How Retirement Advisers Can Engage Millennials

Originally posted by Mike Nesper on June 16, 2015 on ebn.benefitnews.com.

Workforce demographics are changing as more millennials are entering and the baby boomers are retiring. That path to retirement is also changing — defined benefit plans are a solution of the past, leaving defined contribution plans as the major retirement vehicle.

The problem is millennials aren’t contributing enough to their 401(k) plans. “There is a crisis,” Tim Slavin, senior vice president of defined contribution at Broadridge, said recently between sessions at the SPARK Institute’s national conference in Washington, D.C. “Millennials better hurry up and get in a 401(k).”

So what’s the best way to make that happen?

Make it convenient. “We live in the concierge society,” said Debbie Brown, vice president of marketing at Broadridge.

A good way to disseminate retirement information to millennials is via electronic tools like Dropbox, Slavin said. This way, employees can view statements on their time. Sending alerts in emails doesn’t work well, he said, because if not opened immediately, most people forget about them. “It’s not come to us, but we’re gonna go to you,” he said.

Ensuring tools and communication are easy to understand is key, Brown said. “Keep it simple. Make it work everywhere,” she said.

Millennials want information upfront before having a face-to-face conversation about retirement, Slavin said. “They want to get engaged,” he said, and once they are, millennials commit.

Automatic enrollment is a good tool to increase participation among younger workers, Slavin said. “There’s significant traction there,” he said. “The biggest issue is apathy.” That’s why auto enrollment should be paired with auto escalation, Slavin said.

For millennials, saving for retirement can be difficult — DB plans are no longer supplementing DC plans, wage growth is stagnant and many have student loan debt. Still, achieving retirement goals can be accomplished, Slavin said, but employees need to start contributing to their plan as soon as they enter the workforce.

While younger workers might take some time to realize what’s needed to retire, Slavin is confident they’ll come around. “Millennials are smart,” he said. “They’ll catch on.”


ACA Cost-Sharing Limits for 2016

Originally posted by Laura Kerekes on June 4, 2015 on thinkhr.com.

The Affordable Care Act (ACA) requires nongrandfathered group health plans to limit the total cost-sharing (deductibles, co-pays, and co-insurance) paid by participants for in-network essential health benefits in a plan year. For the 2015 plan year, the ACA cost-sharing limits are $6,600 if self-only coverage or $13,200 if other than self-only coverage (i.e., family coverage). Often referred to as “out-of-pocket maximums,” the limits are subject to change for inflation each year.

For 2016, two important changes will take effect. First, the cost-sharing limits will increase to $6,850 and $13,700, respectively. Secondly, the self-only limit of $6,850 will apply to each covered person regardless of whether enrolled for self-only coverage or family coverage.

FAQ XXVII, released jointly by the Departments of Labor, Health and Human Services, and the Treasury, provides that:

  • ACA cost-sharing limits apply to nongrandfathered group health plans, including “small” or “large” group policies and self-funded health plans.
  • Deductibles, co-pays, and co-insurance, paid by the participant, must be counted toward the annual cost-sharing limits (out-of-pocket maximums). However, plans are not required to count amounts paid for nonessential health benefits, services not covered by the plan, or services received from out-of-network providers.
  • For plan years beginning in 2016, the self-only cost-sharing limit applies to each person regardless of whether they have self-only or family coverage. The FAQ provides the following example:

“Assume that a family of four individuals is enrolled in family coverage under a group health plan in 2016 with an aggregate annual limitation on cost sharing for all four enrollees of $13,000 (note that a plan is permitted to set an annual limitation below the maximum . . . aggregate $13,700 limitation for coverage other than self-only for 2016). Assume that individual #1 incurs claims associated with $10,000 in cost sharing, and that individuals #2, #3, and #4 each incur claims associated with $3,000 in cost sharing (in each case, absent the application of any annual limitation on cost sharing). In this case, because, under the clarification discussed above, the self-only maximum annual limitation on cost sharing ($6,850 in 2016) applies to each individual, cost sharing for individual #1 for 2016 is limited to $6,850, and the plan is required to bear the difference between the $10,000 in cost sharing for individual #1 and the maximum annual limitation for that individual, or $3,150. With respect to cost sharing incurred by all four individuals under the policy, the aggregate $15,850 ($6,850 + $3,000 + $3,000 + $3,000) in cost sharing that would otherwise be incurred by the four individuals together is limited to $13,000, the annual aggregate limitation under the plan, under the assumptions in this example, and the plan must bear the difference between the $15,850 and the $13,000 annual limitation, or $2,850.”

Note that the current ACA cost-sharing limits, and the changes for 2016, only affect plans with high out-of-pocket maximums. Many plans are not affected because they have out-of-pocket maximums that are much lower than the amounts allowed by the ACA, or because they already apply reasonable individual maximums for both single and family coverage plans. Group policies issued in certain states also may be subject to lower limits due to state insurance laws. Therefore, many plans may not be affected by the ACA changes for 2016. On the other hand, high deductible health plans (HDHPs) that are designed for compatibility with health savings accounts (HSAs), are likely to be affected by the changes.

