For lean HR teams and even seasoned benefits departments, COBRA administration is the kind of work that consistently exposes process gaps. The deadlines are rigid. The notice requirements are unforgiving. Premium collection has more edge cases than most plan documents address. And the penalties for getting it wrong start accruing before anyone realizes a step was missed.
For self-funded employers, the stakes are higher than they are under a fully insured arrangement. The plan sponsor carries the compliance liability directly, which means a missed election notice or a mishandled qualifying event lands on the employer’s balance sheet, not a carrier’s. This article walks through what the work actually looks like in practice, where compliance exposure tends to build up and why most self-funded organizations eventually decide to outsource the function.
What COBRA Administration Includes
COBRA, the Consolidated Omnibus Budget Reconciliation Act, requires group health plans sponsored by employers with 20 or more employees to offer continuation coverage to qualified beneficiaries after certain qualifying events. That much is widely understood. What gets underestimated is the operational scope of administering it correctly.
A well-run COBRA program handles, at minimum:
- General notice distribution to new plan participants within 90 days of coverage
- Qualifying-event tracking across terminations, hour reductions, divorces, deaths, dependent age-outs and Medicare entitlements
- Election notice generation and delivery within 14 days of receiving notice of the event (44 days if the employer is also the plan administrator)
- Premium billing, collection and reconciliation, including the 30-day grace period rules
- Carrier coordination for enrollment, reinstatement and termination
- Disability extensions, second qualifying events and the corresponding premium adjustments up to 150 percent
- State mini-COBRA requirements for groups under 20 employees or for employees not covered by federal COBRA
- Ongoing recordkeeping that holds up to an audit
Each of these items has its own deadline, its own documentation requirement and its own penalty exposure if it is missed. The administrative load is not the volume of qualified beneficiaries. It is the precision the work demands across every single one of them.
Where Compliance Risk Quietly Accumulates
Most COBRA failures are not dramatic. They are small process gaps that compound until something triggers an audit or a lawsuit. The patterns that surface most often:
Late or Missing Election Notices
A termination gets entered in payroll on Monday but does not reach whoever generates COBRA notices until Friday. Multiply that across a year, and a portion of qualified beneficiaries are receiving notices outside the 14-day window. Each late notice is a potential ERISA violation carrying statutory penalties of up to $110 per day per beneficiary, plus IRS excise taxes of $100 per day per affected individual.
Inconsistent Qualifying-Event Handling
Terminations and hour reductions usually get caught. Divorces, dependent age-outs and Medicare entitlements often do not, because the trigger comes from the employee or the dependent rather than from a payroll system. When those notifications get lost or delayed, the plan can end up either failing to offer coverage when it should have or extending coverage longer than required.
Premium Collection That Drifts
COBRA participants have specific grace periods, partial-payment rules and reinstatement obligations. When premium tracking lives in a spreadsheet, it is easy to terminate someone who should not have been terminated, or to keep accepting late payments past the point coverage should have ended. Either direction creates exposure: insurance carriers can recover claims paid during periods that should not have been covered, and former employees can sue when coverage ends without proper notice.
State Mini-COBRA Blind Spots
All 50 states have some form of state continuation coverage, and the rules vary widely on duration, group size and notification requirements. Multi-state employers running COBRA in-house frequently underestimate this layer entirely.
Documentation That Will Not Hold Up to Audit
When notices go out by regular mail and proof of delivery is not retained, the plan has no defense if a former employee claims the notice was never received. The burden of proof in COBRA disputes generally sits with the plan, not the participant.
The Bigger Picture
The financial exposure on any single one of these is manageable. The exposure when several happen across a population of qualified beneficiaries over multiple years is what drives organizations to reassess how the function is being run. Many of the same operational gaps surface in other areas of plan administration, which is why a holistic look at administrative risks across self-funded health plans often reveals more than COBRA alone.
What Good COBRA Administration Looks Like
Whether handled in-house or outsourced, the benefits leaders who have this function under control share a common pattern. The work is treated as a process, not a series of one-off tasks, and it is supported by systems that make the rules the default rather than the exception. In practice, that shows up across a few specific areas.
Connected Systems and Clean Data
Real-time data feeds between HRIS, payroll and the COBRA system are the foundation. When qualifying events flow automatically into the COBRA workflow, nothing sits in someone’s inbox waiting to be processed. A single source of truth for premium billing, payment status and coverage changes means everyone is working from the same information.
Documented, Defensible Communications
Every notice is tracked, timestamped and retained for the full statute of limitations. Notice templates are reviewed regularly against current regulatory language, not last decade’s. When a former employee or regulator asks what was sent and when, the answer is available in seconds.
Workflows Built for the Edge Cases
State mini-COBRA variations, disability extensions and second qualifying events are not handled as exceptions. They are part of the standard workflow. Carrier coordination reinstates or terminates coverage automatically based on payment status, removing the manual handoffs where most errors happen.
Audit-Ready Reporting
Doing the work correctly is only half the battle. The other half is being able to prove it. A well-run program produces reporting that can answer a regulator’s or attorney’s questions in hours, not weeks.
