documentation unless the plan sponsor can show it was reviewed, questioned, and acted upon.

Why Current Approaches Aren't Enough

How to fix it

Red Flags That Signal the Gap Applies to Your Plan

The ROI of Doing It Right

Independent claims audits with full review typically find discrepancies in 3 percent to 5 percent of paid claims costs, with actual recoveries in the 1 percent to 2 percent range (MedInsight). On a $30 million annual claims spend, that is $300,000 to $600,000 in identified overpayments, with $300,000 to $600,000 recoverable even under conservative assumptions.

The larger return is harder to put a number on but matters more in a dispute. A documented fiduciary process, maintained consistently across plan years, is described by the DOL as the strongest defense against audits and litigation (Ascensus). Plans that can produce that record are simply in a different legal position than plans that cannot, regardless of how their payment integrity metrics look in isolation.

Dependent eligibility reviews, treated as a distinct workstream from claims audits, frequently pay for themselves within months (Benosphere) and are one of the fastest ways to demonstrate near-term ROI while the broader fiduciary documentation process is being built out.

Conclusion and Next Steps

Payment integrity and fiduciary intelligence solve different problems, and a self-funded plan needs both. Payment integrity keeps individual claims accurate. Fiduciary intelligence protects the plan sponsor and named fiduciaries by documenting that oversight actually happened, in the way ERISA requires.

The gap between the two is exactly where fiduciary breach claims originate. Closing it does not require replacing your payment integrity vendor. It requires building a separate, deliberate governance record alongside it. [internal link: TPA performance guarantees guide] can help you evaluate whether your current vendor contract measures the right things, and [internal link: claims audit vs payment integrity comparison] walks through how to structure both functions without duplicating cost.

Frequently Asked Questions

Is payment integrity the same as fiduciary compliance?

‍No. Payment integrity checks individual claims accuracy. Fiduciary compliance requires documented, independent oversight of vendors under ERISA Section 404.

Who is legally responsible for claims errors, the TPA or the plan sponsor?

‍The plan sponsor. ERISA places fiduciary responsibility on the sponsor, not the TPA, even though the TPA processes the claims.

What does ERISA Section 404 actually require?

‍It requires fiduciaries to act with the care, skill, prudence, and diligence of a prudent expert familiar with plan administration.

How often should a self-funded plan run an independent claims audit?

‍Industry guidance generally recommends every two to three years, with more frequent monitoring for larger or higher-risk plans.

Can a plan sponsor rely on a TPA's self-reported accuracy numbers?

‍Relying solely on self-reported data, without independent verification, does not demonstrate the prudent oversight ERISA requires.

What percentage of claims does a typical TPA audit actually review?

‍Often well under 1 percent of total claims volume, since standard TPA audits use small stratified samples.

Does the Consolidated Appropriations Act change plan sponsor audit rights?

‍Yes. It strengthened plan sponsors' rights to full claims data access from TPAs and PBMs upon request.

What is the single most common dollar-weighted claims error?

‍Duplicate billing, followed closely by coordination of benefits failures on claims that should have paid secondary.

‍

Fiduciary intelligence is the independent claims oversight layer that sits between a third-party administrator (TPA) and a self-funded employer. It combines ongoing claims monitoring, audit documentation and vendor accountability data so plan sponsors can meet ERISA Section 404 duties instead of relying solely on the TPA's self-reported performance numbers.

A regional manufacturer with 1,400 employees ran an independent claims audit in 2024 and found $812,000 in overpayments across 18 months. The errors included a $47,000 inpatient claim paid twice, 63 ineligible dependents still active on the plan, and a specialty drug billed at 240% of the contracted rate. None of it showed up in the TPA's internal reporting, because none of it was ever reviewed.

That is not a rare story. It is the default outcome for a self-funded plan that treats its TPA's word as the audit. Most employer plans have no independent layer checking whether claims were paid correctly, and by the time anyone notices, the money is gone and the fiduciary exposure has already accrued.

What Fiduciary Intelligence Actually Means

Fiduciary intelligence is the independent oversight layer that verifies TPA claims performance instead of trusting it. Most employers assume their TPA relationship already includes this. It does not.

A TPA's job is to process claims according to plan documents and network contracts. A TPA's incentive is speed and member satisfaction, not necessarily financial accuracy on every dollar. Those two things frequently pull in different directions, and nothing in a standard administrative services agreement forces alignment.

The common assumption is that performance guarantees in the ASO contract already cover this ground. In reality, most guarantees measure turnaround time and claims-processing speed, not whether the dollar amount paid was correct. A TPA can hit every service level target in its contract while still overpaying claims at a rate the plan sponsor never sees.

Why the Oversight Gap Exists

The gap exists because plan sponsors delegate claims processing but rarely build independent verification into the relationship. Self-funded plans took off because employers wanted to bend the cost curve and gain flexibility insurance carriers do not offer. What did not scale at the same pace was internal expertise to monitor what a TPA actually does with that authority.

TPAs are not financially responsible for the plan. Their costs are covered by administrative fees, not by how accurately claims are paid, so they lack the same financial incentive an insurer carrying its own risk would have. That is not a matter of bad faith. It is simply a structural incentive problem plan sponsors need to correct with independent checks, not TPA good intentions.

