13.3 Group Health, COBRA, and HIPAA Portability

Key Takeaways

  • Group health is issued as a master contract to the employer; members get certificates and avoid individual underwriting, with actively-at-work and employment-class rules controlling adverse selection.
  • Participation requirements are 100% for non-contributory (employer-paid) plans and about 75% for contributory plans.
  • COBRA applies at 20+ employees: 18 months for termination/reduced hours, 36 months for family events, at up to 102% of premium (150% during the 11-month disability extension).
  • HIPAA provides group portability, guaranteed issue/renewability, special enrollment rights, and PHI privacy and security protections.
  • Distinguish the laws: COBRA continues coverage after qualifying events, HIPAA moves coverage between jobs and guards PHI, and ERISA governs reporting, SPD disclosure, and fiduciary duties.
Last updated: June 2026

How Group Health Works

Group health insurance covers a group of people under a single master contract issued to the plan sponsor (usually the employer). Individual members receive a certificate of coverage, not a policy. Because the group is underwritten as a whole, members generally avoid individual medical underwriting.

Key structural features:

FeatureGroup health
Contract holderEmployer/sponsor (master contract)
Evidence to memberCertificate of coverage
UnderwritingGroup/experience rated, little individual underwriting
CostLower per person than individual coverage
EligibilityDefined by an actively-at-work, full-time class

Exam trap: To prevent adverse selection, eligibility must rest on employment classes, not on health. An actively-at-work provision requires the employee be performing normal duties on the effective date.

Enrollment and Adverse Selection Controls

Groups control adverse selection through participation and timing rules.

  • Enrollment period a window (often 31 days) for new hires to join without proof of insurability.
  • Probationary period a wait (e.g., 30-90 days) after hire before eligibility begins.
  • Participation requirement non-contributory plans (employer pays all) require 100% participation; contributory plans (employees share cost) typically require 75%.
  • Late enrollee an employee who declines initial enrollment and joins later may face evidence of insurability or a waiting period.

Non-contributory plans hit 100% participation precisely because employees pay nothing and have no incentive to opt out, which neutralizes adverse selection.

COBRA Continuation Coverage

The Consolidated Omnibus Budget Reconciliation Act (COBRA) lets employees and dependents who lose group coverage continue it temporarily at their own cost. It applies to employers with 20 or more employees.

Qualifying eventWho qualifiesMax duration
Termination (not gross misconduct)Employee + dependents18 months
Reduction in hoursEmployee + dependents18 months
Employee Medicare entitlementSpouse, children36 months
Divorce or legal separationSpouse, children36 months
Death of employeeSpouse, children36 months
Child loses dependent statusChild36 months

Premium and timing: The beneficiary pays up to 102% of the full group premium (100% cost + 2% admin). If disabled within the first 60 days, an 11-month extension to 29 months is available at up to 150%. The election period is 60 days, and the first premium is due within 45 days of election.

COBRA Worked Scenario

An employee is terminated (not for gross misconduct). The full group premium for family coverage is $1,200/month.

  • COBRA premium = 102% x $1,200 = $1,224/month.
  • Maximum duration for termination = 18 months.
  • If the employee qualifies as disabled under SSA within 60 days, months 19-29 may be charged at 150%: 1.50 x $1,200 = $1,800/month for that extension.

Exam trap: Gross misconduct termination forfeits COBRA rights entirely. Also note the 36-month family events (divorce, death, Medicare entitlement, loss of dependent status) versus the 18-month employee events (termination, reduced hours).

HIPAA Portability

The Health Insurance Portability and Accountability Act (HIPAA) improves continuity when workers change jobs and protects health data.

Portability provisions:

  • Guaranteed issue and renewability in the group market, regardless of health status.
  • Special enrollment rights triggered by loss of other coverage, marriage, birth, or adoption, without waiting for open enrollment.
  • Creditable coverage prior continuous coverage (the era of pre-existing exclusion offsets) and a bar on using health status to deny group eligibility.

HIPAA also has a Privacy Rule and Security Rule protecting Protected Health Information (PHI) held by covered entities (plans, providers, clearinghouses) and their business associates, enforced with civil and criminal penalties.

Exam trap: Do not confuse the laws. COBRA = temporary continuation after a qualifying event. HIPAA = portability of coverage between jobs plus PHI privacy/security. ERISA = federal reporting, Summary Plan Description disclosure, and fiduciary duties for private employer plans.

Test Your Knowledge

An employee's spouse loses group coverage because of a divorce. Under COBRA, what is the maximum continuation period available to the former spouse?

A
B
C
D
Test Your Knowledge

A terminated employee elects COBRA. The full monthly group premium is $1,200. Absent a disability extension, what is the maximum monthly premium the plan may charge for COBRA continuation?

A
B
C
D

HIPAA Privacy, Creditable Coverage, and Special Enrollment

Beyond portability, HIPAA added two ideas the exam tests. First, its privacy and security rules protect protected health information (PHI), restricting how plans and providers use and disclose an individual's medical data. Second, HIPAA's concept of creditable coverage — prior continuous coverage — historically reduced any new pre-existing-condition waiting period day-for-day; under the ACA, group major-medical plans cannot impose pre-existing exclusions at all, so creditable coverage now matters mainly for Medicare Part D late-enrollment and certain supplemental products.

HIPAA also created special enrollment periods: an employee who declined coverage may enroll outside open enrollment after a qualifying life event such as marriage, birth, adoption, or loss of other coverage, generally within 30 days.

HIPAA featureEffect
Privacy/security rulesSafeguard PHI; limit disclosure
Special enrollment30-day window after marriage, birth, adoption, loss of coverage
Guaranteed renewabilityGroup health plans must renew

Trap: COBRA is about continuing the old plan at the member's full cost; HIPAA is about getting into a new plan without health-based barriers. Examiners pair them to see if you can separate continuation from portability.