A Member Experience That Reflects Well on You
Former employees still associate the COBRA experience with your brand long after they have left. A clean self-service portal, transparent payment options and responsive support reflect directly on the employer, not just the administrator behind the scenes.
This level of operational discipline is achievable in-house, but it requires dedicated headcount, ongoing regulatory review and a system purpose-built for the work. For most self-funded employers, the math does not favor building it internally.
Why Self-Funded Employers Outsource COBRA to a TPA
COBRA is consistently one of the most-outsourced HR functions for a reason. The work is high-volume in administrative steps but low-volume in strategic decisions, which makes it well suited to a specialized partner. A capable third-party administrator brings four things internal teams typically cannot replicate cost-effectively.
1. Regulatory Currency
A TPA’s compliance team tracks regulatory updates across federal COBRA, state continuation rules and adjacent areas like ERISA and the IRS notice requirements. That work happens whether the employer asks for it or not.
2. Process Consistency
Notices go out the same way, on the same timeline, every time. Premium collection follows the same rules across every participant. Documentation is captured automatically rather than depending on whoever happens to be handling the file.
3. Carrier Integration
A good TPA already has working data exchanges with carriers, so enrollment, reinstatement and termination happen without manual handoffs.
4. Liability Shift
Outsourcing does not eliminate the plan sponsor’s legal responsibility, but a contracted TPA absorbs the operational risk and brings indemnification provisions that internal administration cannot.
The tradeoff most employers are weighing is not whether to outsource, but how to choose a partner. The wrong TPA introduces its own risk: missed deadlines on someone else’s letterhead still result in penalties on the plan sponsor’s tax filing. The right TPA reduces compliance exposure measurably from day one. The same evaluation criteria apply across broader benefits administration outsourcing decisions, which is worth keeping in mind if COBRA is one piece of a larger administrative review.
How BHPS Approaches COBRA Administration
BHPS administers COBRA as part of a broader third-party administrator service for self-funded employers and health systems. Our team prepares and distributes all required notices, monitors election periods, collects monthly premiums and coordinates with carriers on enrollment and termination. The work runs on our Create® Technology platform, which integrates with HRIS and payroll systems and gives plan sponsors real-time visibility into every COBRA-related action.
More importantly, COBRA does not sit in isolation in our environment. It connects to eligibility, claims, member services and reporting in one system, which removes the handoff gaps that cause most administrative failures. For self-funded employers carrying the compliance risk directly, that integration is what shifts COBRA from a recurring liability into a function that simply runs.
Frequently Asked Questions
How long does COBRA coverage last?
Standard COBRA continuation coverage runs for 18 months following a qualifying event like termination or reduction in hours. That extends to 29 months if the qualified beneficiary is determined disabled by the Social Security Administration before the 60th day of coverage, and to 36 months for certain qualifying events affecting spouses and dependents, including divorce, the death of the covered employee or a dependent aging off the plan. The applicable timeframe depends on the type of qualifying event and the beneficiary’s circumstances.
Who pays for COBRA coverage?
The qualified beneficiary pays the full premium, including both the employer and employee portions, plus an administrative fee of up to two percent. That brings the total to 102 percent of the plan cost. During a disability extension, the plan can charge up to 150 percent for the additional 11 months of coverage. The plan sponsor does not subsidize COBRA premiums unless they choose to as part of a severance arrangement.
Does COBRA apply to dental and vision plans?
Yes. A common misconception is that COBRA only applies to medical coverage, but the law applies to most group health plans, including dental, vision, health flexible spending accounts and certain employee assistance programs. Each covered plan triggers its own COBRA notice and election rights, which is one reason the administrative load adds up faster than employers expect.
What if our company has fewer than 20 employees?
Federal COBRA applies only to employers with 20 or more employees on at least 50 percent of typical business days in the prior year. Smaller employers are not subject to federal COBRA, but most are subject to state continuation coverage, often called mini-COBRA. The specifics vary widely by state, including coverage duration, eligibility rules and notice requirements. Multi-state small employers in particular need to confirm compliance with each state where they have covered employees.
Can we switch COBRA administrators mid-plan-year?
Yes, and it is more common than employers assume. The key is a clean data migration, including current qualified beneficiaries, election status, payment history and pending notices. A capable TPA will manage the transition with a dedicated implementation manager so there is no gap in coverage or notice timing. The compliance clock does not pause for a transition, so the new administrator needs to be operational from day one.
What happens if a former employee misses a COBRA payment?
COBRA participants have a 30-day grace period for monthly premium payments. If a payment is not received by the end of the grace period, coverage can be terminated retroactively to the last paid-through date. The plan must apply this rule consistently. Accepting late payments selectively or terminating coverage without proper notice creates legal exposure on both sides. This is one of the most common areas where in-house administration runs into trouble.
Ready to Take COBRA Off Your Plate?
If you are evaluating how your current COBRA administration measures up, or weighing a transition to a TPA, schedule a call with our team. We’ll walk through your specific exposure points and what a cleaner workflow would look like for your population.