HSA-Compatible High Deductible Health Plans

HDHPs that qualify as permissible coverage in connection with an HSA — called HSA-compatible HDHPs — must comply with IRS rules for minimum deductible amounts and maximum out-of-pocket amounts. Most HSA-compatible HDHPs are nongrandfathered health plans, so they are subject to the ACA cost-sharing limits or the IRS maximum out-of-pocket amounts, whichever is less.

For 2016, the maximum out-of-pocket amounts for a HSA-compatible HDHP will be:

  • $6,550 if self-only coverage, or
  • $13,100 if family coverage.

If, however, the 2016 HDHP is a nongrandfathered health plan, the maximum out-of-pocket amount foreach individual with family coverage will be limited to $6,850 with respect to in-network essential health benefits. For many HDHPs, this will be a significant change for 2016.

Summary

The guidance provided in FAQ XXVII does not affect grandfathered health plans or any plans for plan years before 2016. For nongrandfathered plans, including HSA-compatible HDHPs, employers and benefit advisors are encouraged to review the guidance to ensure compliance with the ACA cost-sharing limits for 2016.


Patient-Centered Outcomes Research Institute Fee

Originally posted by irs.gov.

The Affordable Care Act imposes a fee on issuers of specified health insurance policies and plan sponsors of applicable self-insured health plans to help fund the Patient-Centered Outcomes Research Institute. The fee, required to be reported only once a year on the second quarter Form 720 and paid by its due date, July 31, is based on the average number of lives covered under the policy or plan.

The fee applies to policy or plan years ending on or after Oct. 1, 2012, and before Oct. 1, 2019. The Patient-Centered Outcomes Research Institute fee is filed using Form 720, Quarterly Federal Excise Tax Return. Although Form 720 is a quarterly return, for PCORI, Form 720 is filed annually only, by July 31.

Please refer to the following chart for the filing due date and applicable rate depending upon the month a specified health insurance policy or an applicable self-insured health plan ends.

Specified Health Insurance Policies and Applicable Self-Insured Health Plans
The fee is imposed on an issuer of a specified health insurance policy and a plan sponsor of an applicable self-insured health plan. For more information on whether a type of insurance coverage or arrangement is subject to the fee, see this chart.

Calculating the Fee
Specified Health Insurance Policies

For issuers of specified health insurance policies, the fee for a policy year ending before Oct. 1, 2013, is $1, multiplied by the average number of lives covered under the policy for that policy year. Generally, issuers of specified health insurance policies must use one of the following four alternative methods to determine the average number of lives covered under a policy for the policy year.

  1. Actual Count Method: For policy years that end on or after Oct. 1, 2012, issuers using the actual count method may begin counting lives covered under a policy as May 14, 2012, rather than the first day of the policy year, and divide by the appropriate number of days remaining in the policy year.
  2. Snapshot Method: For policy years that end on or after Oct. 1, 2013, but began before May 14, 2012, issuers using the snapshot method may use counts from the quarters beginning on or after May 14, 2012, to determine the average number of lives covered under the policy.
  3. Member Months Method and 4. State Form Method: The member months data and the data reported on state forms are based on the calendar year. To adjust for 2012, issuers will use a pro rata approach for calculating the average number of lives covered using the member months method or the state form method for 2012. For example, the issuers using the member months number for 2012 will divide the member months number by 12 and multiply the resulting number by one quarter to arrive at the average number of lives covered for October through December 2012.

For more information on these methods to determine the average number of lives covered under a policy for the policy year, please see the final regulations (PDF).

Applicable Self-Insured Health Plans

For plan sponsors of applicable self-insured health plans, the fee for a plan year ending before Oct. 1, 2013, is $1, multiplied by the average number of lives covered under the plan for that plan year. Generally, plan sponsors of applicable self-insured health plans must use one of the following three alternative methods to determine the average number of lives covered under a plan for the plan year.

  1. Actual Count Method: A plan sponsor may determine the average number of lives covered under a plan for a plan year by adding the totals of lives covered for each day of the play year and dividing that total by the total number of days in the plan year.
  2. Snapshot Method: A plan sponsor may determine the average number of lives covered under an applicable self-insured health plan for a plan year based on the total number of lives covered on one date (or more dates if an equal number of dates is used in each quarter) during the first, second or third month of each quarter, and dividing that total by the number of dates on which a count was made.
  3. Form 5500 Method: An eligible plan sponsor may determine the average number of lives covered under a plan for a plan year based on the number of participants reported on the Form 5500, Annual Return/Report of Employee Benefit Plan, or the Form 5500-SF, Short Form Annual Return/Report of Small Employee Benefit Plan.

However, for plan years beginning before July 11, 2012, and ending on or after Oct. 1, 2012, plan sponsors may determine the average number of lives covered under the plan for the plan year using any reasonable method.

For more information on these methods to determine the average number of lives covered under applicable self-insured health plans for the plan year, please see the final regulations (PDF).

Reporting and Paying the Fee
File the second quarter Form 720 annually to report and pay the fee no later than July 31 of the calendar year immediately following the last day of the policy year or plan year to which the fee applies. Issuers and plan sponsors who are required to pay the fee but are not required to report any other liabilities on a Form 720 will be required to file a Form 720 only once a year. They will not be required to file a Form 720 for the first, third or fourth quarters of the year. Deposits are not required for this fee, so issuers and plans sponsors are not required to pay the fee using EFTPS.

