Regulatory Context for COBRA Administration

COBRA continuation coverage sits at the intersection of three federal agencies, two federal statutes, and a layer of state mini-COBRA laws that collectively govern how group health plan coverage is extended to former employees and their dependents. Understanding which authority controls which obligation — and how those authorities interact — is foundational to compliant plan administration. This page maps the federal-versus-state authority structure, the named regulatory bodies involved, the mechanisms by which rules are issued and updated, and the enforcement and review paths available to both agencies and affected beneficiaries.

Federal vs state authority structure

COBRA itself is a federal mandate, codified at 29 U.S.C. §§ 1161–1168 within the Employee Retirement Income Security Act of 1974 (ERISA) (29 U.S.C. § 1161), and mirrored in the Internal Revenue Code at 26 U.S.C. §§ 4980B and 9801–9806. Federal COBRA applies to group health plans sponsored by private-sector employers with 20 or more employees on at least 50 percent of typical business days in the preceding calendar year.

State authority operates in two distinct modes:

  1. Mini-COBRA laws — Enacted by 40 states (and the District of Columbia) to fill the employer-size gap, extending continuation rights to employees of employers with fewer than 20 employees. These laws vary materially in duration, qualifying events, and premium caps. State continuation coverage and mini-COBRA state laws for small employers address these distinctions in detail.
  2. Insurance regulation — States regulate fully insured group health products through their insurance departments. Because ERISA preempts most state laws that "relate to" employee benefit plans, self-funded plans are almost entirely beyond state insurance regulation, while fully insured plans remain subject to both ERISA and the state's insurance code.

The contrast is consequential: an employer with 18 employees sponsoring a fully insured plan may face a state mini-COBRA obligation but no federal COBRA obligation, while an employer with 25 employees sponsoring a self-funded plan faces only federal COBRA rules, not state insurance mandates.

Named bodies and roles

Three federal agencies share COBRA jurisdiction, each with a defined lane:

Plan administrators occupy a distinct functional role. Under ERISA, a "plan administrator" is either the entity named in the plan document or, absent such a designation, the employer itself. The plan administrator bears primary responsibility for delivering election notices within 14 days of receiving a qualifying event notice from the employer.

How rules propagate

COBRA's statutory text is the starting point, but operational requirements flow through multiple channels:

  1. Treasury/IRS regulations — The IRS has issued final regulations under § 4980B at 26 C.F.R. § 54.4980B-1 through 54.4980B-10, covering qualifying events, election procedures, and payment rules (26 C.F.R. § 54.4980B).
  2. DOL regulations and sub-regulatory guidance — DOL publishes COBRA procedural rules under 29 C.F.R. Part 2590, including notice content and timing standards (29 C.F.R. Part 2590).
  3. Tri-agency FAQs and joint guidance — DOL, IRS, and HHS periodically issue coordinated guidance through joint FAQ documents, information letters, and field assistance bulletins. These sub-regulatory documents do not carry the force of a final rule but describe agency interpretive positions that shape compliance expectations.
  4. Legislative amendments — Congress has modified COBRA through subsequent legislation, including the Health Insurance Portability and Accountability Act of 1996 (HIPAA), the Affordable Care Act of 2010 (ACA), and temporary subsidy programs such as the American Rescue Plan Act of 2021 (ARPA). Each amendment requires plan administrators to track effective dates and apply updated rules prospectively.

The ERISA and COBRA federal law overview and COBRA and HIPAA interaction pages address specific statutory overlaps. The full landscape of what COBRA administration involves is summarized at the COBRA administration overview.

Enforcement and review paths

Enforcement diverges sharply depending on which agency is acting and what violation is alleged:

Employers facing noncompliance exposure should review COBRA penalties for employer noncompliance and excise tax penalties under IRC § 4980B for the specific penalty structures that apply under each enforcement path.

References

The law belongs to the people. Georgia v. Public.Resource.Org, 590 U.S. (2020)