Carrier and TPA post-pay sampling reviews typically cover only 3% to 5% of claims, and many ASO agreements specify an annual sample of just 300 to 350 claims regardless of plan size. A plan processing 200,000 claims a year can have 99.8% of its payments never independently reviewed by anyone outside the TPA that made the payment.

The Real Cost of an Unreviewed Plan

Unreviewed claims translate directly into unrecovered dollars, and the scale is larger than most benefits committees assume. Independent, full-population claims analysis consistently identifies error rates between 5% and 12% once every claim is checked instead of a sample, according to third-party claims analytics data covering more than $16 billion in reviewed claims. Industry benchmarks that rely on standard TPA sampling report a narrower 1% to 3% error range, largely because sampling catches fewer error types than a comprehensive review.

The dollar impact compounds quickly. A plan spending $20 million a year that carries even a 2% unrecovered error rate is looking at $400,000 walking out the door annually, before accounting for coordination of benefits failures or dependent eligibility errors that carry their own separate cost.

Consider the manufacturer's numbers again. Sixty-three ineligible dependents sitting on a plan for even one plan year can add tens of thousands of dollars in claims paid for people who should never have been covered. A single misapplied coordination of benefits rule, where the plan should have paid secondary but paid as primary instead, often produces a 60% to 80% overpayment on that specific claim.

What's Actually Happening Behind the Scenes

Coordination of Benefits Failures

Coordination of benefits, or COB, determines which plan pays first when a member has more than one source of coverage. When a TPA's system fails to catch a spouse's other employer coverage or a dependent's eligibility for a separate plan, the self-funded plan can end up paying as primary when it should be secondary. That single misconfiguration routinely produces overpayments in the 60% to 80% range on the affected claims.

Upcoding and Unbundling

Upcoding happens when a provider bills a higher-acuity procedure code than the service actually supports. Unbundling separates a single comprehensive procedure into multiple line items billed individually, inflating the total. Both require clinical and coding expertise to catch, which is exactly why standard TPA sampling rarely flags them.

Dependent Eligibility Drift

Employees change marital status, dependents age out, and COBRA windows close, but eligibility files do not always update on schedule. A plan that has not run a dependent eligibility verification in several years is very likely still paying claims for people who are no longer eligible for coverage.

Out-of-Network and Surprise Billing Gaps

Even after the No Surprises Act took effect, out-of-network claims can still slip through with billed charges well above usual and customary rates when a plan is not actively reviewing them. Without active oversight, the plan simply pays whatever the TPA's repricing engine calculates, correct or not.

Specialty Pharmacy Spend

Specialty drugs now account for more than half of pharmacy spend on many self-funded plans, and pricing errors in this category carry outsized dollar impact per incident compared to medical claims. A single misapplied contract rate on a specialty drug claim can run into tens of thousands of dollars.

Why Current Approaches Aren't Enough

Standard TPA performance guarantees were built to measure operational speed, not financial accuracy, and that mismatch is the core problem plan sponsors need to solve.

How to Fix It

Red Flags That Signal the Problem Applies to Your Plan

The ROI of Doing It Right

A full independent claims audit typically recovers 1% to 3% of annual claims spending on its first pass. For a plan spending $20 million a year, that translates to $200,000 to $600,000 recovered, often within the first audit cycle. Ongoing monthly or quarterly monitoring tends to catch errors closer to the point of payment, which both prevents future leakage and creates a documented accountability trail with the TPA.

Audit costs are typically far lower than the amount recovered, particularly for mid-sized and large plans. Beyond the direct dollar recovery, the process strengthens vendor negotiating position at renewal and produces the kind of documentation that demonstrates a prudent fiduciary process, which matters enormously if the Department of Labor's Employee Benefits Security Administration ever opens an inquiry.

EBSA recovered more than $1.4 billion for retirement, health and welfare plans in fiscal year 2025 alone, closing 878 civil investigations with 556 producing monetary or corrective results.

Conclusion and Next Steps

Self-funded plans now cover the majority of American workers with employer health benefits, and that share keeps growing. Every one of those plans carries fiduciary duties that do not pause just because a TPA is handling the paperwork. Fiduciary intelligence, in the form of independent claims oversight, is what actually closes that gap between delegation and accountability.

The next step is straightforward. Pull your ASO agreement and check the audit rights clause, then ask your benefits committee when the plan's claims were last independently reviewed. If nobody has a confident answer, that is the signal to schedule a claims audit and dependent eligibility review before the next renewal cycle.

Frequently Asked Questions

What is fiduciary intelligence in the context of self-funded health plans?

‍It is the independent oversight layer, combining claims monitoring and audit documentation, that verifies TPA performance rather than relying on the TPA's own reporting.

Who holds fiduciary responsibility for claims accuracy under ERISA?

‍The plan sponsor, under ERISA Section 404, regardless of which vendor actually processes and pays the claims. [external link: DOL/EBSA fiduciary responsibilities guide]

How often should a self-funded plan audit its TPA?

‍At minimum every one to two years for larger plans, with ongoing monthly or quarterly monitoring recommended between formal audits.

What percentage of claims does a typical TPA sampling audit review?

‍Roughly 3% to 5%, often limited to a fixed sample of 300 to 350 claims per year regardless of total plan size.

How much can an independent claims audit typically recover?

