10.4 Financial Product Innovation & Retirement Vendor Management
Key Takeaways
- SECURE Act Section 204 created an ERISA §404(a) fiduciary safe harbor for selecting an in-plan annuity provider, shifting the prudence inquiry from guaranteeing outcomes to running a documented insurer-solvency and cost review.
- The QLAC dollar limit was reset by SECURE 2.0 to a $200,000 statutory base with no percentage-of-balance cap, and the indexed limit is $210,000 for 2026.
- Retirement service-provider roles carry different liability: an ERISA §3(38) investment manager takes discretion and assumes fiduciary responsibility for the investments, a §3(21) adviser only recommends, and a §3(16) administrator assumes named administrative duties — but the sponsor always retains the duty to select and monitor.
- ERISA §408(b)(2) has required covered retirement service providers to disclose direct and indirect compensation since 2012, and revenue sharing must be identified and either credited back or leveled so that participants are not cross-subsidizing one another through fund selection.
- Recordkeeper use of participant data to cross-sell retail products is a live fiduciary question that plan sponsors address contractually, by restricting data use to plan administration absent an affirmative participant election.
Financial Product Innovation & Retirement Vendor Management
Quick Answer: Product innovation in defined contribution plans has concentrated on decumulation — in-plan annuities, managed accounts, and QLACs — and the legal obstacle was never the product but the fiduciary risk of selecting an insurer. SECURE Act Section 204 solved that with a safe harbor built on a documented solvency review. Everything downstream is vendor management: knowing whether a provider is a 3(38), a 3(21), or a 3(16), what it is paid directly and indirectly, and what it may do with participant data.
1. Why Innovation Concentrated on Decumulation
The shift from defined benefit to defined contribution transferred longevity risk to individuals who have no efficient way to bear it. A participant with a lump sum must self-insure against outliving assets, and the rational response — underspending — leaves both the participant and the plan's purpose worse off. Product innovation in the last decade has therefore aimed at converting balances into income.
The obstacle was fiduciary, not actuarial. Selecting an annuity provider means judging whether an insurer will be solvent in forty years. Under the prior DOL safe harbor for defined contribution annuity selection, fiduciaries had to conclude that the insurer would be able to make all future payments, a standard many read as effectively a guarantee. Adoption stalled.
2. The SECURE Act Annuity Selection Safe Harbor
SECURE Act Section 204 added ERISA §404(e), an optional statutory safe harbor for selecting an insurer to provide a guaranteed retirement income contract. A fiduciary satisfies the prudence requirement with respect to insurer selection if it:
- Engages in an objective, thorough, and analytical search for providers.
- Considers the insurer's financial capability to satisfy its obligations.
- Considers the cost — including fees and commissions — of the contract in relation to the benefits and product features provided, and concludes the cost is reasonable.
- Obtains written representations from the insurer covering, among other items, that it is licensed, has filed audited financial statements, maintains required reserves, and is not operating under a state order of impairment.
- Documents the analysis.
What the safe harbor does and does not do. It protects the selection of the insurer. It does not protect the decision to offer an annuity at all, the selection of the specific contract's investment components, or ongoing monitoring. And it explicitly does not require the fiduciary to select the lowest-cost contract — a point that matters because guaranteed products are rarely the cheapest line on a fee benchmarking report.
SECURE Act Section 109 (portability). If a lifetime income investment ceases to be authorized under the plan, participants may take a distribution of that investment in kind or roll it to an IRA or another plan without regard to the usual distribution restrictions, within 90 days. This removed the surrender-charge problem that made sponsors reluctant to adopt guaranteed products they might later need to remove.
3. The Current Decumulation Product Set
| Product | Mechanism | Fiduciary Considerations |
|---|---|---|
| QLAC | Deferred income annuity purchased inside a plan or IRA; income begins as late as age 85; premiums excluded from the RMD base | SECURE 2.0 removed the 25%-of-balance cap and set a $200,000 statutory base, indexed — $210,000 for 2026 |
| In-plan deferred income / GMWB overlay | Guaranteed withdrawal floor layered on a target-date or balanced fund | Cost of the guarantee versus its value; portability under §109; insurer concentration risk |
| Out-of-plan annuity platform | Plan facilitates access to an institutionally priced annuity marketplace at retirement | Reduces in-plan monitoring burden but raises questions about whether facilitation is a fiduciary act |
| Managed accounts | Participant-level allocation and, increasingly, drawdown advice | Fees frequently 25–60 basis points above a target-date fund; the sponsor must document what incremental value justifies the spread and how many participants actually supply personalization data |
| Collective investment trusts | Bank-maintained pooled vehicles exclusively for qualified plans | Lower cost and negotiated fee tiers, but no prospectus; diligence rests on the trust declaration and the bank trustee |
Section 14.3 covers the mechanics of these vehicles. The GBA/RPA 3 emphasis is different: what the innovation does to the sponsor's oversight obligations. Every guarantee embedded in a product is a long-dated counterparty exposure that must be monitored for as long as the guarantee is outstanding — which may be decades after the sponsor changes recordkeepers.
