A majority of Americans have health insurance from the private health insurance (PHI) market. Health plans sold in the PHI market must comply with requirements at both the state and federal levels. This report describes selected federal statutory requirements applicable to health plans sold in the PHI market. These requirements relate to the offer, issuance, generosity, and pricing of health plans, among other issues; such requirements often are referred to as market reforms . Many of the federal requirements described in this report were established under the Patient Protection and Affordable Care Act (ACA; P.L. 111-148 , as amended); however, some were established under federal laws enacted prior to the ACA. The first part of this report provides background information about health plans sold in the PHI market and briefly describes state and federal regulation of private plans. The second part summarizes selected federal requirements and indicates each requirement's applicability to one or more of the following types of private health plans: individual, small group, large group, and self-insured. The second part of the report includes a table summarizing the applicability of federal statutory requirements across those plan types. The Appendix includes Table A-1 , which shows the applicability of federal statutory requirements across plan types pre-ACA and under current law. Whether a health plan must comply with a particular federal requirement depends on the segment of the PHI market in which the plan is sold. The individual market (or non-group market ) is where individuals and families buying insurance on their own (i.e., not through a plan sponsor) may purchase health plans. Health plans sold in the group marke t are offered through a plan sponsor, typically an employer. The group market is divided into small and large segments. For purposes of federal requirements that apply to the group market, states may elect to define small as groups with 50 or fewer individuals (e.g., employees) or groups with 100 or fewer individuals. The definition for large group builds on the small-group definition. A large group is a group with at least 51 individuals or a group with at least 101 individuals, depending on which small-group definition is used in a given state. The reference to group markets technically applies to health plans purchased by employers and other plan sponsors from state-licensed issuers and offered to employees or other groups. Health plans obtained in this way are referred to as fully insured . However, health insurance coverage provided through a group also may be self-insured . Employers or other plan sponsors that self-insure set aside funds to pay for health benefits directly, and they bear the risk of covering medical expenses generated by the individuals covered under the self-insured plan. For simplicity's sake, the term plan is used generically in this report's descriptions of federal requirements; however, Table 1 provides detailed information about the application of federal requirements to different types of plans (e.g., individual market plans). States are the primary regulators of the business of health insurance, as codified by the 1945 McCarran-Ferguson Act. Each state requires insurance issuers to be licensed in order to sell health plans in the state, and each state has a unique set of requirements that apply to state-licensed issuers and the plans they offer. Each state's health insurance requirements are broad in scope and address a variety of issues, and requirements vary greatly from state to state. State requirements have changed over time in response to shifting attitudes about regulation, the evolving health care landscape, and the implementation of federal policies. State oversight of health plans applies only to plans offered by state-licensed issuers. Because self-insured plans are financed directly by the plan sponsor, such plans are not subject to state law. The federal government also regulates state-licensed issuers and the plans they offer. Federal health insurance requirements typically follow the model of federalism: federal law establishes standards, and states are primarily responsible for monitoring compliance with and enforcement of those standards. Generally, the federal standards establish a minimum level of requirements ( federal floor ) and states may impose additional requirements on issuers and the plans they offer, provided the state requirements neither conflict with federal law nor prevent the implementation of federal requirements. For example, the federal rating restriction requirement provides that certain types of health plans may vary premiums by only four factors—type of coverage (i.e., self-only or family), geographic rating area, tobacco use, and age. Some states have expanded this requirement by prohibiting issuers from varying premiums by tobacco use and age. The federal government also regulates self-insured plans, as part of federal oversight of employment-based benefits. Federal requirements applicable to self-insured plans often are established in tandem with requirements on fully insured plans and state-licensed issuers. Nonetheless, fewer federal requirements overall apply to self-insured plans compared to fully insured plans. Federal requirements for health plans are codified in three statutes: the Public Health Service Act (PHSA), the Employee Retirement Income Security Act of 1974 (ERISA), and the Internal Revenue Code (IRC). Although the health insurance provisions in these statutes are substantively similar, the differences reflect, in part, the applicability of each statute to private plans. The PHSA's provisions apply broadly