ERISA Mastery: Navigating Fiduciary Duties and Compliance Risks

Yes. An ERISA plan can exist even without formal paperwork or a written "plan document." If an employer offers benefits like a 401(k), telemedicine, or even an onsite daycare, they are likely subject to ERISA regulations. Operating without the required documentation does not exempt an employer from the law; rather, it means the organization is already out of compliance and could face penalties of up to $1,100 per day.

The "prudent expert" standard is a high legal duty that requires fiduciaries to act with the care, skill, and diligence that a professional in that specific field would use. Under ERISA, fiduciaries are not judged simply on their honesty, but on their expertise and decision-making process. If a lack of expertise leads to a breach of duty—such as failing to monitor high plan fees—the individual fiduciary can be held personally liable to restore any losses to the plan.

Employers are required to distribute several key documents to ensure transparency. The Summary Plan Description (SPD) is a "plain English" guide to how the plan operates and must be provided within 90 days of coverage. If significant changes are made to the plan, a Summary of Material Modification (SMM) must be issued. Additionally, participants must receive a Summary Annual Report (SAR), which is a narrative version of the plan’s financial filings, to inform them of how money moved through the plan during the year.

ERISA mandates a structured grievance process for when a benefit claim is denied. Employers must provide a written "Notice of Benefit Determination" that cites specific plan provisions for the denial and outlines step-by-step instructions for an appeal. Participants generally must exhaust this internal appeals process before they are permitted to file a lawsuit in federal court. For certain health plans, an additional layer of protection exists through an external review by an Independent Review Organization.

In a self-funded plan, the employer assumes the financial risk for claims rather than paying a premium to an insurance company. This puts the employer’s own bank account on the hook for medical costs. Because the employer is "the bank," the Department of Labor monitors these plans closely for conflicts of interest. While employers often hire Third-Party Administrators (TPAs) to process claims, the legal responsibility for ERISA compliance remains entirely with the employer, who must actively monitor the TPA’s performance.