Please see the instructions for Form 720 on how to fill out the form and calculate the fee. If for any reason you need to make corrections after filing your annual Form 720 for PCORI, write “Amended PCORI” at the top of the second filing.

The payment, if paid through the Electronic Federal Tax Payment System, should be applied to the second quarter (in EFTPS, select Q2 for the Quarter under Tax Period on the "Business Tax Payment" page).

Related Items:

  • The IRS and the Treasury Department have issued final regulations on this fee.
  • Notice 2014-56 establishes the applicable dollar amount for policy and plan years ending after Sept. 30, 2014, and before Oct. 1, 2015.
  • For information on the fee, see our questions and answers and chart summary.
  • Form 720, Quarterly Federal Excise Tax Return, was revised to provide for the reporting and payment of the patient-centered outcomes research fee.

IRS Confirms W-2 Safe Harbor to Determine Plan Affordability

Originally posted by assuredskcg.com.

The employer mandate, effective beginning in 2014, requires employers with 50 or more employees to pay a penalty if certain conditions are not met. One of these conditions is to provide affordable coverage. Coverage is considered to be affordable if an employee’s required contribution does not exceed 9.5% of the employee’s household income – something that is not readily accessible by employers. As previously reported, the IRS proposed a safe harbor that would allow employers to use the W-2 wages of an employee to determine whether coverage is affordable for purposes of the employer mandate, instead of using household income. In Notice 2012-58, The IRS confirms that the Form W-2 safe harbor will be available to employers to determine affordability with respect to the employer penalty provisions, at least through 2014. To take advantage of the safe harbor, employers must offer full-time employees and their dependents the opportunity to enroll in minimum essential coverage under an employer-sponsored plan, and ensure that the employee portion of the self-only premium for the employer’s lowest cost coverage that provides minimum value does not exceed 9.5% for the employee’s W-2 wages. Application of the safe harbor would be determined after the end of the calendar year and on an employee-byemployee basis, taking into account the employee’s particular W-2 wages and contribution. The safe harbor can also be used prospectively, at the beginning of the year, by structuring the plan to set the employee contribution at a level that would not exceed 9.5% of the employee’s W-2 wages. It is important to note the safe harbor only applies for purposes of determining whether an employer’s coverage satisfies the affordability test for purposes of the employer mandate – it would not affect an employee’s eligibility for a premium tax credit, which continues to be based on the affordability of employer-sponsored coverage relative to an employee’s household income. Thus, in some cases, this means that an employer’s offer of coverage to an employee could be considered affordable based on W-2 wages for purposes of determining whether the employer is subject to a penalty under the employer mandate, and the same offer could be treated as unaffordable based on household income for purposes of determining whether the employee is eligible for a premium tax credit (i.e., no penalty even though the employee receives subsidized coverage in the Exchange). Although the guidance is helpful to employers and will make it easier to look at contribution structures for benefit programs in 2014, further guidance is still needed in several areas, including what constitutes a “minimum value” plan, and what constitutes providing coverage to “substantially all” full-time employees in order to avoid the application of the penalty that applies with respect to not offering coverage.


New Guidance on Preventive Services Required Under the Affordable Care Act

Originally posted by www.simandlhrlaw.com

Recently, the Departments of Labor, Health and Human Services, and Treasury jointly issued guidance on the coverage of preventive services required under the Affordable Care Act (ACA). By way of background, the ACA requires that non-grandfathered group health plans provide preventive services, such as screenings, immunizations, contraception, and well-woman visits, without cost-sharing requirements. The preventive services are based upon recommendations of the United States Preventive Services Task Force (USPSTF) and comprehensive guidelines supported by the Health Resources and Services Administration (HRSA). The new guidance is outlined in Part XXVI of the series FAQs About Affordable Care Act Implementation and clarifies the coverage of preventive services specifically related to: 

  • Contraceptives;
  • BRCA Testing;
  • Gender-Specific USPSTF Recommendations; and
  • Pregnancy Care for Dependents.

Contraceptive Coverage

Prior guidance issued by the Departments required that women have access to the full range of FDA-approved contraceptive methods without cost-sharing. However, the guidance also provided that health plans were permitted to use reasonable medical management techniques to control costs such as imposing cost-sharing on brand name drugs to encourage the use of generic equivalents. The new FAQs provide further guidance on the scope of coverage required for contraception and what constitutes "reasonable" medical management techniques.

The individual FAQs on contraception clarified the following requirements:

  • Health plans must cover without cost-sharing at least one version of all the contraception methods identified in the FDA Birth Control Guide. Currently, the guide lists 18 forms of contraception including, but not limited to: oral contraceptives; intrauterine devices; barriers; hormonal patches; and sterilization surgery.
  • Plans may use reasonable medical management such as imposing cost-sharing on some items and services to encourage individuals to use other items or services within the contraception method. For example, a plan may impose cost-sharing (including full cost-sharing) on brand name oral contraceptives to encourage use of generics or impose different copayments to encourage the use of one of several FDA-approved intrauterine devices.
  • If the health plan is using medical management to control costs within a specified contraception method, the plan must have an exception process that is "easily accessible, transparent and sufficiently expedient" and that is not unduly burdensome on the individual, provider or individual acting on the individual's behalf. Also, the plan is required to defer to the determination of the individual's attending provider. Thus, the plan must cover an item or service without cost-sharing if a treating physician deems it medically necessary.
  • Plans that try to offer coverage for some - but not all - FDA-identified contraceptive methods will not comply with the health care reform law and its rules. For example, plans cannot cover barrier and hormonal methods of contraception while excluding coverage for implants or sterilization.