4. Knowing What You Hired: 3(38), 3(21), 3(16)
| Role | Statutory Basis | What They Do | What the Sponsor Retains |
|---|---|---|---|
| ERISA §3(38) investment manager | Must be a registered investment adviser, bank, or insurance company that acknowledges fiduciary status in writing | Takes discretion to select, monitor, and replace investments | Duty to prudently select and monitor the manager — but not liability for the manager's individual investment decisions |
| ERISA §3(21) investment adviser | Fiduciary by function — renders investment advice for a fee | Recommends; the committee decides | Full responsibility for the investment decisions themselves |
| ERISA §3(16) plan administrator | The person specifically designated in the plan document | Assumes named administrative duties: filings, notices, claims determinations | Duty to select and monitor; most "3(16) services" agreements are narrower than the title suggests — read the schedule of assumed duties |
| Recordkeeper (non-fiduciary) | Contractual | Ministerial processing under sponsor direction | Everything fiduciary |
The recurring exam trap: hiring a §3(38) manager does not discharge the committee. It converts the committee's job from picking funds to selecting and monitoring the manager, and that monitoring must be documented like any other fiduciary process.
5. Fees, Revenue Sharing & Data
The §408(b)(2) Baseline
Covered service providers to retirement plans expecting $1,000 or more in compensation have been required since 2012 to disclose, in advance and in writing, their services, their fiduciary or registered-adviser status, and all direct and indirect compensation. Failure makes the arrangement unreasonable and therefore a prohibited transaction under ERISA §406(a)(1)(C), subject to the fiduciary's regulatory correction path. Section 9.4 covers the parallel CAA 2021 regime for group health plans.
Revenue Sharing
Mutual fund share classes may embed 12b-1 fees and sub-transfer-agency payments that flow to the recordkeeper and offset its stated fee. The problem is cross-subsidization: participants who happen to hold high-revenue-sharing funds pay a disproportionate share of plan administration. Three remedies, in ascending order of transparency:
- Revenue credit account — rebates are captured in a plan account and used to pay expenses or are allocated back to participants.
- Fee leveling — each participant is charged the same explicit per-head or asset-based fee after crediting back revenue sharing.
- Zero-revenue-share lineup — clean shares or CITs with no embedded payments, and an explicit recordkeeping fee.
Participant Data
Whether a recordkeeper may use participant data — balances, ages, contact information, contribution rates — to market retail IRAs, insurance, or wealth management is an unsettled but actively litigated fiduciary question. Sponsors do not need to resolve the doctrine to manage the risk. The practical control is contractual: restrict use of plan data to plan administration purposes only, prohibit cross-selling absent an affirmative participant opt-in, require deletion or return on termination, and confirm the restriction survives a change of control at the vendor.
Cybersecurity Diligence
As Section 9.3 covers, the DOL treats vendor cyber diligence as a fiduciary function. In a recordkeeper RFP that means scored cybersecurity criteria, delivery and committee review of a SOC 2 Type II report including exceptions and complementary user entity controls, contractual breach-notice timing, encryption requirements, and a stated allocation of liability for participant account takeover — a term most standard recordkeeping agreements resolve in the vendor's favor unless the sponsor negotiates it.
A 401(k) committee wants to add an in-plan guaranteed income option but is concerned about liability if the insurer fails decades from now. What does the SECURE Act Section 204 safe harbor under ERISA §404(e) actually provide?
A plan sponsor engages an ERISA §3(38) investment manager to select and monitor the plan's investment lineup. What responsibility does the committee retain?
A plan's recordkeeper is compensated in part through 12b-1 fees and sub-transfer-agency payments embedded in certain fund share classes. Why is this arrangement a fiduciary concern even when total plan costs are competitive, and what are the standard remedies?