‍Most first-time audits recover 1% to 3% of annual claims spend, which can total hundreds of thousands of dollars on mid-sized plans.

What is the difference between a TPA performance guarantee and a fiduciary audit?

‍Performance guarantees measure speed and procedural accuracy; a fiduciary audit measures whether the dollar amount paid was actually correct.

Can a plan sponsor be held personally liable for TPA errors it never discovered?

‍Yes. ERISA fiduciary duty requires a prudent ongoing process, and failing to monitor a TPA can itself constitute a breach regardless of who made the underlying error.

What is coordination of benefits and why does it matter for claims accuracy?

‍COB determines which plan pays first when a member has multiple coverage sources; failures here commonly cause 60% to 80% overpayments on affected claims.

‍

‍

The claims that shape a self-funded plan's renewal are rarely the flagged, high-dollar outliers a TPA reviews closely. They are the routine mid-range claims, often between $500 and $15,000, that pass through standard adjudication unchecked. Left unaudited, this volume of small errors accumulates into the claims trend data insurers use to set renewal pricing.

A self-funded employer with a $30 million annual claims spend trusts its TPA's reported 99% payment accuracy rate at face value. An independent audit later shows the real financial accuracy sits closer to 96.8%, with payment accuracy at 96.1% (Baker Tilly, 2026).

That two to three point gap on a plan this size can mean hundreds of thousands of dollars in overpayments the plan never saw coming. None of those errors showed up as outliers. They were ordinary, mid-range claims that simply moved through the system.

What "The Claims Nobody Flags" Actually Means

The claims that damage a self-funded plan financially are not the ones anyone is watching. Most plan sponsors assume risk lives in the big, obvious claims: the $400,000 transplant, the six-figure NICU stay, the catastrophic case that triggers stop-loss reimbursement. Those claims get scrutiny by default because the dollar amount forces it.

The claims nobody flags are different. They sit in the $500 to $15,000 range, look ordinary on their face, and process through standard adjudication rules without triggering any manual review. A duplicate physical therapy session, a specialty drug billed slightly above the contracted rate, a coordination-of-benefits error where the plan paid as primary instead of secondary: none of these look alarming individually.

The reality is that volume beats size. A single $400,000 claim gets audited. Ten thousand $1,200 claims with a 3% error rate do not, and that 3% adds up to real money moving out the door every single month.

Why This Problem Exists in the First Place

TPAs are not financially incentivized to catch every small error, because the cost of the error falls on the plan, not on them. This is the structural root of the issue. A TPA's contract typically ties performance guarantees to speed and procedural accuracy, not to overpayment rates.

Claims adjudication systems are built for throughput. Prompt payment requirements common in TPA contracts, often 21 to 30 days from receipt, push claims through fast rather than carefully. The faster a claim moves, the less time anyone spends confirming eligibility, coordination of benefits, or contracted pricing before payment goes out.

Add to this a sampling problem. Most routine post-payment audits built into Administrative Services Only agreements review a small, fixed sample, commonly 300 to 350 claims per year regardless of total plan volume. On a plan processing 40,000 claims annually, that sample size touches well under 1% of total activity, which means the other 99% simply goes unchecked.

The Real Cost and Impact on Plan Spending

Unflagged mid-range claims errors are not rounding errors. They are a measurable percentage of total plan spend, year after year. Industry benchmarks place typical TPA claims error rates between 1% and 3% of total claims processed, with some sources citing a wider 2% to 6% range depending on plan complexity and TPA maturity (WTW, 2025; Baker Tilly, 2026).

A peer-reviewed comparison of audit methodologies analyzed claim data from two Fortune 100 corporations and found that random-sample audits failed to catch a meaningful share of errors that, in aggregate, ranged from $200,000 to $750,000 per plan.

The same research concluded that reviewing 100% of claims rather than a small sample surfaced significantly more of these errors. That is not a marginal difference. That is the gap between a plan that thinks it is clean and a plan that is quietly bleeding.

Think of it like a slow leak in a tire rather than a blowout. A blowout, the catastrophic claim, gets immediate attention because it is impossible to ignore. A slow leak, the routine claims error repeated thousands of times, goes unnoticed until the plan sponsor is standing at the renewal table wondering why the trend line moved.

What's Actually Happening Behind the Scenes

Duplicate and Resubmitted Claims

Duplicate billing remains one of the most common dollar-weighted error types found in claims audits. It typically happens when a provider resubmits a claim, when a plan migrates administrative systems, or when a secondary insurer's payment is not properly coordinated with the plan's own payment.

Coordination of Benefits Failures

When a plan pays as primary on a claim where another carrier should have paid first, a common scenario for dependents with other coverage or spouses on a second plan, the overpayment on that single claim can run significantly higher than it should. These errors require cross-referencing eligibility data that standard adjudication rarely checks in real time.

Upcoding and Unbundling

Upcoding bills a higher-acuity procedure code than the service actually supports. Unbundling charges separately for components of care that should be billed under one comprehensive code. Both inflate provider revenue at the plan's expense, and both require clinical and coding expertise to catch, which is exactly why a standard TPA sample audit rarely flags them.

Why Current Audit Approaches Aren't Enough

A once-a-year sample audit checks whether the TPA followed procedure. It does not tell a plan sponsor whether the plan actually lost money. These are two different questions, and most benefits committees only ever get an answer to the first one.