BRCA Testing

The preventive services required under the ACA include screening for women who have a family member with breast, ovarian, tubal or peritoneal cancer to identify a family history that may be associated with an increased risk related to the breast cancer susceptibility genes - BRCA 1 or BRCA 2. Prior guidance clarified that women with positive screening results should receive genetic counseling and, if indicated after counseling, BRCA testing. However, there was confusion as to whether or to what extent the recommendation applied to a woman with a personal history of cancer that was not BRCA-related.

The new guidance clarifies that the USPSTF recommendation applies to women with a history of non-BRCA related cancer. Thus, a plan or issuer is required to cover without cost-sharing preventive screening, genetic counseling, and if deemed appropriate by her treating physician, BCRA tests for such women. The new guidance further clarifies that these preventive services must be provided regardless of whether a woman is exhibiting any symptoms and even if she is currently cancer-free.

Coverage of Preventive Services Based on Gender Identity

A number of the preventive services required by the ACA are gender-specific such as mammograms and BRCA testing for women and prostate exams for men. The new guidance clarifies that non-grandfathered health plans cannot limit coverage of preventive services based on an individual's sex assigned at birth, gender identity, or gender recorded by the plan. Rather, if the individual otherwise satisfies the criteria under the recommendation or guideline and is eligible under the terms of the plan, the plan must provide the preventive services that the individual's provider determines are medically appropriate. This means, for example, providing without cost-sharing a mammogram for a transgender man who has residual breast tissue.

Coverage for Dependents of Preventive Services Related to Pregnancy

Traditionally, a group health plan was able to restrict coverage for maternity care to employees and employees' spouses. However, under the ACA those benefits must now be provided to an eligible dependent. The new FAQs clarify that to the extent the maternity care is a preventive service under the ACA, the plan must provide prenatal benefits and other services intended to assist with healthy pregnancies to an eligible dependent without cost-sharing. The guidance further clarifies that an eligible dependent must be provided all other age appropriate women's health services without cost-sharing.

Action Steps

This recent guidance is a clarification of the existing preventive services required under the ACA rather than a modification. Accordingly, there is no delayed effective date typically applied to changes in preventive services. Employers and plan sponsors should review their plan documents and their administrative practices to ensure the plan is providing coverage of preventive services in accordance with the new guidance. Failure to provide the preventive services as required by the ACA could subject the employer to penalties of up to $100 per day per participant.


Are Your Workers Stretching to Prevent Ergonomic Injuries?

Originally posted by Jennifer Busick on May 6, 2015 on safetydailyadvisor.blr.com.

Overexertion, slips, trips, and falls cause 60 percent of lost-time occupational injuries in the United States and cost employers over $30 billion in direct workers’ compensation costs in 2013. One strategy you can use to control these costly injuries is an effective worksite stretching program.

The aging workforce is one factor that increases the likelihood of falls: the U.S. workforce is aging. According to the Centers for Disease Control and Prevention (CDC), one out of three individuals over age 65 will fall every year, and the incidence rate of falls begins to accelerate at age 45. You can improve the work environment—lighting, flooring, housekeeping—to prevent these types of injuries, but if you’re already on top of all of that, the next step to take may be to address worker factors like poor motor coordination and balance problems that increase the risk of falling.

Increased flexibility can decrease MSDs

An inverse relationship exists between flexibility and risk for musculoskeletal disorders (MSDs)—that is, as flexibility improves, employees reduce their chance of developing an MSD. Improved flexibility and range of motion in these three body parts will have the greatest impact on workers’ ergonomic risk:

  • Hamstrings. Hamstring flexibility relates closely to the ability to lift properly without injury. Individuals with flexible hamstrings can use the powerful muscles in their legs to bear the brunt of lifting heavy objects, while those who are less flexible often lift with their backs, putting them at greater risk for injury.
  • Shoulders. A larger range of shoulder rotation can help workers avoid injuries from reaching and pulling.
  • Trunk. Restricted trunk rotation is a common cause of chronic lower back pain, and a larger range of motion helps workers bend and twist without injury. Employees who have a range of motion less than 90 degrees are at increased risk for injuries, as are those with more than 30 degrees of difference in range of motion between left and right trunk rotation.

Tips for a successful stretching program

These three tips will help you establish a successful workplace stretching program.

