Dept. of Labor Clarifies HIPAA with Compliance Safe Harbor
Client Alert | 2 min read | 12.17.07
Enactment of Titles I and IV of HIPAA and subsequent amendments improved access to and coverage by health insurance plans, addressing contentious issues such as hospital stays after childbirth and exceptions to coverage based on preexisting conditions. Intended to affect general health insurance coverage, including employer-based and open-market group or individual plans, the law did not cover certain excepted benefits. Thus, plans technically comprised entirely of “excepted benefits” could find themselves exempt from the requirements of these reforms.
The previous definition of one exception, “supplemental excepted benefits,” included Medicare Supplemental Insurance, TRICARE insurance, and “similar supplemental insurance coverage provided to coverage under a group health plan” if each was a separate policy, certificate, or contract of insurance. However, concerns over abuse of the vague language of “similar supplemental insurance coverage” has led the Department of Labor to issue clarification.
Field Assistance Bulletin No. 2007-04, issued December 7, 2007, establishes an enforcement safe harbor for supplemental health insurance that will be exempt from Part 7 of ERISA, as implemented through regulations at 29 CFR 2590.732(c)(5)(i)(C). “Similar supplemental insurance” that does not meet the Department of Labor’s following safe harbor standards can now be subject to enforcement action:
(1) Must be a separate policy, certificate, or contract of insurance..
(2) Supplemental insurance in question must be issued by someone other than the plan’s primary coverage provider. Significantly, if the coverage providers are “part of the same controlled group of corporations or part of the same group of trades or businesses under common control, within the meaning of section 52(a) or (b) of the code” they are effectively the same provider under the requirement.
(3) Supplemental insurance in question must be specifically intended to fill gaps in the primary coverage. This does not include insurance that becomes supplemental solely under a coordination-of-benefits provision.
(4) Cost of the Supplemental insurance in question must not exceed 15% of the primary coverage’s cost (cost is determined in the same way the applicable premium is determined under a COBRA continuation provision).
(5) Supplemental insurance in question must not “differentiate among individuals in eligibility, benefits, or premiums based on health factor of the individual” or his or her dependant.
This material is made available for information purposes only, and should not be relied upon to resolve specific legal questions.
Insights
Client Alert | 3 min read | 11.21.25
On November 7, 2025, in Thornton v. National Academy of Sciences, No. 25-cv-2155, 2025 WL 3123732 (D.D.C. Nov. 7, 2025), the District Court for the District of Columbia dismissed a False Claims Act (FCA) retaliation complaint on the basis that the plaintiff’s allegations that he was fired after blowing the whistle on purported illegally discriminatory use of federal funding was not sufficient to support his FCA claim. This case appears to be one of the first filed, and subsequently dismissed, following Deputy Attorney General Todd Blanche’s announcement of the creation of the Civil Rights Fraud Initiative on May 19, 2025, which “strongly encourages” private individuals to file lawsuits under the FCA relating to purportedly discriminatory and illegal use of federal funding for diversity, equity, and inclusion (DEI) initiatives in violation of Executive Order 14173, Ending Illegal Discrimination and Restoring Merit-Based Opportunity (Jan. 21, 2025). In this case, the court dismissed the FCA retaliation claim and rejected the argument that an organization could violate the FCA merely by “engaging in discriminatory conduct while conducting a federally funded study.” The analysis in Thornton could be a sign of how forthcoming arguments of retaliation based on reporting allegedly fraudulent DEI activity will be analyzed in the future.
Client Alert | 3 min read | 11.20.25
Client Alert | 3 min read | 11.20.25
Client Alert | 6 min read | 11.19.25
