12.3 COBRA, HIPAA, and Continuation

Key Takeaways

  • COBRA applies to employers with 20+ employees and lets qualified beneficiaries continue group coverage at up to 102% of the group premium.
  • Termination/reduced hours = 18 months; disability extension = 29 months; family events (divorce, death, dependent aging out, Medicare) = 36 months.
  • Key COBRA deadlines: employer notifies plan within 30 days, beneficiary has 60 days to elect, and 45 days to pay the first premium.
  • HIPAA bars health-status discrimination, grants special enrollment rights (loss of coverage, marriage, new dependent), and protects PHI.
  • Small employers (under 20) are exempt from federal COBRA but most states provide mini-COBRA continuation.
Last updated: June 2026

COBRA, HIPAA, and Continuation

When group coverage ends, federal law gives participants ways to keep coverage or preserve insurability. The exam heavily tests COBRA (continuation) and HIPAA (portability and special enrollment). Know the timelines and the trigger events cold.

COBRA Continuation

COBRA (Consolidated Omnibus Budget Reconciliation Act of 1985) requires employers with 20 or more employees to offer continued group health coverage to qualified beneficiaries who lose coverage due to a qualifying event. The former employee pays the full premium plus up to a 2% administrative charge — up to 102% of the group cost.

Qualifying Events and Maximum Continuation

Qualifying EventMax Coverage Period
Termination (not gross misconduct) or reduced hours18 months
Disability (during first 60 days of COBRA)Extended to 29 months
Divorce, death of employee, dependent ceases to be a dependent, employee Medicare entitlement36 months (for spouse/dependents)

Gross misconduct disqualifies the employee from COBRA.

COBRA Notice and Election Timelines

The deadlines are favorite exam material:

  • The employer must notify the plan administrator within 30 days of the qualifying event (termination, death, etc.).
  • The qualified beneficiary must notify the plan within 60 days for events the employer would not know about (divorce, dependent aging out).
  • The plan administrator must send the election notice within 14 days.
  • The qualified beneficiary has 60 days to elect COBRA.
  • After electing, the beneficiary has 45 days to make the first premium payment.

Memory aid: 30 (employer notice) → 14 (election notice out) → 60 (elect) → 45 (first payment). The disability extension takes 18 months to 29 months; family events go to 36 months.

HIPAA — Portability and Special Enrollment

HIPAA (Health Insurance Portability and Accountability Act of 1996) protects people moving between group plans. Its tested features:

  • No discrimination based on health status — a group plan cannot charge an individual more or deny enrollment because of their health.
  • Special enrollment rights — loss of other coverage, marriage, or a new dependent triggers a special enrollment period (generally 30 days, or 60 days for Medicaid/CHIP changes).
  • Guaranteed renewability of group coverage.
  • Privacy / PHI — HIPAA's Privacy Rule protects protected health information.
  • Creditable coverage — historically reduced pre-existing waiting periods. Note: the ACA eliminated pre-existing condition exclusions entirely, so this concept now appears mostly as legacy exam wording.

State Continuation ('Mini-COBRA')

Employers with fewer than 20 employees are exempt from federal COBRA, but most states have mini-COBRA laws extending similar rights to small-group employees. Durations vary by state.

COBRA Timelines and HIPAA Protections

COBRA lets employees of firms with 20+ employees continue group health after a qualifying event, paying up to 102% of the full premium (100% plus a 2% admin charge):

Qualifying eventMax continuation
Termination (not gross misconduct) or reduced hours18 months
Disability extension (SSA-determined)29 months (premium up to 150% after month 18)
Death/divorce/Medicare entitlement of employee; loss of dependent status36 months (for spouse/dependents)

Timeline: the employer notifies the plan administrator within 30 days of the event; the administrator sends the election notice within 14 days; the qualified beneficiary has 60 days to elect and 45 days after electing to make the first payment. HIPAA guarantees portability and nondiscrimination based on health status, limits pre-existing exclusions, and (with the HITECH update) protects PHI privacy and security. Worked example: an employee terminated without misconduct gets 18 months of COBRA; if a divorce later occurs during that window, the ex-spouse's clock can extend to 36 months from the original event.

The GINA rule additionally bars using genetic information in eligibility or rating. State mini-COBRA laws extend similar rights to employers with fewer than 20 employees.

Test Your Knowledge

An employee is involuntarily terminated (not for gross misconduct) from a company with 200 employees. What is the maximum COBRA continuation period, and what may the employer charge?

A
B
C
D
Test Your Knowledge

Under HIPAA, which of the following is a protected special-enrollment trigger that allows a person to join a group health plan outside open enrollment?

A
B
C
D

Qualified Beneficiaries and Early Termination

A qualified beneficiary under COBRA is anyone covered by the group plan the day before the qualifying event — the employee, spouse, and dependent children. Each qualified beneficiary has an independent election right: a spouse may elect COBRA even if the employee declines.

COBRA coverage can end early before the maximum period if: the premium is not paid on time, the employer terminates all group health plans, the beneficiary obtains other group coverage, or the beneficiary becomes entitled to Medicare. Memorize that nonpayment is the most common early-termination trigger.

Putting COBRA and HIPAA Together

These laws are complementary. COBRA keeps a person on their old group plan temporarily; HIPAA protects them when moving to a new group plan. A worker who exhausts 18 months of COBRA and then joins a spouse's plan uses HIPAA special-enrollment rights to enroll without waiting for open enrollment.

LawCore FunctionTrigger
COBRAContinue current group coverageJob loss, divorce, death, dependent aging out
HIPAAPortability into a new planLoss of coverage, marriage, new dependent

Exam Tip: COBRA is 'keep what you had'; HIPAA is 'get into the next plan.' If the question is about continuing the same employer's plan, it is COBRA; if it is about enrolling in a different plan without a waiting period, it is HIPAA. The ACA's elimination of pre-existing condition exclusions means modern questions rarely turn on creditable-coverage math, but legacy wording may still appear.

Premium Cost and the 102% Calculation

Candidates often miss the COBRA premium math. The qualified beneficiary pays the entire group cost — both the share the employer used to pay and the share the employee paid — plus a 2% administrative charge. So if the total group premium for the coverage tier is $600/month, the COBRA premium is $600 × 1.02 = $612/month. During the disability extension months (19–29), the plan may charge up to 150% of the group cost.

A common distractor offers '100% of premium,' which forgets the 2% administrative load; another offers only the former employee's old payroll deduction, which ignores that the beneficiary now owes the full cost.