  • Measure and provide feedback. Evaluate employees’ shoulder rotation, hamstring flexibility, and trunk rotation before the program begins, and compare their results to averages for their age and gender. Periodic reassessment can help them see their improvement.
  • Increase the challenge. As employees improve their flexibility and range of motion, the exercises in a stretching program should become more difficult; try for 3-month intervals. Not only will this encourage employees to keep improving their fitness, it will also stave off the boredom that can ensue when people repeat an exercise routine.
  • Make it mandatory. If you make stretching part of your voluntary wellness program, you may get limited participation. But stretching is value-neutral—it’s not likely to be seen as punitive or discriminatory, like weight-control programs or some other wellness initiatives—so you can require workers to stretch before their shift, during required “stretch breaks,” and at the end of their shift in order to ensure that they receive the benefits of stretching.

EEOC Proposed Rule on Wellness and the Americans with Disabilities Act – What Employers Need to Know

Originally posted by M. Brian Magargle and Robin E. Shea on April 30, 2015 on www.thinkhr.com.

The employer community has been waiting for years to receive guidance from the Equal Employment Opportunity Commission on wellness programs and how an employer’s obligations under the Americans with Disabilities Act intersect with its rights and obligations under the Health Insurance Portability and Accountability Act (as amended by the Affordable Care Act).

The EEOC finally issued a proposed rule on April 20. The following is what employers need to know in a “Q&A” format.

What problem is the EEOC trying to resolve?

The quick answer is an apparent conflict between the ADA rules on employer “medical inquiries,” on the one hand, and the “wellness program” provisions of the HIPAA/ACA, on the other.

Title I of the ADA (the part of the ADA that applies to private sector employers) generally prohibits employers from making “medical inquiries” of current employees unless the inquiries are “job-related and consistent with business necessity” (for example, to verify the need for a reasonable accommodation). The general rule is that employers are not supposed to be asking for medical information from current employees.

There are some limited exceptions to this rule, including an exception for medical inquiries made in connection with a “voluntary wellness program.”

As employer wellness programs have become more popular, many employers began offering specific rewards or penalties to employees based on whether they participated in the programs and even on whether they achieved certain “results.” As will be discussed in more detail below, the HIPAA and the ACA specifically authorize wellness programs to offer incentives for “participation” and “outcomes” under certain circumstances. However, the question arose whether the use of such incentives would render the wellness program not “voluntary” for ADA purposes. If the wellness program was not voluntary because of the incentives, then any requests for employee medical information made in connection with the wellness program would violate the ADA.

(Title I of the ADA would not have an impact on medical inquiries made, say, to the family member of an employee who might also be eligible to participate in the employer’s wellness program.)

Thus, it was possible that an employer could offer a wellness program that was authorized and lawful under the HIPAA/ACA but still be vulnerable to charges and lawsuits under the ADA. The EEOC’s proposed rule seeks to address this problem, and for the most part, it should be welcomed by employers who offer wellness programs.

What does the proposed rule say, in a nutshell?

The proposed rule says that a wellness program can still be “voluntary” for ADA purposes if the program provides “incentives” for employees (both rewards and penalties), as long as the employer complies with the wellness incentive requirements of the HIPAA/Affordable Care Act.

There are two caveats: The wellness program would have to be associated with a group health plan (either insured or self-insured), and the EEOC proposals do not exactly match the HIPAA/ACA rules, although they are reasonably close.

Can you give us a recap of the HIPAA/ACA requirements?

Under the HIPAA/ACA scheme, there are two types of wellness programs. A “participatory” program is one that rewards employees just for participating and does not require a specific goal to be met. (An example would be an employer who reimburses employees for fitness club memberships.) Under the HIPAA/ACA, participatory programs can be offered without limitation, as long as they’re available to all similarly situated individuals.

The other type of wellness program is a “health-contingent” program. There are two types of “health-contingent” programs: (1) activity-only programs, in which the employee is rewarded for completing an activity but doesn’t have to achieve or maintain an outcome (for example, “we’ll pay you $100 if you walk a mile three days a week for a year”); and (2) outcome-based programs, in which employees are rewarded for achieving or maintaining results (for example, “we’ll pay you $100 if you keep your BMI at or below 25 for a year, or if you quit smoking”).

If the program is health-contingent, employers are allowed to offer incentives (carrots or sticks) if –

  • Employees are allowed to try to qualify at least once a year,
  • The total reward offered doesn’t exceed 30 percent of the total cost of employee-only coverage under the plan or the total cost of family coverage if dependents are also allowed to participate in the program (“total” means the employee’s and the employer’s share). The percentage is up to 50 percent for tobacco prevention or cessation,
  • The program is reasonably designed to promote health or prevent disease,
  • The full reward must be available for all similarly situated individuals, and reasonable alternatives must be offered to those who can’t qualify, and
  • The availability of reasonable alternatives must be disclosed in plan materials and in any disclosure telling an individual that he or she did not meet an initial outcome-based standard.

Under the HIPAA/ACA, the 30 percent/50 percent incentive limit applies only to “health-contingent” programs. HIPAA and the ACA have no limit on rewards that apply to “participatory” programs (if the programs are available to all similarly situated individuals).

The EEOC’s proposed rule is slightly different.

How does the EEOC proposed rule contrast with the HIPAA/ACA rule?

