12.3 COBRA, HIPAA, and Continuation
Key Takeaways
- COBRA applies to employers with 20+ employees; smaller groups fall under state mini-COBRA continuation laws.
- Termination or reduced hours allows 18 months; dependent-affecting events (death, divorce, loss of dependent status, Medicare) allow 36 months.
- Employers may charge up to 102% of the group premium for COBRA, or up to 150% during the 11-month disability extension to 29 months.
- Beneficiaries have 60 days to elect COBRA and 45 days after electing to pay the first premium; gross misconduct is not a qualifying event.
- HIPAA governs portability with creditable coverage, guaranteed renewability, nondiscrimination by health status, and PHI privacy/security.
COBRA — Temporary Continuation of Coverage
The Consolidated Omnibus Budget Reconciliation Act (COBRA) lets employees and their dependents continue group health coverage temporarily after it would otherwise end. COBRA applies to employers with 20 or more employees. Smaller employers are typically governed by state continuation (mini-COBRA) laws, which often reach groups with fewer than 20 lives.
Three elements drive every COBRA question: who is a qualified beneficiary, what is a qualifying event, and how long does continuation last.
Qualifying Events and Duration
| Qualifying Event | Beneficiary | Max Continuation |
|---|---|---|
| Voluntary/involuntary termination (not gross misconduct) | Employee + dependents | 18 months |
| Reduction in hours below eligibility | Employee + dependents | 18 months |
| Employee death | Spouse/dependents | 36 months |
| Divorce or legal separation | Spouse/dependents | 36 months |
| Dependent child loses dependent status | Child | 36 months |
| Employee Medicare entitlement | Spouse/dependents | 36 months |
| Disability (SSA-determined) extension | Disabled qualified beneficiary | 29 months |
The two numbers to memorize: 18 months for termination or reduced hours, and 36 months for events affecting dependents (death, divorce, loss of dependent status, Medicare entitlement). A qualifying disability can extend the 18-month period to 29 months.
COBRA Premiums and Notice
The employer may charge the qualified beneficiary up to 102% of the total premium — the full group cost (employer + employee shares) plus a 2% administrative charge. During the 11-month disability extension the charge may rise to 150%. After a qualifying event, the plan administrator must notify beneficiaries, who then have 60 days to elect coverage and generally 45 days after electing to make the first premium payment.
Under COBRA, what is the maximum premium an employer may charge a qualified beneficiary for standard continuation coverage?
Worked Example — Choosing the Right Duration
A covered employee dies, leaving a spouse and one child on the group plan. The qualifying event affecting dependents (death of the employee) entitles them to 36 months of COBRA continuation — not 18. Compare an employee who is laid off (no misconduct): she and her dependents qualify for 18 months. If, four months into that 18-month period, she is determined disabled by the Social Security Administration, the family may extend coverage to 29 months total, and the premium during the extension may climb to 150%.
Trap: gross misconduct termination is not a COBRA qualifying event — there is no continuation right. Also note Medicare entitlement of the employee is a 36-month event for the dependents, even though the employee moves to Medicare.
HIPAA — Portability and Privacy
The Health Insurance Portability and Accountability Act (HIPAA) does several distinct things tested on the exam:
- Portability — limits pre-existing condition exclusions and lets individuals use prior creditable coverage to reduce or eliminate a new plan's exclusion period when changing jobs.
- Guaranteed issue/renewability — protects access for eligible groups and individuals.
- Nondiscrimination — prohibits basing eligibility on a person's health status within a group.
- Privacy and security — the Privacy Rule and Security Rule protect protected health information (PHI); producers must safeguard client medical data.
Note: the ACA later eliminated pre-existing condition exclusions for most plans, but HIPAA's privacy, nondiscrimination, and creditable-coverage concepts remain heavily tested.
An employee dies while covered under a group health plan. For how long may the surviving spouse and child continue coverage under COBRA?
Other Federal Mandates Tested With HIPAA
Several targeted federal laws appear alongside COBRA and HIPAA:
- MHPAEA (Mental Health Parity and Addiction Equity Act) — requires mental health and substance use benefits to carry the same financial requirements (deductibles, copays) and treatment limits as medical/surgical benefits.
- Newborns' and Mothers' Health Protection Act — guarantees a minimum hospital stay of 48 hours after a normal vaginal delivery and 96 hours after a cesarean section.
- Women's Health and Cancer Rights Act — mandates reconstructive surgery coverage following a mastectomy.
- ERISA — sets fiduciary, reporting, and disclosure standards for employer-sponsored plans and requires the Summary Plan Description (SPD) be furnished to participants.
Worked Example — Counting COBRA Election Time
An employee is laid off on June 1 and the plan administrator sends the COBRA election notice the same day. The qualified beneficiary has 60 days (until roughly July 31) to elect coverage. If she elects on July 20, she then has 45 days from that election to pay the first premium, and coverage is retroactive to June 1 so there is no gap. Missing either deadline forfeits the continuation right. These two windows — 60 days to elect, 45 days to pay — are routinely tested numerics.
Creditable Coverage and Portability Mechanics
HIPAA's portability protection rests on creditable coverage — prior health coverage (group, individual, Medicare, Medicaid, etc.) that a person can credit against a new plan's pre-existing condition exclusion. Although the ACA eliminated most pre-existing exclusions, the concept survives on exams. The classic illustration: a worker with 14 months of continuous prior creditable coverage who changes jobs could offset a new plan's exclusion period using that credit, provided any gap in coverage did not exceed the allowed break (historically 63 days). A break longer than that could reset the clock.
Distinguishing the Federal Acronyms
Students lose points by mixing these up. COBRA = temporary continuation after a qualifying event. HIPAA = portability, nondiscrimination, and PHI privacy/security. ERISA = plan administration, fiduciary duty, and the Summary Plan Description. MHPAEA = mental health parity. Pair each acronym with its single defining function and the federal-regulation questions become straightforward.