ERISA and Your Small Business Health Plan: What Actually Applies (and What Doesn't)

If you're a small business owner, you've probably heard of ACA compliance. Fewer employers have heard of ERISA — and that gap is worth closing, because unlike the ACA, there's no small-employer exception to it.

One of the most common assumptions we hear from growing businesses is some version of:

"We're too small for that kind of compliance to apply to us."

For ACA requirements, that's often true — the employer mandate only kicks in once you cross 50 full-time-equivalent employees. For ERISA, it almost never is.

In this article, we'll explain what ERISA actually is, why size doesn't exempt you from it, and what it requires from employers who sponsor a group health plan — regardless of how many people are on it.

Why Small Employers Assume ERISA Doesn't Apply to Them

Most compliance conversations small business owners have heard about — the ACA employer mandate, Applicable Large Employer status, 1095-C reporting — share one thing in common: they all have a headcount threshold. Cross 50 full-time-equivalent employees, and a new set of rules kicks in. Stay under it, and you don't have to think about them.

That pattern trains business owners to expect the same shape from every compliance topic: "What's the number where this starts to matter?"

ERISA breaks that pattern, and that's exactly why it gets missed.

The ACA Has a Size Threshold. ERISA Doesn't.

The Employee Retirement Income Security Act (ERISA) is the federal law that governs most employer-sponsored group health and welfare plans. If you're a private-sector employer and you sponsor a group health plan, ERISA generally applies — whether you have 5 employees or 500.

The exemptions are narrow. ERISA does not apply to:

Plans sponsored by government employers (federal, state, or local)

Plans sponsored by churches, for their employees

Plans that are entirely employee-pay-all, with no employer contribution or involvement whatsoever

If none of those describe your business, your group health plan is almost certainly an ERISA plan — no matter how small your team is.

What ERISA Actually Requires

ERISA compliance isn't one single form. It's a set of ongoing obligations that fall into a few core categories:

A Written Plan Document

Your health plan needs to exist as an actual written document — the formal legal description of the plan's terms. This is separate from your insurance policy or carrier certificate; it's the plan document that governs how the plan operates.

A Summary Plan Description (SPD)

Employees are entitled to a plain-language summary of the plan — what it covers, how to use it, and how to file a claim or appeal a denial. Many small employers assume their carrier's benefits booklet counts as an SPD. It often doesn't, unless it's been specifically formatted to meet ERISA's SPD content requirements.

Fiduciary Responsibility

Anyone who makes decisions about the plan — including the business owner, if that's who's deciding — is acting as a fiduciary. That means decisions have to be made in the interest of plan participants, not just whatever's administratively convenient. This is a real legal standard, not a suggestion.

Form 5500 (for larger plans)

Employers generally must file an annual Form 5500 reporting on the plan's operation. There's a genuine small-plan exemption here: a plan with fewer than 100 participants at the start of the plan year is generally exempt if it's fully insured, unfunded, or a mix of both. One detail that trips people up — "participants" for this count means employees and former employees (including COBRA beneficiaries), not covered spouses or dependents, so the number is usually smaller than your total covered lives. For plans that do need to file, the deadline is the last day of the seventh month after the plan year ends — July 31 for a calendar-year plan.

Where This Actually Trips Up Small Employers

The most common gap isn't willful noncompliance. It's simply not knowing ERISA applies at all.

A business with 12 employees might reasonably assume, based on how every other compliance conversation has gone, that there's some size threshold before this starts to matter. So the written plan document and SPD never get created, because nobody flagged that they were required in the first place. That's an audit and penalty exposure that exists regardless of how small the group is — the Department of Labor doesn't scale enforcement down for small employers the way the ACA scales its own requirements up.

What Employers Can Do

If you're not sure where your plan stands, here's where to start:

Confirm a written plan document exists — not just your insurance policy, but a plan document that meets ERISA's requirements.

Confirm your SPD is accurate and was actually distributed — not just available somewhere if someone asks.

Check your participant count if you're near the 100-participant mark, to know whether Form 5500 applies to you this year.

Know who's acting as your plan's fiduciary — and make sure that person understands what the role actually requires.

The Value of a Compliance Review

Many employers assume that if nothing's gone wrong yet, nothing's missing. But ERISA gaps are usually invisible right up until a DOL inquiry, an employee complaint, or a benefits dispute forces the question — at which point "we didn't know it applied" isn't a defense.

A straightforward compliance review can confirm whether your plan document and SPD are in place and current, whether Form 5500 applies to you, and who's actually holding fiduciary responsibility for the plan today.

Final Thoughts

ERISA doesn't come with the size threshold most small business compliance topics do — and that's exactly why it's worth checking now rather than assuming it doesn't apply. If you're not confident your plan has a proper ERISA plan document and SPD on file, that's a five-minute conversation now instead of a much longer one later.