New electronic disclosure rule for group health plan notices proposed by DOL
August 25, 2026
New electronic disclosure rule for group health plan notices proposed by DOLAugust 25, 2026 On July 22, 2026, the Department of Labor (DOL) issued a proposed rule with a new safe harbor allowing group health plan administrators to provide required ERISA documents to participants and beneficiaries electronically. This follows a similar safe harbor that the DOL finalized for pension plans in 2020. Under the proposed rule, covered documents can be posted to a website (or other electronic-based information repository, such as an app) if participants are directed there via an electronic notice. Unlike the 2020 pension plan safe harbor, the proposed group health plan safe harbor does not allow documents to be sent directly via email. The DOL cited concerns about exposing protected health information (PHI) through email, particularly employer-monitored email. BackgroundERISA requires that disclosures be provided to participants in a manner that is “reasonably calculated” to result in actual receipt and protects confidential personal information. The DOL previously established an electronic delivery safe harbor in 2002, but this safe harbor only allows electronic delivery to individuals who are “wired at work” (those who access the employer’s electronic information system as an integral part of their duties) or those who affirmatively consent to receive documents electronically. This left a gap for employers who have employees that do not satisfy either safe harbor condition. Proposed RuleThe proposed rule provides an alternative method for electronic disclosure of “covered documents” to “covered individuals”:
The administrator must use the covered individual’s electronic address to provide a Notice of Internet Availability (NOIA), and the covered documents must be posted to a website. The NOIA and the website are discussed in more detail below. Notice of Internet AvailabilityGenerally, a separate NOIA must be delivered for each document posted to the website. However, the proposed rule allows a combined NOIA to be provided for one or more of the following: (1) summary plan description, (2) other documents required to be furnished annually (rather than upon the occurrence of a specific event), (3) annual enrollment materials, and (4) other documents specifically permitted by the DOL and the Internal Revenue Service. In addition, the NOIA must satisfy the following requirements:
WebsiteThe website should be accessible to covered individuals inside and outside of the workplace. Each covered document must:
Right to Paper Copies or to Opt Out of Electronic DeliveryOn request from a covered individual, the administrator must provide a paper copy of the covered document free of charge. Covered individuals must also have the right to globally opt out of electronic delivery and only receive paper copies, for free. The proposed rule goes further than the 2020 pension plan safe harbor by stating that administrators may not charge for any paper copies, even if a covered individual requests the same document multiple times. Initial Notification of Default Delivery and Right to Opt OutBefore electronic delivery, the administrator must provide each covered individual a paper notification explaining the process for delivering covered documents and how to access them, and identifying the electronic address that will be used. A paper version of the initial notice does not need to be provided to individuals who have been receiving documents electronically under the 2002 safe harbor, which is a departure from the 2020 pension plan safe harbor. Claims Regulation AmendmentsThe DOL also proposes to amend the ERISA claims procedure regulations to recognize the new safe harbor as a permissible method for furnishing electronic notices of adverse benefit determinations and benefit determinations on review for group health plans. HIPAA and Other Legal RequirementsCompliance with the proposed safe harbor does not ensure compliance with HIPAA or other applicable federal or state privacy or security laws. Group health plans that are covered entities under HIPAA must continue to satisfy HIPAA’s requirements regarding the confidentiality and privacy of protected health information when furnishing disclosures electronically. Plan sponsors should also be aware that the proposed safe harbor would not modify or consolidate other existing electronic delivery frameworks applicable to group health plans, such as the summary of benefit coverage (SBC) disclosure rules, transparency in coverage rules, or electronic delivery regulations for cafeteria plans, flexible spending accounts and health savings accounts. What’s NextThe DOL has requested comments by September 21, 2026. The alternative safe harbor would be effective on the first day of the first calendar year following the date of publication of the final rule. __________ If you have any questions about this Legal Briefing, please feel free to contact any of the attorneys listed or the Eversheds Sutherland attorney with whom you regularly work. Latest InsightsLatest News
Latest Events
legal updates August 20, 2026 Eversheds Sutherland advises on major renewable energy investment in Syria legal updates August 19, 2026 Commercially Connected shorts 19 August 2026 legal updates August 12, 2026 Commercially Connected shorts 12 August 2026 legal updates August 11, 2026 Global Sustainability & ESG Insights - July 2026 client news August 13, 2026 Eversheds Sutherland advises H.I.G. Capital on investment in Phoenix ME client news August 13, 2026 Eversheds Sutherland reappointed to the UK's Government Commercial Agency l... firm news August 12, 2026 William A. Nelson, Former Investment Adviser Association Policy Leader, Joi... client news July 30, 2026 Eversheds Sutherland Advises Johnson Matthey on Acquisition of CORMETECH In... in-person A leadership conversation for Global GCs September 02, 2026 17:30 - 19:30 MS Wädenswil, Bürkliplatz, Zurich Schiffstation virtual UAE - Employment law in the Dubai International Financial Centre September 10, 2026 9.30am - 1.30pm (GMT) Virtual in-person Managing AI use in the workplace: what every UK HR team needs to know September 10, 2026 9.30am - 1.00pm (BST) London, United Kingdom in-person Interaktiver LIVE Cyber Security Event September 10, 2026 07:30 – 11:00 Kinokoni, Lagerstrasse 104, Europaallee Zürich |