across private plans, whereas ERISA and the IRC focus primarily on group plans. Some types of plans are exempt from one or more federal requirements (as opposed to the requirement not being applicable to the plan). For example, in general, plans in the individual market must comply with the requirement to accept every applicant for health coverage (i.e., guaranteed issue); however, grandfathered health plans offered in the individual market are exempt from complying with this requirement. Plans that are exempt from one or more federal requirements are not discussed in this report. Federal requirements applicable to health plans sold in the PHI market affect insurance offered to groups and individuals; impose requirements on sponsors of coverage; and, collectively, establish a federal floor with respect to access to coverage, premiums, benefits, cost sharing, and consumer protections. The federal requirements described in this report are grouped under the following categories: obtaining coverage, keeping coverage, developing health insurance premiums, covered services, cost-sharing limits, consumer assistance and other patient protections, and plan requirements related to health care providers. Federal requirements do not apply uniformly to all types of health plans. For example, plans offered in the individual and small-group markets must comply with the federal requirement to cover the essential health benefits (EHB; see " Coverage of Essential Health Benefits ," below); however, plans offered in the large-group market and self-insured plans do not have to comply with this requirement. Table 1 provides details about the specific types of plans to which the federal requirements described in this report apply: individual, small group, large group, and self-insured. Summary descriptions of the federal requirements follow the table. Many of the federal requirements described in this report were established under the ACA, but some were established prior to the ACA. Among the requirements established prior to the ACA, some were modified or expanded under the ACA. Certain types of health plans must be offered on a guaranteed-issue basis. In general, guaranteed issue is the requirement that a plan accept every applicant for coverage, as long as the applicant agrees to the terms and conditions of the insurance offer (e.g., the premium). Individual plans are allowed to restrict enrollment to open and special enrollment periods. Plans offered in the group market must be available for purchase at any time during a year. Plans that otherwise would be required to offer coverage on a guaranteed-issue basis are allowed to deny coverage to individuals and employers in certain circumstances, such as when a plan demonstrates that it does not have the network capacity to deliver services to additional enrollees or the financial capacity to offer additional coverage. Plans are prohibited from basing applicant eligibility on health status-related factors. Such factors include health status, medical condition (including both physical and mental illness), claims experience, receipt of health care, medical history, genetic information, evidence of insurability (including conditions arising out of acts of domestic violence), disability, and any other health status-related factor determined appropriate by the Secretary of Health and Human Services (HHS). If a plan offers dependent coverage, the plan must make such coverage available to a child under the age of 26. Plans that offer dependent coverage must make coverage available for both married and unmarried adult children under the age of 26, but plans do not have to make coverage available to the adult child's children or spouse (although a plan may voluntarily choose to cover these individuals). The sponsors of health plans (e.g., employers) are prohibited from establishing eligibility criteria based on any full-time employee's total hourly or annual salary. Eligibility rules are not permitted to discriminate in favor of higher-wage employees. Additionally, sponsors are prohibited from providing benefits under a plan that discriminates in favor of higher-wage employees (i.e., a sponsor must provide all the benefits it provides to higher-wage employees to all other full-time employees). Self-insured plans currently are required to comply with these requirements; however, fully insured plans are not. The requirement for fully insured plans was established under the ACA, and the Departments of HHS, Labor, and the Treasury have determined that fully insured plans do not have to comply with this requirement until after regulations are issued. As of the date of this report, regulations have not been issued. Plans are prohibited from establishing waiting periods longer than 90 days. A waiting period refers to the time that must pass before coverage can become effective for an individual who is eligible to enroll under the terms of the plan. In general, if an individual can elect coverage that becomes effective within 90 days, the plan complies with this provision. Guaranteed renewability is a requirement to renew an individual's plan at the option of the policyholder or to renew a group plan at the option of the plan sponsor. Plans that must comply with guaranteed renewability may discontinue the plan only under certain circumstances. For example, a plan may discontinue coverage if the individual or plan sponsor fails to pay premiums or if an individual or plan sponsor performs an act that constitutes fraud in connection with the coverage. The practice of rescission refers to the retroactive cancellation of medical coverage after an enrollee has become sick or injured. In general, rescissions