Through Compliance Assistance Release No. 2024-01, the U.S. Department of Labor’s Employee Benefits Security Administration (EBSA) is confirming that the cybersecurity guidance it issued in April 2021 generally applies to all employee benefit plans, including health and welfare plans.
Background
In 2021, EBSA issued cybersecurity guidance to help plan sponsors, fiduciaries, service providers, and participants in employee benefit plans safeguard plan data, personal information and plan assets. However, in the years since, health and welfare plan service providers have told fiduciaries and EBSA investigators that this guidance only applies to retirement plans. Thus, it was recommended in 2022 that EBSA clarify that the guidance also applies to health benefit plans.
Updated Guidance
The Compliance Release clarifies that the cybersecurity guidance applies to all types of plans covered by the Employee Retirement Income Security Act of 1974 (ERISA), including health and welfare plans and all employee pension benefit plans. EBSA is providing the following updated guidance:
- Tips for Hiring a Service Provider: This guidance helps plan sponsors and fiduciaries prudently select a service provider with strong cybersecurity practices and monitor their activities, as required by ERISA.
- Cybersecurity Program Best Practices: This guidance assists plan fiduciaries and recordkeepers in their responsibilities to manage cybersecurity risks.
- Online Security Tips: This guidance offers plan participants and beneficiaries who check their retirement accounts or other employee benefit information online basic rules to reduce the risk of fraud and loss.
Additional Resources
The U.S. Department of Health and Human Services also offers publications that may help health plans and their service providers maintain good cybersecurity practices, as follows:
Related Blogs
WHAT ARE “TRUMP ACCOUNTS” (530A ACCOUNTS)—AND SHOULD EMPLOYERS CARE?
At MJ’s recent Economic Outlook, our team shared perspectives on the forces shaping today’s business and benefits landscape—from rising healthcare costs to evolving insurance ...
Read More
AVOIDING COMPENSATION EMERGENCIES BEFORE THEY HAPPEN
Growth, acquisitions, leadership transitions, and organizational change often expose weaknesses that have existed beneath the surface for years. Compensation programs are no exception. One ...
Read More
THE MJ COMPANIES ADDS UTHONA MIKRUT AS DIRECTOR OF POPULATION HEALTH AND WELLNESS
DENVER – The MJ Companies, a leading business and financial services consulting firm serving clients for more than 60 years, announced the addition of ...
Read More
UNLOCKING AI STRATEGY: HOW BUSINESSES ARE IMPLEMENTING AI
Artificial intelligence is no longer a future-facing concept organizations are experimenting with on the sidelines. As the initial excitement surrounding generative AI begins to ...
Read More
THE MJ COMPANIES STRENGTHENS BENEFITS COMPLIANCE PRACTICE WITH ADDITION OF INDUSTRY LEADER
INDIANAPOLIS – The MJ Companies, a leading business and financial services consulting firm for more than 60 years, announces the addition of an accomplished ...
Read More
FROM COMPLIANCE TO COMPETITIVE ADVANTAGE: WHAT CAA 2026 MEANS FOR YOUR PHARAMCY STRATEGY
THE NEXT WAVE OF PHARMACY REGULATION IS HERE—AND IT’S MORE COMPLICATED THAN A COMPLIANCE EXERCISE. The Consolidated Appropriations Act of 2026 (CAA 2026) represents ...
Read More