12.3 COBRA, HIPAA, and Continuation

Key Takeaways

  • COBRA applies to employers with 20 or more employees and lets qualified beneficiaries continue group coverage after a qualifying event by paying up to 102% of the full premium.
  • Termination or reduction of hours gives 18 months of COBRA; divorce, death, Medicare entitlement, or loss of dependent status gives 36 months.
  • The qualified beneficiary has 60 days to elect COBRA and 45 days after election to make the first payment.
  • HIPAA guarantees portability and prohibits group plans from denying enrollment or charging more based on individual health status.
  • A 60-day disability extension can lengthen the 18-month COBRA period to 29 months, during which the premium may rise to 150%.
Last updated: June 2026

When an employee or dependent would otherwise lose group health coverage, two federal laws protect them: COBRA (Consolidated Omnibus Budget Reconciliation Act of 1985) provides temporary continuation, and HIPAA (Health Insurance Portability and Accountability Act of 1996) guarantees portability and prohibits health-status discrimination.

COBRA - Who It Covers

COBRA applies to employers with 20 or more employees (group health plans). It lets a qualified beneficiary continue the same group coverage temporarily after a qualifying event. Qualified beneficiaries include the covered employee, spouse, and dependent children who were covered the day before the event.

Qualifying Events and Continuation Periods

The length of COBRA continuation depends on the event:

Qualifying eventContinuation period
Voluntary or involuntary termination (not gross misconduct)18 months
Reduction in work hours below eligibility18 months
Employee becomes entitled to Medicare36 months (for dependents)
Divorce or legal separation36 months
Death of the covered employee36 months (for dependents)
Child loses dependent status36 months

Memory hook: Events that affect only the employee's job status (termination, reduced hours) give 18 months. Events that affect the family's relationship to the employee (divorce, death, Medicare, aging out) give 36 months.

COBRA Cost and Deadlines

The qualified beneficiary pays the full premium - both the employer's and employee's former shares - plus up to a 2% administrative charge, for a maximum of 102% of the group cost.

DeadlineTime allowed
Employer notifies plan administrator of event30 days
Administrator notifies qualified beneficiary14 days
Beneficiary elects COBRA60 days from notice or loss of coverage, whichever is later
First premium payment after election45 days

Disability extension: If a qualified beneficiary is determined disabled by Social Security within the first 60 days of COBRA, the 18-month period can be extended to 29 months, and the plan may charge up to 150% of the group premium during the extension.

Worked example: A terminated employee's group plan costs $600 per month total ($450 employer share + $150 employee share). Under COBRA the beneficiary pays the full $600 plus 2% = $612 per month. If a disability extension applies, the rate may rise to 150% = $900 per month.

HIPAA - Portability and Nondiscrimination

HIPAA addresses what happens when a person moves between group plans:

  • Guaranteed renewability - group coverage must be renewable as long as premiums are paid.
  • Nondiscrimination - a group plan may not deny enrollment or charge an individual more based on health status, claims history, or genetic information.
  • Portability / creditable coverage - prior continuous coverage reduces or eliminates new-plan waiting periods. (The ACA later eliminated pre-existing condition exclusions entirely for most plans, but HIPAA's creditable-coverage concept still appears on exams.)
  • Special enrollment - events such as marriage, birth, or loss of other coverage trigger a special enrollment right outside the normal open-enrollment window.

Exam trap: COBRA continues an EXISTING group plan temporarily; HIPAA governs PORTABILITY and discrimination when moving to a NEW plan. Do not confuse the two. Also note state "mini-COBRA" laws can extend continuation rights to employers with fewer than 20 employees.

Who Is a Qualified Beneficiary

A qualified beneficiary is any individual who was covered under the group plan on the day before the qualifying event - the employee, the covered spouse, and covered dependent children. A child born to or adopted by the employee during a COBRA continuation period also becomes a qualified beneficiary with full election rights. A new spouse married after the event may be added but is generally not an independent qualified beneficiary.

Events That End COBRA Early

COBRA is temporary and can terminate before the 18- or 36-month maximum if any of the following occurs:

  • The qualified beneficiary fails to pay the premium within the grace period.
  • The employer ceases to maintain any group health plan.
  • The beneficiary becomes covered under another group plan (with no applicable pre-existing limitation) or becomes entitled to Medicare after electing COBRA.
  • The beneficiary commits fraud or an act that would terminate coverage for an active employee.

Coordination With Medicare and the ACA

A frequent tested wrinkle: if the employee becomes entitled to Medicare and that triggers loss of coverage for dependents, the dependents receive 36 months. But Medicare entitlement that occurs during an existing 18-month COBRA period can extend a dependent's continuation. Since the ACA, individuals losing group coverage also have a special enrollment period to buy Marketplace coverage, which may be cheaper than paying 102% of the group premium - an important consumer-counseling point for producers.

HIPAA Privacy and Administrative Simplification

Beyond portability, HIPAA's Privacy Rule protects Protected Health Information (PHI) and limits how plans, providers, and insurers use and disclose it. While the producer exam focuses on the portability and nondiscrimination pieces, you should recognize that HIPAA also created national standards for electronic health-data transactions and patient privacy.

Memory hook: COBRA = keep what you HAD (continuation). HIPAA = protect you when you MOVE (portability) and keep your data PRIVATE. Mini-COBRA = the state version for small employers under 20 lives.

COBRA Triggers, Durations, and Who Pays

COBRA applies to employers with 20 or more employees and lets a qualified beneficiary continue group coverage at up to 102% of the full premium (the employee now pays the employer's former share plus a 2% administrative load). Duration depends on the qualifying event: 18 months for termination or reduction of hours, and 36 months for events such as divorce, death of the covered employee, or a dependent child aging out. A disability determination can extend the 18-month period to 29 months. The exam tests these durations and the 102% figure.

HIPAA Portability and Creditable Coverage

HIPAA guarantees portability: it limits pre-existing-condition exclusions, prohibits discrimination based on health status, and (historically) credited prior creditable coverage against any new plan's pre-existing waiting period. Post-ACA, individual pre-existing exclusions are banned outright, but the exam still tests HIPAA's guaranteed-renewability and non-discrimination guarantees and its privacy protections for health information.

Test Your Knowledge

An employee is terminated (not for gross misconduct) and elects COBRA. The total monthly group premium is $700. What is the maximum standard monthly amount the employer can charge under COBRA, and how long can this beneficiary continue coverage for this event?

A
B
C
D
Test Your Knowledge

Which of the following is a function of HIPAA rather than COBRA?

A
B
C
D