The EEOC would allow employers to offer incentives for employee participation in wellness programs associated with group health plans if the total reward does not exceed 30 percent of the total cost of employee-only coverage under the plan for both participatory and health-contingent wellness programs. The EEOC proposed rule does not allow a 50 percent reward level for tobacco cessation programs (unless there are no associated disability-related questions or medical exams), and the total cost used in the reward calculations does not take into account family-level coverage, even where dependents can participate in the program.

In addition, the wellness program must be completely voluntary. The EEOC would define “voluntary” as follows:

  • Employees aren’t required to participate in the wellness program,
  • Health insurance coverage is not denied or made more difficult to get if the employee chooses not to participate (with the exception of the permitted “incentives”), and
  • The employer does not take adverse action against an employee for refusing to participate . . .as this employer allegedly did.

The EEOC invites the public to comment on the proposed rule through June 19. The agency is particularly interested in comments pertaining to how much medical information an employee should be required to disclose to be eligible for an incentive, whether the rule should require that the incentives not render health insurance “unaffordable” within the meaning of the ACA, issues related to the “notice” requirement, how to treat wellness programs that are not associated with group health insurance, as well as other topics.

The employer would also be required to provide a notice “that clearly explains what medical information will be obtained, who will receive the medical information, how the medical information will be used, the restrictions on its disclosure, and the methods the covered entity will employ to prevent improper disclosure of the medical information.”

The wellness program would be required to disclose medical information to the employer only in aggregated, non-individually-identifiable form, “except as needed to administer the health plan.”

Are there any other issues to consider under the HIPAA/ACA?

Although the EEOC rule is currently in proposed form, we expect any final version to still be somewhat different from the HIPAA/ACA requirements for wellness programs. For example, one of the primary requirements of a outcome-based program under HIPAA is the ability of an employee to meet a “reasonable alternative standard” to receive the reward. Participants in the program must be clearly informed of that option, and it remains to be seen how that notification will be coordinated with the notice proposed by the EEOC. A related issue is the intersection of the “reasonable alternative standard” under HIPAA with the reasonable accommodation and interactive process obligations under the ADA. The EEOC’s Interpretive Guidance to the proposed rule says that provision of a “reasonable alternative standard” along with the required notification will generally satisfy the employer’s reasonable accommodation obligations under the ADA, but no specifics are given. Moreover, the Interpretive Guidance notes that under the ADA an employer would have to make reasonable accommodations for an employee who could not be in a “participatory” program because of a disability, even though the HIPAA/ACA rules do not require a “reasonable alternative standard” for participatory programs.

Also, details about wellness programs commonly appear in ERISA-governed summary plan descriptions, so will the EEOC rules also have to appear there as well?

There are similarities between the employee benefits issues affecting wellness programs, on the one hand, and the ADA and employee-relations issues, on the other, but the differences are equally important and will hopefully be addressed by the EEOC in the final rules expected to be issued later this year.

What should employers do?

The proposed rule describes certain employer “best practices,” as follows:

  • Employers should ensure that employees who handle medical information know their obligations under the laws.
  • Employers should adopt privacy policies for collection and handling of employee medical information, assuming that they have not already done so.
  • If medical information is stored electronically, it should be encrypted and other security measures implemented such as password protection and firewalls.
  • If possible, employees who handle medical information should not be “making decisions related to employment, such as hiring, termination, or discipline.” If this is not possible, then the employer should ensure that there is no discrimination based on an employee’s disability.
  • Breaches of confidentiality should be promptly and effectively addressed, and the affected employees should be informed immediately.
  • Employers should take appropriate action against an employee who breaches confidentiality, and should “consider discontinuing” their relationships with vendors who breach confidentiality.

Why doesn’t the EEOC proposed rule have a 50-percent incentive for tobacco-related programs, since the HIPAA/ACA does?

The EEOC explained that it did not include the 50 percent incentive for tobacco programs because, it said, most of those programs do not seek employee medical information at all. If not, there would be no ADA issue. But if a tobacco program does seek such information (for example, through testing for nicotine, or monitoring blood pressure), then the tobacco program would have to be included in computing the 30-percent limit for incentives.

Did the proposed rule address the employer’s right to get medical information from an employee’s family members, who may be covered under the employee’s health insurance and might be eligible for participation in the wellness program?

No, because Title I of the ADA applies only to employers and employees. Medical inquiries about an employee’s family member would, of course, be covered under the Genetic Information Nondiscrimination Act, which is also enforced by the EEOC. The EEOC says it will issue guidance on wellness and the GINA “in future EEOC rulemaking.”

Did the proposed rule contain anything else of interest?

Yes. The EEOC has explicitly disagreed with a wellness/ADA decision from the U.S. Court of Appeals for the Eleventh Circuit, Seff v. Broward County. At issue in the Seff case was a $20-per-paycheck penalty that employees had to pay if they chose not to participate in the county’s wellness program. The court found that the county’s program fell within a “safe harbor” in the ADA, which provides that a covered entity is not prohibited “from establishing, sponsoring, observing or administering the terms of a bona fide benefit plan that are based on underwriting risks, classifying risks, or administering such risks that are based on or not inconsistent with State law.” Because the program fell within the safe harbor, the court said, it was irrelevant whether the program was “voluntary” or whether medical inquiries made in connection with the program violated the ADA.