How to Fix It: A Practical Action Plan

Red Flags That Signal Your Plan Has This Problem

The ROI of Getting Claims Oversight Right

A full independent claims audit typically recovers between 1% and 3% of annual claims spending in its first year. For a plan spending $20 million annually, that translates to $200,000 to $600,000 in direct recoveries, often exceeding the entire cost of the audit itself many times over.

Beyond direct recovery, the ongoing value compounds. Ongoing monitoring catches new errors before they repeat across thousands of claims, and it builds a documented, defensible fiduciary process that protects plan sponsors named personally in ERISA litigation.

There is also a renewal-specific benefit. A plan sponsor walking into a stop-loss or TPA renewal conversation with independently verified claims data negotiates from evidence, not assumption, which shifts leverage back toward the employer.

Conclusion and Next Steps

The claims that quietly reshape a self-funded plan's renewal are not the ones anyone was watching. They are the ordinary, mid-range claims moving through standard adjudication every day, unflagged and unaudited. A self-funded health plan claims audit is the single most direct way to find out what is actually happening inside that volume before the renewal conversation forces the question.

Plan sponsors carry fiduciary responsibility for this outcome whether or not they have the visibility to act on it. The next step is straightforward: confirm your audit rights, move from annual sampling toward ongoing monitoring, and bring independently verified claims data to your next renewal instead of relying solely on your TPA's own reporting.

Frequently Asked Questions

What is a self-funded health plan claims audit?

An independent review of paid claims to verify accuracy, eligibility, and contract compliance beyond what the TPA reports internally.

How often should a self-funded plan audit its claims?

Most large plans benefit from an annual independent audit paired with ongoing monthly or quarterly monitoring between full reviews.

What is a typical TPA claims error rate?

Industry benchmarks generally place TPA error rates between 1% and 3% of total claims, with some sources citing up to 6%.

Why does the plan sponsor bear fiduciary risk instead of the TPA?

ERISA assigns fiduciary responsibility to whoever exercises discretionary control over the plan, and sponsors typically retain that role even when a TPA administers claims.

Can a claims audit really pay for itself?

Yes. Recoveries of 1% to 3% of annual claims spend routinely exceed audit costs, especially for mid-sized and large plans.

What is the most common type of claims error?

Duplicate billing is consistently cited as the most common dollar-weighted error category in independent audits.

Does a small sample audit satisfy ERISA's fiduciary standard?

A sample audit alone may not demonstrate a fully prudent process, since it leaves the large majority of claims unreviewed.

What should a plan sponsor look for in an independent audit firm?

Look for coding and clinical expertise, no ownership ties to the TPA, and a fee model tied to actual findings rather than flat retainer billing.

‍

‍

‍

‍

Claims oversight for a self-funded health plan means independently verifying that claims were paid correctly under the negotiated contract, not just that a rate was negotiated. Most TPAs self-report accuracy above 96%, but independent audits routinely find 1% to 10% of claims dollars paid in error.

A 1,400-employee manufacturer ran its first independent claims audit in 2024, eighteen months into a new TPA relationship. The audit found $812,000 in overpayments, including a $47,000 inpatient claim paid twice and a specialty drug billed at 240% of the contracted rate. None of it had surfaced in the TPA's own reporting.

This is the blind spot inside most self-funded employer health plans. Benefits committees spend months negotiating stop-loss terms, network discounts, and PBM rebates, then hand claims payment entirely to a TPA and stop watching.

Sixty-seven percent of covered workers, including 80% at large firms, are now enrolled in self-funded plans, according to KFF's 2025 Employer Health Benefits Survey. That is a lot of employer money moving through systems almost nobody independently checks.

Negotiated Pricing Is Not the Same as Paid Correctly

A negotiated rate protects a plan only if each claim is processed using the correct contract, and most plans have no independent way to verify that. Many plan sponsors assume that once a discount or fee schedule is negotiated, every claim is automatically paid at that rate. It is not. Negotiating the price determines what the plan should pay. Claims adjudication determines what the plan actually pays.

Pricing is a static number in a contract. Payment is a live process running through claims adjudication software, manual review queues, coordination of benefits logic, and provider billing codes, any one of which can override the contracted rate without anyone noticing.

A negotiated 40% network discount means nothing on a claim that was coded wrong, paid to the wrong coordination order, or processed against an expired fee schedule.

Why the Gap Exists

The gap exists because TPAs are not financially exposed when claims payments go wrong, so accuracy checking rarely gets the same rigor as claims processing speed. Under most administrative services agreements, the TPA processes claims and gets paid a fee regardless of whether the plan overpaid. The plan bears the financial risk. The TPA does not.

That misalignment shows up in what gets measured. TPA performance guarantees typically track turnaround time and procedural compliance rather than dollar accuracy. A TPA can hit every service level target in its contract while still paying claims incorrectly, because the contract was never written to test for that.

Reporting compounds the problem. TPA accuracy figures are usually self-reported, while independent claims audits often identify payment errors that internal reviews miss.

Because self-reported accuracy measures vary by methodology, an independent review is frequently the only way to verify whether claims were processed according to plan documents, provider contracts and payment rules. Studies of claims accuracy show that audit methodology can materially affect reported results.

