COBRA Compliance Checklist for HR Teams

COBRA compliance imposes layered administrative obligations on HR teams that span notice timelines, premium calculations, recordkeeping, and penalty exposure under federal law. Errors at any stage—from initial enrollment through qualifying event notification—can trigger excise tax liability under IRC Section 4980B or civil enforcement actions by the Department of Labor. This page organizes the core compliance framework into discrete functional areas so HR administrators can assess gaps against regulatory requirements. The full regulatory context for COBRA administration provides the statutory foundation from which these operational requirements derive.

Definition and Scope

COBRA compliance, in the HR operational sense, is the set of documented processes an employer or plan administrator maintains to satisfy the Consolidated Omnibus Budget Reconciliation Act of 1985 (COBRA), codified at 29 U.S.C. §§ 1161–1168 under ERISA, and administered jointly by the U.S. Department of Labor (DOL), the Internal Revenue Service (IRS), and the Department of Health and Human Services (HHS).

Scope of covered employers: COBRA applies to private-sector group health plans sponsored by employers with 20 or more employees on at least 50 percent of typical business days in the preceding calendar year (DOL COBRA General Notice guidance). State continuation laws ("mini-COBRA") cover smaller employers, but the federal checklist applies specifically to groups that meet this 20-employee threshold.

Coverage types in scope: The compliance obligation extends to all group health plan components—medical, dental, vision, health FSAs (with limitations), and prescription drug coverage. Life insurance and disability plans are explicitly excluded from COBRA continuation requirements.

A complete compliance posture means the employer or its designated third-party administrator can demonstrate compliance with every phase below through contemporaneous documentation.

How It Works

COBRA compliance operates in five sequential phases. Each phase has regulatory deadlines that, if missed, begin the clock on potential penalty exposure.

Phase 1 — Initial General Notice (Plan Enrollment)

Upon a new employee's enrollment in a group health plan, the plan administrator must deliver the COBRA General Notice within 90 days of coverage commencement (29 C.F.R. § 2590.606-1). The DOL publishes model notices that satisfy this requirement when completed with plan-specific information.

Phase 2 — Qualifying Event Identification and Employer Notification

When a qualifying event occurs—such as termination of employment, reduction in hours, divorce, or loss of dependent status—the employer must notify the plan administrator within 30 days of the event. Employees and dependents must notify the plan administrator of certain events (divorce, legal separation, loss of dependent child status, disability) within 60 days.

Phase 3 — Election Notice Delivery

The plan administrator must deliver the COBRA Election Notice to each qualified beneficiary within 14 days of receiving notice of the qualifying event (29 C.F.R. § 2590.606-4). If the employer is also the plan administrator, the combined window is 44 days from the qualifying event.

Phase 4 — Election Period Administration

Qualified beneficiaries hold a 60-day election window from the later of coverage loss or Election Notice delivery. Each beneficiary elects independently. HR must track elections, denials, and non-responses as separate records.

Phase 5 — Premium Administration and Coverage Maintenance

Once elected, COBRA coverage must be maintained as long as premiums are paid. The employer may charge up to 102 percent of the applicable premium (100 percent cost plus 2 percent administrative fee) (IRC § 4980B(f)(2)(C)). A 30-day grace period applies to premium payments, meaning coverage cannot be terminated for late payment within that window.

Common Scenarios

Scenario 1 — Involuntary Termination
The most frequent qualifying event. The 30-day employer notification clock begins on the last day of employment, not the last day of coverage. HR teams commonly miscalculate by using the coverage termination date, which can compress the administrator's 14-day election notice window improperly.

Scenario 2 — Reduction in Hours Below Plan Threshold
An employee whose hours drop below the plan's eligibility threshold triggers COBRA even without employment termination. This scenario applies to part-time transitions, leave arrangements without FMLA protection, and seasonal staffing changes. The COBRA and FMLA leave-of-absence scenarios page addresses the specific interaction between protected leave and COBRA election rights.

Scenario 3 — Dependent Aging Out
Under the ACA (26 U.S.C. § 5000A), dependent children lose plan eligibility at age 26. This triggers a COBRA qualifying event requiring the employee to notify the plan administrator within 60 days. HR systems that auto-terminate dependent coverage without prompting employee notification create a documented compliance gap.

Scenario 4 — Second Qualifying Events
A beneficiary already receiving 18 months of COBRA coverage can extend to 36 months if a second qualifying event (divorce, death of employee, loss of dependent status) occurs during that period. Tracking second qualifying events requires active monitoring, not passive recordkeeping. The second qualifying events and extended coverage resource details this extension mechanism.

Scenario 5 — Disability Extension
A qualified beneficiary who is Social Security disabled at the time of a qualifying event, or becomes disabled within the first 60 days of COBRA coverage, may extend coverage an additional 11 months (to 29 months total). The beneficiary must notify the plan administrator of the disability determination before the 18-month period expires and within 60 days of the SSA disability determination (29 C.F.R. § 2590.606-3).

Decision Boundaries

HR teams face recurring classification decisions where the wrong determination triggers either under-notification (a compliance failure) or over-notification (an operational burden with no penalty, but misleading to beneficiaries). The following boundaries define where careful judgment is required.

Gross Misconduct Exception
Termination for gross misconduct eliminates COBRA eligibility for the employee—but not for the employee's dependents, who retain full qualification rights. The term "gross misconduct" is not defined in COBRA statute; courts apply fact-specific analysis. HR teams that deny dependent COBRA based solely on the employee's misconduct classification create litigation exposure. The gross misconduct exception page addresses the case law contours of this determination.

In-House vs. Third-Party Administration
Delegation of COBRA administration to a third-party administrator (TPA) does not transfer statutory liability. The plan sponsor remains legally responsible for notice failures under 29 U.S.C. § 1166. Contracts with TPAs should specify indemnification for failures attributable to the TPA's processes, but those contractual terms do not bind the DOL or IRS in an enforcement action.

20-Employee Threshold Counting
The DOL uses a "typical business day" standard: an employer meets the 20-employee threshold if it employed 20 or more employees on at least 50 percent of its typical business days in the prior calendar year. Part-time employees count as fractions (each part-time employee counts as a fraction equal to hours worked divided by hours a full-time employee works). Employers near this threshold must re-evaluate annually.

COBRA vs. ACA Marketplace Enrollment
COBRA election and ACA Marketplace enrollment are not mutually exclusive, but the timing of COBRA termination determines whether a Special Enrollment Period opens. Electing and then terminating COBRA coverage qualifies as a Marketplace special enrollment trigger. The comparative framework is detailed at COBRA vs. ACA Marketplace coverage.

Recordkeeping Duration
ERISA requires retention of plan documents and records sufficient to determine benefits for at least 6 years from the date of filing of the document or the date on which the document was required to be filed (29 U.S.C. § 1027). COBRA election notices, premium payment records, and qualifying event documentation should be maintained for at least 6 years from the plan year in which the event occurred.

Penalty Exposure Quantification
Noncompliance with COBRA notice requirements exposes employers to IRS excise taxes of $100 per qualified beneficiary per day of

The law belongs to the people. Georgia v. Public.Resource.Org, 590 U.S. (2020)