The EEOC’s position is that this “safe harbor” provision in the ADA does not apply to wellness programs.

Employers who operate in the Eleventh Circuit states of Alabama, Florida, or Georgia can continue to follow Seff for the time being. However, employers who operate in other states may choose to follow the EEOC’s position once its proposal becomes final. The conflict between the EEOC and the Eleventh Circuit will probably be resolved eventually by the courts.


Study Shows Impact of Generational Differences in the Workforce

Originally posted by Jennifer Busick on April 3, 2015 on safetydailyadvisor.com.

“This is the most comprehensive quantitative study performed on generations in the workforce,” says Warren Wright, vice president of LifeCourse Associates. Wright adds, “We now know what engages different generations.”

The study included Millennials (age 30 and under), Generation X (ages 31 to 51), and Boomers (ages 52 to 69) who are employed full-time. The survey was conducted through a nationally representative online panel of 1,250 respondents, and was tested again on 4,986 insurance industry employees 2 months later.

Key Findings

  • Generations matter. Nearly three-quarters of respondents agreed, not only that there are important generational differences but also that they “sometimes” or “often” pose challenges in the workplace.
  • Millennials crave mentorship. Nearly a third of Millennials “strongly” agreed that they want to work for an organization that provides an excellent mentoring program, far more than any other generation. Millennials also experience the largest gap between what they have and what they want when it comes to mentoring.
  • Millennials want a social workplace. An overwhelming 68 percent of Millennials agreed that they like to socialize informally and make new friends while at work, about 10 points higher than any other generation.
  • Millennials want to contribute. Nearly two-thirds of Millennials agreed that they like their employer “to contribute to social and ethical causes” that they think are important, vs. barely half of Boomers and older Gen Xers.
  • Millennials and Xers want cutting-edge technology. High shares of both Millennials and Gen Xers “strongly agree” that they “like to work with state-of-the-art technology,” while Boomers rate this as significantly less important. Millennials rate their employers’ performance in this area the lowest.
  • Boomers are mission-focused. Fully 56 percent of older Boomers and 50 percent of younger Boomers “strongly agree” that they want to be “100 percent dedicated to my organization’s mission.” That number declines sharply for older Gen Xers and continues to decline through Millennials, in a remarkable 19-point generational spread.

The report is part of LifeCourse’s new Generational Workforce Audit, a customized research tool to diagnose how generational engagement affects an organization’s bottom line. For more information, visit www.lifecourse.com.

Why It Matters

  • Every generation in your workforce needs to be trained to work safely.
  • Since the generations grew up in different eras, you must use a variety of different training methods to reach every generation effectively.
  • Make full use of a blended learning approach to ensure that employees of all ages can learn to work safely.

Most Cyber Attacks Due to Trick Emails, Errors, Not Sophisticated Hacking

Originally posted by Joseph Menn on April 14, 2015 on insurancejournal.com.

When a cyber security breach hits the news, those most closely involved often have incentive to play up the sophistication of the attack.

If hackers are portrayed as well-funded geniuses, victims look less vulnerable, security firms can flog their products and services, and government officials can push for tougher regulation or seek more money for cyber defenses.

But two deeply researched reports being released this week underscore the less-heralded truth: the vast majority of hacking attacks are successful because employees click on links in tainted emails, companies fail to apply available patches to known software flaws, or technicians do not configure systems properly.

These conclusions will be in the minds of executives attending the world’s largest technology security conference next week in San Francisco, a conference named after lead sponsor RSA, the security division of EMC Corp.

In the best-known annual study of data breaches, a report from Verizon Communications Inc. to be released on Wednesday found that more than two-thirds of the 290 electronic espionage cases it learned about in 2014 involved phishing, the security industry’s term for trick emails.

Because so many people click on tainted links or attachments, sending phishing emails to just 10 employees will get hackers inside corporate gates 90 percent of the time, Verizon found.

“There’s an overarching pattern,” said Verizon scientist Bob Rudis. Attackers use phishing to install malware and steal credentials from employees, then they use those credentials to roam through networks and access programs and files, he said.

Verizon’s report includes its own business investigations and data from 70 other contributors, including law enforcement. It found that while major new vulnerabilities such as Heartbleed are being used by hackers within hours of their announcement, more attacks last year exploited patchable vulnerabilities dating from 2007, 2010, 2011, 2012 and 2013.

Another annual cyber report, to be released on Tuesday by Symantec Corp., found that state-sponsored spies also used phishing techniques because they work and because the less-sophisticated approach drew less scrutiny from defenders.

Once inside a system, however, the spies turned fancy, writing customized software to evade detection by whatever security programs the target has installed, Symantec said.

“Once I’m in, I can do what I need to,” said Robert Shaker, an incident response manager at Symantec. The report drew on data from 57 million sensors in 157 countries and territories.

Another troubling trend Symantec found involves the use of “ransomware,” in which hackers encrypt a computer’s files and promise to release them only if the user pays a ransom. (Some 80 percent of the time, they do not decrypt the files even then.)

The new twist comes from hackers who encrypt files, including those inside critical infrastructure facilities, but do not ask for anything. The mystery is why: Shaker said it is not clear whether the attackers are securing the information for resale to other spies or potential saboteurs, or whether they plan on making their own demands in the future.