The Real Cost of Unreviewed Claims

Unreviewed claims create measurable financial losses for self-funded plans, and those losses grow as plan spending increases. Industry benchmarks estimate that claims payment errors typically affect 1% to 3% of total claims dollars, while some comprehensive independent audits have identified substantially higher error rates when 100% of claims are reviewed instead of a small sample.

Even a modest error rate can translate into hundreds of thousands of dollars in unnecessary spending each year for larger self-funded plans.

Coordination of benefits (COB) failures are among the most expensive claims payment errors. When a self-funded plan pays as the primary insurer on a claim that should have been paid second, it may cover costs that another health plan was responsible for first.

The resulting overpayment on a single claim can equal 60% to 80% of the amount your plan paid. Across a workforce with employees and dependents covered by multiple health plans, even a small number of COB errors can create substantial unnecessary costs over the course of a plan year.

What's Actually Happening Behind the Scenes

Duplicate Payments

Duplicate billing is consistently the highest dollar-weighted error category found in claims audits. It happens when a provider resubmits a claim, when a TPA migrates claims systems, or when a secondary payer's response is not reconciled against the primary payment. The same procedure code, same date of service, and same patient can get paid twice without triggering an internal flag.

Eligibility Drift

Plans routinely keep paying claims for people who are no longer eligible, and nobody catches it until an audit runs a full eligibility reconciliation. Terminated employees, dependents who aged out, and spouses who gained other primary coverage all continue generating paid claims until someone cross-checks eligibility files against claims data, which most TPAs are not contractually required to do proactively.

Coordination of Benefits Errors

When a plan should pay secondary but pays as primary instead, the overpayment on that claim is disproportionately large. This failure mode is common where employees have working spouses with their own coverage, and it is one of the few error categories where a single claim can carry a five- or six-figure correction.

Contract Misapplication

Even a well-negotiated rate schedule can be misapplied if the adjudication system was never updated to reflect it. Specialty drug pricing, out-of-network reimbursement caps, and site-of-service differentials are common places where the contracted rate and the paid rate quietly diverge, sometimes for months before anyone notices.

Why Current Approaches Aren't Enough

Most plans rely on the TPA's own performance guarantees and periodic sample audits to confirm accuracy. Both approaches were built to measure process, not dollars, and both leave the plan sponsor with an incomplete picture of what was actually paid.

How to fix it

Red Flags That Signal the Problem Applies to Your Plan

The ROI of Doing It Right

Independent claims oversight typically pays for itself well beyond its cost, both in direct recovery and in reduced fiduciary risk. A first-year comprehensive audit commonly recovers 1% to 3% of annual claims spend, and audit fees are generally far smaller than the amounts identified, particularly for plans in the mid-size to large range.

There is also a fiduciary dimension that does not show up on a savings spreadsheet. A documented, defensible oversight process is exactly what ERISA's duty of prudence requires, and it is the kind of record that matters if a plan is ever the subject of a DOL inquiry or a participant lawsuit.

There is also a fiduciary dimension that does not show up on a savings spreadsheet. A documented, defensible Independent claims oversight process is exactly what ERISA fiduciary responsibilities require, and it is the kind of record that matters if a plan is ever the subject of a DOL inquiry or a participant lawsuit. Courts evaluating an ERISA duty of prudence place significant weight on the fiduciary's decision-making process and documentation.

Conclusion and Next Steps

Negotiating strong contract terms is necessary but not sufficient. A self-funded health plan's real financial exposure lives in the gap between what was negotiated and what was actually paid, and that gap only closes with independent claims oversight. The plans absorbing $812,000 overpayment findings are not unusual. They are simply the ones who finally looked.

Start with a scoping conversation about your plan's current audit rights, your TPA's self-reported accuracy figures, and when your claims data was last independently reviewed. If the honest answer is "we're not sure," that uncertainty is itself the finding your benefits committee needs to document and address.

Frequently Asked Questions

Is a self-funded employer legally required to audit its health plan claims?

ERISA does not mandate a specific audit schedule, but it does require fiduciaries to prudently monitor service providers, including TPAs. Without some form of independent verification, a plan sponsor has no reliable way to demonstrate that monitoring duty was fulfilled.

How often should a self-funded plan conduct a claims audit?

Most claims audit specialists recommend an annual review for larger plans and at least a biennial review for smaller ones. Plans that change TPAs, PBMs, or plan designs should also audit at the transition point before historical claims become harder to access.

What is a normal TPA claims error rate?

Industry benchmarks generally place administrator error rates between 1% and 3% of total claims dollars in routine operations, with some independent full-scope audits finding rates as high as 10% once every claim is reviewed rather than a small sample.

Who is liable if a TPA pays a claim incorrectly?

The plan sponsor generally carries fiduciary and financial responsibility, even though the TPA processed the claim. A contract with the TPA does not transfer ERISA fiduciary liability away from the plan sponsor.

How much does an independent claims audit typically cost?

Costs vary by plan size and audit scope, but many claims audit firms work on a contingency or hybrid fee tied to recovered dollars. Fees are typically well below the amount recovered, especially for mid-sized and large plans.

Can a TPA restrict how much of the claims data a plan is allowed to audit?

Some TPA contracts include language limiting audits to a random sample. Plan sponsors can and should negotiate broader audit rights, including the ability to review any claim at any time using an auditor of their choosing.

What is the difference between a TPA performance guarantee and a claims audit?

