12.3 COBRA, HIPAA, and Continuation

Key Takeaways

  • COBRA lets qualified beneficiaries continue group coverage after a qualifying event, generally for 18 or 36 months.
  • COBRA applies to employers with 20 or more employees; the beneficiary pays up to 102% of the full premium.
  • An 18-month termination/reduction-of-hours event can extend to 29 months on SSA-determined disability.
  • HIPAA guarantees portability, limits preexisting-condition exclusions, and prohibits health-status discrimination.
  • Qualified beneficiaries have 60 days to elect COBRA after receiving the election notice.
Last updated: June 2026

When an employee loses employer coverage, two federal laws protect access: COBRA (continuation) and HIPAA (portability and nondiscrimination). The exam loves the COBRA duration table and the 102% premium figure.

COBRA Basics

The Consolidated Omnibus Budget Reconciliation Act lets qualified beneficiaries keep their group health coverage temporarily after a qualifying event. Key thresholds:

  • Applies to employers with 20 or more employees.
  • The beneficiary pays up to 102% of the full premium (100% of the group cost plus a 2% administrative charge).
  • Election must be made within 60 days of receiving the COBRA election notice.

Exam trap: Under COBRA the former employee now pays the entire premium that the employer used to subsidize, plus 2%. That is why COBRA feels expensive compared to the active-employee contribution.

Qualifying Events and Duration

The length of continuation depends on the event.

Qualifying eventBeneficiaryMax continuation
Termination (not gross misconduct) or reduced hoursEmployee + dependents18 months
Employee becomes Medicare-entitledDependents36 months
Divorce or legal separationSpouse36 months
Death of employeeDependents36 months
Child loses dependent statusChild36 months

Disability Extension

If a qualified beneficiary is determined disabled by the Social Security Administration within the first 60 days of an 18-month period, the period extends to 29 months. During the 11-month extension the plan may charge up to 150% of the premium.

Exam point: Remember the trio 18 / 29 / 36. Termination and reduced hours = 18 months; disability extension = 29 months; the family events (death, divorce, Medicare, loss of dependent status) = 36 months.

HIPAA Protections

The Health Insurance Portability and Accountability Act addresses what happens when people move between plans.

  • Portability / credit for prior coverage: Time spent under prior creditable coverage reduces or eliminates a new plan's preexisting-condition exclusion.
  • Limits on preexisting-condition exclusions: Historically capped at a 12-month exclusion; the ACA later eliminated them for most plans.
  • Guaranteed issue and renewability in the group market for eligible groups.
  • Nondiscrimination: A plan cannot deny enrollment or charge an individual more based on health status, claims history, or genetic information.
  • Privacy: Protects individually identifiable health information (PHI).

Exam tip: COBRA = keep your coverage temporarily after a loss; HIPAA = carry credit and prevent health-status discrimination when you change plans. Do not confuse the two.

COBRA Notice and Election Timeline

COBRA runs on a strict clock that the exam frequently tests with dates.

StepDeadline
Employer notifies plan administrator of a qualifying eventWithin 30 days
Administrator sends election notice to qualified beneficiaryWithin 14 days
Beneficiary elects COBRAWithin 60 days of the later of notice or coverage loss
Beneficiary pays first premiumWithin 45 days of electing

Coverage is retroactive to the date of loss once elected and paid, so there is no gap. Each qualified beneficiary has an independent election right; a spouse may elect even if the employee declines.

When COBRA Ends Early and State Mini-COBRA

COBRA continuation can terminate before the 18/29/36-month maximum if the beneficiary fails to pay premiums, the employer stops offering any group health plan, or the beneficiary becomes covered under another group plan or Medicare. Gross misconduct disqualifies the employee from COBRA entirely, which is why the qualifying event is stated as termination 'other than for gross misconduct.'

Because federal COBRA applies only to employers with 20 or more employees, many states enacted mini-COBRA (state continuation) laws covering smaller employers, often with different durations. On the exam, distinguish federal COBRA (20+ employees, 18/36 months) from state continuation laws that fill the small-employer gap.

Exam trap: The 2% load (102%) applies during the normal continuation period; the higher 150% load applies only during the 11-month disability extension that pushes 18 months out to 29 months.

HIPAA Special Enrollment and Creditable Coverage

HIPAA also created special enrollment rights so people are not trapped as late enrollees after a life change. An employee who declined coverage may enroll mid-year, without waiting for open enrollment, after events such as marriage, birth or adoption, or loss of other coverage (for example, a spouse losing a job). The special enrollment window is generally 30 days from the event.

HIPAA's portability worked through a certificate of creditable coverage, which documented prior coverage so a new plan would credit that time against any preexisting-condition exclusion. Although the ACA later removed preexisting-condition exclusions for most plans, the exam still tests the HIPAA concept that prior creditable coverage reduces or eliminates a waiting period for a preexisting condition.

Exam point: HIPAA special enrollment (30 days after a qualifying life event) is the cure for becoming a late enrollee. Pair it mentally with the group eligibility window from section 12.1.

COBRA Triggers, Durations, and the 18/36 Rule

COBRA's continuation periods are the most tested numbers in this unit, and they pivot on the qualifying event. COBRA applies to employers with 20 or more employees and lets a qualified beneficiary continue the group plan at up to 102% of the full premium (the 2% covers administration). The employee gets 18 months of continuation for a qualifying event of termination (other than gross misconduct) or reduction in hours. Other qualifying events that affect dependents, including the employee's death, divorce or legal separation, the employee becoming entitled to Medicare, or a child losing dependent status, give those dependents 36 months.

A disability extension can stretch the 18-month period to 29 months if the Social Security Administration deems the beneficiary disabled, during which the premium may rise to 150%.

Work the timing and cost. An employee laid off keeps coverage for 18 months and pays, on a $600 monthly group premium, up to $612 per month (102%). If that employee then divorces while on COBRA, the ex-spouse may extend to a total of 36 months measured from the original qualifying event. Election deadlines matter: the plan must furnish an election notice and the beneficiary has 60 days to elect, then 45 days to make the first payment, with coverage retroactive to the loss date once elected.

Distinguish COBRA, which is temporary continuation of the same employer group plan, from HIPAA, which guaranteed portability and special enrollment and used certificates of creditable coverage to reduce preexisting-condition waiting periods. Although the ACA eliminated most preexisting-condition exclusions, the exam still tests HIPAA special enrollment, a 30-day window after a qualifying life event, as the remedy that prevents an applicant from becoming a penalized late entrant.

Test Your Knowledge

An employee voluntarily resigns (no gross misconduct). For how long may the employee and dependents generally continue group coverage under COBRA?

A
B
C
D
Test Your Knowledge

Which federal law limits preexisting-condition exclusions and prohibits charging an individual more based on health status?

A
B
C
D