RSA Conference

At next week’s RSA Conference, protecting critical infrastructure systems under increasing attack will be a major theme. Another theme will be the need for more sharing of “intelligence” about emerging threats – between the public and private sectors, within the security industry, and within certain industries.

While many of the biggest breaches of the past two years involved retailers, the healthcare industry has figured heavily in recent months. Former FBI futurist Marc Goodman said that both spies and organized criminals are likely at work, the former seeking leverage to use in recruiting informants and the latter looking to cash in on medical and insurance fraud.

Verizon’s researchers said that to be most effective, information-sharing would have to be essentially in real time, from machine to machine, and cross multiple sectors, a daunting proposition.

Insurance

Another section of the Verizon report could help security executives make the case for bigger budgets. The researchers produced the first analysis of the actual costs of breaches derived from insurance claims, instead of survey data.

Verizon said the best indicator of the cost of an incident is the number of records compromised, and that the cost rises logarithmically, flattening as the size of the breach rises.

According to the new Verizon model, the loss of 100,000 records should cost roughly $475,000 on average, while 100 million lost records should cost about $8.85 million.

Though the harder data will be welcome to number-crunchers, spending more money cannot guarantee complete protection against attacks.

The RSA Conference floor will feature vendors touting next-generation security products and anomaly-spotting big-data analytics. But few will actually promise that they can stop someone from clicking on a tainted email and letting a hacker in.


High-Deductible Health Plans Cut Costs, At Least For Now

Originally posted on March 26, 2015 on www.npr.org.

Got a high-deductible health plan? The kind that doesn't pay most medical bills until they exceed several thousand dollars? You're a foot soldier who's been drafted in the war against high health costs.

Companies that switch workers into high-deductible plans can reap enormous savings, consultants will tell you — and not just by making employees pay more. Total costs paid by everybody — employer, employee and insurance company — tend to fall in the first year or rise more slowly when consumers have more at stake at the health-care checkout counter whether or not they're making medically wise choices.

Consumers with high deductibles sometimes skip procedures, think harder about getting treatment and shop for lower prices when they do seek care.

What nobody knows is whether such plans, also sold to individuals and families through the health law's online exchanges, will backfire. If people choose not to have important preventive care and end up needing an expensive hospital stay years later as a result, everybody is worse off.

A new study delivers cautiously optimistic results for employers and policymakers, if not for consumers paying a higher share of their own health care costs.

Researchers led by Amelia Haviland at Carnegie Mellon University found that overall savings at companies introducing high-deductible plans lasted for up to three years afterwards. If there were any cost-related time bombs caused by forgone care, at least they didn't blow up by then.

"Three years out there consistently seems to be a reduction in total health care spending" at employers offering high-deductible plans, Haviland said in an interview. Although the study says nothing about what might happen after that, "this was interesting to us that it persists for this amount of time."

The savings were substantial: 5 percent on average for employers offering high-deductible plans compared with results at companies that didn't offer them. And that was for the whole company, whether or not all workers took the high-deductible option.

The size of the study was impressive; it covered 13 million employees and dependents at 54 big companies. All savings were from reduced spending on pharmaceuticals and doctor visits and other outpatient care. There was no sign of what often happens when high-risk patients miss preventive care: spikes in emergency-room visits and hospital admissions.

The suits in human resources call this kind of coverage a "consumer-directed" health plan. It sounds less scary than the old name for coverage with huge deductibles: catastrophic health insurance.

But having consumers direct their own care also requires making sure they know enough to make smart choices. That means getting vaccines and skipping dubious procedures like an expensive MRI scan at the first sign of back pain.

Not all employers are doing a terrific job. Most high-deductible plan members surveyed in a recent California study had no idea that preventive screenings, office visits and other important care required little or no out-of-pocket payment. One in five said they had avoided preventive care because of the cost.

"This evidence of persistent reductions in spending places even greater importance on developing evidence on how they are achieved," Kate Bundorf, a Stanford health economist not involved in the study, said of consumer-directed plans.

"Are consumers foregoing preventive care?" Bundorf asks. "Are they less adherent to [effective] medicine? Or are they reducing their use of low-value office visits and corresponding drugs or substituting to cheaper yet similarly effective prescribed drugs?"

Employers and consultants are trying to educate people about avoiding needless procedures and finding quality caregivers at better prices.

That might explain why the companies offering high-deductible plans saw such significant savings even though not all workers signed up, Haviland said. Even employees with traditional, lower-deductible plans may be using the shopping tools.

The study doesn't close the book on consumer-directed plans.

"What happens five years or 10 years down the line when people develop more consequences of reducing high-value, necessary care?" Haviland asked. Nobody knows.

And the study doesn't address a side effect of high-deductibles that doctors can't treat: pocketbook trauma. Consumer-directed plans, often paired with tax-favored health savings accounts, can require families to pay $5,000 or more per year in out-of-pocket costs.

Three people out of 5 with low incomes and half of those with moderate incomes told the Commonwealth Fund last year their deductibles are hard to afford.

As in all battles, the front-line infantry often makes the biggest sacrifice.