A performance guarantee measures whether the TPA hit contractual service metrics, typically speed and procedural compliance. A claims audit independently verifies whether the dollar amount paid on each claim matches what the plan document and contract actually require.

Does the Department of Labor actually investigate self-funded health plans over claims issues?

Yes. EBSA closed 878 civil investigations in FY 2025 and recovered $1.4 billion across enforcement and informal resolution, and has named health and welfare plan oversight a national enforcement priority for FY 2026.

‍

‍

‍

‍

‍

The healthcare claims oversight gap refers to medical claims, usually between $5,000 and $25,000, that often receive little or no review. They are too small to trigger a stop-loss review and too large to be treated as routine low-cost claims.

Together, these claims make up a large share of plan spending, and payment errors in this range are estimated to cost self-funded plans 2% to 5% of their annual claims spend.

A self-funded employer spendizng $15 million on healthcare claims each year could be losing $150,000 to $450,000 annually to payment errors without ever receiving a report that identifies those mistakes.

The Oversight Gap Most Plans Don't Know They Have

Mid-range claims are the most common and least-reviewed category in most self-funded health plans. Most plan sponsors believe their TPA handles auditing. That assumption is expensive. A standard TPA audit reviews a random sample of 250 to 400 claims and uses the results to generate an overall accuracy score. That score becomes the plan's reported error rate.

The claims oversight gap exists because no one routinely reviews a large portion of healthcare claims. Stop-loss carriers focus on very high-cost claims, while low-cost claims are often processed automatically. The claims in between receive the least attention, even though they make up a significant share of healthcare spending.

This middle band, typically claims between $5,000 and $25,000, accounts for a significant share of a typical plan's annual healthcare spending. It includes orthopedic surgeries, outpatient procedures, emergency room visits with facility fees, and specialty infusion claims that quietly add up across hundreds of members. For most self-funded plans, these claims are processed and paid without independent review.

Why the Problem Exists

This oversight gap exists for three main reasons. First, TPAs are paid to process claims, not to find mistakes in their own work. Second, many audits review only a sample of claims instead of every claim. Third, employers often have limited access to detailed claims data. Many plan sponsors also don't realize that the "audit" included in their TPA contract is usually an internal review by the TPA, not an independent claims audit.

Most claims audits review only a small sample of claims. For example, if a health plan processes 40,000 claims in a year and the audit reviews only 350, more than 39,000 claims are never checked. If the same billing mistake appears on hundreds of claims that aren't part of the sample, the audit may never find it.

Data access has historically made the situation worse. Many TPA contracts included gag clauses that restricted employers from accessing detailed claims data or from hiring independent auditors outside the TPA's approved list. Section 201 of the Consolidated Appropriations Act of 2021 (CAA 2021) explicitly prohibited these clauses and required plan sponsors to attest annually to the DOL that their contracts do not contain them. Despite the law, some plan sponsors still face delays and partial disclosures when requesting their own data.

The Real Cost

The financial impact of unreviewed claims is significant. Industry estimates put claims payment error rates at 2% to 5% of annual healthcare spending, even among well-performing TPAs. According to Withum, overpayment recoveries typically represent 1% to 1.5% of paid claims.

For a health plan spending $20 million a year, that could mean $200,000 to $300,000 in recoverable overpayments that go unnoticed.

The risk is not only financial. ERISA Section 404 requires plan fiduciaries to manage plan assets with care and prudence. Regular claims oversight helps demonstrate that the plan sponsor is actively monitoring healthcare spending.

Without documented oversight, employers may face greater legal and fiduciary risk if their claims administration is questioned. Recent litigation has also placed increased attention on whether plan sponsors are adequately monitoring healthcare plan expenses and service providers.

What's Actually Happening Behind the Scenes

Four specific error categories drive the majority of recoverable overpayments in mid-range claims, and none of them require fraud to occur.

Duplicate Payments

Duplicate claims occur when the same medical service is billed more than once. Although TPAs have duplicate detection systems, small differences in billing details can prevent the claims from being flagged, allowing the same service to be paid twice.

Coordination of Benefits Failures

When a member has more than one health plan, one plan should pay first and the other should pay only the remaining balance. COB errors occur when the wrong plan pays first or the TPA doesn't recognize other coverage, causing the employer's plan to overpay.

Medical Coding Errors and Upcoding

Procedure codes determine how much a health plan pays for a service. Upcoding happens when a provider bills for a more complex service than was performed, resulting in a higher payment. These errors are often caused by coding or documentation issues and can go unnoticed without an independent review.

Eligibility Errors

Eligibility errors occur when a health plan pays claims for people who are no longer covered, such as former employees or dependents who have lost eligibility. If these records are not updated on time, the plan can pay claims that should never have been covered.

Why Current Approaches Are Not Enough

The typical audit model was designed for compliance documentation, not financial recovery. The table below illustrates the structural difference between what most plans do and what an independent claims oversight program actually requires.

How to Fix It

Fixing the oversight gap requires six specific actions, not a single vendor change.

Red Flags That Signal This Problem Applies to Your Plan

The ROI of Doing It Right

An independent claims oversight program can pay for itself. First-time audits often recover 1% to 3% of annual claims spend. For a $10 million health plan, that could mean $100,000 to $300,000 in recoveries, while audit fees are typically much lower.

The benefits continue beyond the first audit. Regular claims monitoring helps reduce recurring errors because TPAs know their work is being reviewed. Over time, this can improve claims accuracy and reduce unnecessary spending.

There is also a fiduciary benefit. A documented claims oversight program shows that the plan sponsor is actively monitoring healthcare spending. If the plan is ever reviewed by regulators or challenged by participants, those records can help demonstrate prudent oversight.

Conclusion and Next Steps

Many mid-range healthcare claims are paid without an independent review, leaving plans exposed to unnecessary costs and risk. The good news is that employers now have better access to claims data, making independent oversight easier than before.

Start by requesting complete claims data from your TPA under your CAA 2021 rights. Then conduct an independent 100% claims audit to identify errors and establish a baseline. Use the results to strengthen your TPA agreement and implement regular claims monitoring to prevent future overpayments.

Frequently Asked Questions

What is the healthcare claims oversight gap?

‍The claims oversight gap is the portion of claims that are paid without an independent review. Most self-funded plans audit only a small sample of claims, leaving many payment errors undetected.

What percentage of health plan claims contain errors?

‍Industry estimates suggest that 2% to 5% of annual claims costs contain payment errors, including duplicate payments, coding mistakes, COB failures, and eligibility errors.

Who is responsible for claims accuracy under ERISA?

‍The plan sponsor is responsible for overseeing claims payments. While a TPA processes claims, the employer remains responsible for monitoring the plan.

What does the CAA 2021 require regarding claims data access?

‍The CAA 2021 prohibits contract clauses that prevent employers from accessing claims data or using independent auditors. Plans must annually attest that their contracts comply.

How much can an independent claims audit recover?

‍A first-time independent audit typically recovers 1% to 3% of annual claims spend. On a $20 million plan, that could equal $200,000 to $600,000 in recoverable overpayments.

How is a 100% claims review different from a sample audit?

‍A sample audit reviews only a small number of claims. A 100% review examines every claim, helping identify specific overpayments and recurring billing errors.

How often should a self-funded plan conduct an independent claims audit?

‍Most plans should perform an independent audit at least once a year and monitor claims regularly throughout the year.

What should I look for in an independent claims audit firm?

‍Choose a firm that is independent of your TPA, reviews 100% of claims, has medical coding expertise, and offers a transparent fee structure.

‍

‍

‍

Healthcare claims oversight refers to a plan sponsor's process of systematically reviewing medical and pharmacy claims paid on a self-funded health plan for errors, fraud and overbilling. Most employers rely on their TPA to catch errors, but independent audits routinely find that 3 to 7 percent of paid claims contain recoverable overpayments.

A mid-sized manufacturer in Ohio discovered last year that its TPA had been paying a local hospital system at billed charges for nearly three years. The contract clearly called for network rates. The error cost the plan over $1.1 million before anyone noticed. The plan sponsor was the employer. No one at the company had reviewed a single Explanation of Benefits.

Plan Sponsors Are Flying Blind on Claims

Most employers have no systematic process to verify that the claims paid on their health plan are accurate, appropriate or even contractually permitted.

The assumption is that the TPA handles it. The TPA assumes it is processing claims per the plan document and network contracts. In practice, neither party is actively looking for errors on a sustained basis. That gap between assumption and reality is where overpayments live.

Self-funded plans cover roughly 65 percent of all privately insured workers in the United States, according to the Kaiser Family Foundation. Collectively, employer-sponsored plans pay trillions in claims each year.

The typical process remains largely unchanged: a TPA processes claims, issues EOBs, and coordinates payments, while employers often rely on summary reports rather than reviewing claim-level activity.

Why the Problem Exists

The current self-funded model can make it challenging to maintain continuous, detailed claims oversight.

TPAs are generally compensated for claims administration rather than claims accuracy. As a result, independent claims reviews can provide an additional layer of oversight and help identify issues that may not be apparent through routine claims processing alone.

As a result, many employers rely primarily on vendor reporting and may have limited ability to independently validate claim accuracy.

The Real Cost of Inadequate Claims Oversight

Claims leakage, the portion of plan spend lost to errors, fraud, waste and overbilling, typically runs between 3 and 7 percent of total paid claims, based on industry auditing benchmarks published by auditing firms and benefits consultants.

For a self-funded employer spending $10 million annually on health claims, a 3% to 7% payment error rate could represent $300,000 to $700,000 in potential payment errors or avoidable claims costs, depending on the nature of the errors and whether they can be recovered.

Self-funded employers are facing greater scrutiny over how they oversee health plan spending. Benefits attorneys, including the Groom Law Group, have noted that ERISA investigations increasingly focus on whether plan sponsors have prudent oversight processes.

In Lewandowski v. Johnson & Johnson, participants alleged the employer failed to manage pharmacy spending prudently. Although the court dismissed the fiduciary claims on standing grounds without ruling on the merits, the case highlighted growing expectations for stronger health plan oversight and governance.

What's Actually Happening Behind the Scenes

Claims adjudication is a high-volume, rules-based automated process and automated rules can be misconfigured, outdated or simply absent.

Duplicate Claims

A provider submits a claim. A clearinghouse resubmits it. The TPA pays it twice. Duplicate logic in adjudication systems is supposed to catch this, but logic exceptions exist. Retrospective audits by independent firms routinely recover duplicate payments as one of the most common error categories.

Upcoding and Unbundling

A facility bills a complex evaluation and management visit when the documentation supports a lower-level code. Or a surgical procedure is billed as multiple component codes when a single bundled code should apply. These errors inflate reimbursement and are rarely flagged by TPA automated edits without specific clinical logic overlays.

Coordination of Benefits Failures

When a participant has coverage under two plans, the primary carrier is supposed to pay first. COB errors occur when the TPA lacks current information about secondary coverage or fails to recover from the other carrier. These can result in the self-funded plan overpaying as both primary and secondary payer simultaneously.

Contract Pricing Errors

Network contracts specify allowed amounts, discount thresholds, carve-outs and fee schedules. When a TPA's pricing file is not updated to reflect contract renegotiations, or when a claim routes to an out-of-network provider incorrectly classified as in-network, the plan overpays. This category of error can be large per-claim and is difficult to detect without comparing paid amounts against the actual contract.

Billing Fraud and Abuse

This is distinct from honest errors. Some providers systematically bill for services not rendered, upcode routinely or fabricate diagnoses. FBI and OIG enforcement data show healthcare fraud costs the U.S. system tens of billions annually. Self-funded plans are targets because they often lack the robust fraud analytics that large commercial carriers deploy.

Why Current Approaches Are Not Enough

Most TPAs have internal audit functions and claim editing software. These catch a portion of errors before payment (pre-payment editing) or flag obvious duplicates. But they are not independent, they are not comprehensive, and they are not designed to surface systemic problems in the TPA's own adjudication.

Think of it this way. Asking your TPA to audit its own claims accuracy is like asking a restaurant to grade its own health inspection. The restaurant may have good intentions and internal protocols. But the incentive structure makes objective self-assessment structurally difficult.

How to Fix It: A Practical Oversight Framework

Plan sponsors can establish meaningful claims oversight without replacing their TPA, using a layered approach that combines contractual rights, independent review and ongoing monitoring.

Red Flags That Signal Your Plan Has a Claims Oversight Problem

The ROI of Getting Claims Oversight Right

Independent claims audits return between $3 and $12 for every $1 spent on the audit, based on published recovery ranges from auditing firms and benefits consulting organizations.

A one-time retrospective audit on a plan with $15 million in annual claims typically identifies $300,000 to $900,000 in recoverable overpayments. Recovery depends on contractual provisions with the TPA and the age of the errors found, but most TPA agreements allow recovery of documented overpayments.

The Milliman actuarial consulting firm has documented that plans with active oversight programs spend 2 to 5 percent less on claims over time compared to unmonitored plans, controlling for demographics and benefit design.

Regular claims audits don't just help find billing errors and save money. They also create a record showing that the employer was actively monitoring the health plan. If questions ever arise about how the plan was managed, that documentation can be valuable. In many cases, the cost of dealing with legal disputes or regulatory investigations can be far greater than the cost of maintaining a proactive claims oversight program.

Conclusion and Next Steps

Healthcare claims oversight is not a luxury or a compliance checkbox. It is one of the most financially consequential activities a self-funded plan sponsor can undertake.

The technology to monitor claims accurately in near-real time has existed for years. The legal obligation to do so under ERISA has existed for decades. What has changed is the enforcement environment. DOL investigations are broader. Participant lawsuits are more specific about fiduciary process failures. Stop-loss carriers are paying closer attention to what was reviewed before a large claim was paid.

Start with a baseline retrospective audit. Review your TPA agreement for audit rights. Assign someone in finance or legal to own the oversight process. Those three steps will put your plan ahead of a large majority of self-funded employers in the country.

Frequently Asked Questions

What is healthcare claims oversight for a self-funded plan?

Healthcare claims oversight is the process of checking that medical and pharmacy claims are paid accurately and according to plan rules. It includes claims audits, eligibility checks, coordination of benefits (COB), and monitoring TPA performance.

Is a plan sponsor legally required to audit claims under ERISA?

ERISA does not require a specific audit schedule, but it requires plan fiduciaries to monitor plan operations and service providers. Regular claims reviews help demonstrate prudent oversight.

How much does an independent claims audit cost?

Costs vary by plan size and scope. Retrospective audits often range from $15,000 to $50,000, while some firms work on a contingency basis and only charge if they recover overpayments.

What percentage of claims typically contain errors?

Industry benchmarks suggest that 3% to 7% of paid claims contain recoverable errors, including duplicate payments, pricing mistakes, eligibility issues, and billing errors.

Can the plan recover overpayments from the TPA?

It depends on the TPA agreement and the type of error. Many contracts allow recovery of overpayments, but recovery deadlines and conditions vary.

What is the difference between a retrospective audit and concurrent review?

A retrospective audit reviews claims after they are paid to identify recoverable overpayments. Concurrent review examines claims before or shortly after payment to prevent errors from occurring.

Does the CAA 2021 change claims oversight obligations for employers?

The CAA 2021 increased transparency requirements but did not require routine claims audits. It reinforced that plan sponsors are responsible for understanding and monitoring healthcare spending.

How do I know if my TPA agreement allows an independent audit?

Review your ASO or ASA agreement for audit rights, data access, and recovery provisions. If these rights are unclear, consider negotiating stronger audit language at your next contract renewal.

‍