are prohibited, but they are permitted in cases where the covered individual committed fraud or made an intentional misrepresentation of material fact as prohibited by the terms of the plan. A cancellation of coverage in this case requires that a plan provide at least 30 calendar days' advance notice to the enrollee. Plan sponsors that have at least 20 employees are required to continue to offer coverage under certain circumstances ( qualifying event s ) to certain employees and their dependents ( qualified beneficiaries ) who otherwise would be ineligible for such coverage. Generally, plan sponsors must provide access to continuation coverage to qualified beneficiaries for up to 18 months (or longer, under certain circumstances) following a qualifying event. Beneficiaries may be charged up to 102% of the premium for such coverage. Plans are prohibited from varying premiums for similarly situated individuals based on the health status-related factors of the individuals or their dependents. Such factors include health status, medical condition (including both physical and mental illnesses), claims experience, receipt of health care, medical history, genetic information, evidence of insurability (including conditions arising out of domestic violence), and disability. However, plans may offer premium discounts or rewards based on enrollee participation in wellness programs. Plans must use adjusted (or modified) community rating rules to determine premiums. Adjusted community rating prohibits the use of health factors in the determination of premiums but allows premium variation based on other factors. The four factors by which premiums may vary are described below. Type of E nrollment. Plans may vary premiums based on whether only the individual or the individual and any number of his/her dependents enroll in the plan (i.e., self-only enrollment or family enrollment). Geographic R ating A rea. States are allowed to establish one or more geographic rating areas within the state for the purposes of this provision. The rating areas must be based on one of the following geographic boundaries: (1) counties, (2) three-digit zip codes, or (3) metropolitan statistical areas (MSAs) and non-MSAs. Tobacco U se. Plans are allowed to charge a tobacco user up to 1.5 times the premium that they charge an individual who does not use tobacco. Age. Plans may not charge an older individual more than three times the premium that they charge a 21-year-old individual. Each state must use a uniform age rating curve to specify the rates across age bands. For plan years beginning on or after January 1, 2018, plans must use one age band for individuals aged 0-14 years, one-year age bands for individuals aged 15-63 years, and one age band for individuals aged 64 years and older. Under the rate review program, proposed annual health insurance rate increases that meet or exceed a federal default threshold are reviewed by a state or the Centers for Medicare & Medicaid Services (CMS). The federal default threshold for plan years beginning in 2019 is 15%. States have the option to apply for state-specific thresholds. Plans subject to review are required to submit to CMS and the relevant state a justification for the proposed rate increase prior to its implementation, and CMS and the state must publicly disclose the information. The rate review process does not establish federal authority to deny implementation of a proposed rate increase; it is a sunshine provision designed to publicly expose rate increases determined to be unreasonable. A risk pool is used to develop rates for coverage. A health insurance issuer must consider all enrollees in plans offered by the issuer to be members of a single risk pool. Specifically, an issuer must consider all enrollees in individual plans offered by the issuer to be members of a single risk pool; the issuer must have a separate risk pool for all enrollees in small-group plans offered by the issuer. (However, states have the option to merge their individual and small-group markets; if a state does so, an issuer will have a single risk pool for all enrollees in its individual and small-group plans.) An issuer must consider the medical claims experience of enrollees in all plans offered by the issuer in a single risk pool when developing rates for the plans. Plans are prohibited from restricting the length of a hospital stay for childbirth for either the mother or newborn child to less than 48 hours for vaginal deliveries and to less than 96 hours for caesarian deliveries. Plans that provide coverage for mental health and substance use disorder services must offer coverage for those services at parity with medical and surgical services, specifically in the following four areas: annual and lifetime limits, treatment limitations, financial requirements, and in- and out-of-network covered benefits. Plans that provide coverage for mastectomies also must cover prosthetic devices and reconstructive surgery. Health insurance issuers are prohibited from (1) using genetic information to deny coverage, adjust premiums, or impose a preexisting-condition exclusion; (2) requiring or requesting genetic testing; and (3) collecting or acquiring genetic information for insurance underwriting purposes. Plans are prohibited from terminating the health coverage of an applicable student who takes a medical leave of absence from a postsecondary educational institution or other change in enrollment that causes the student to lose access to health coverage. The leave of absence must be medically necessary and must begin while the student is suffering from a serious illness or injury. These requirements are colloquially referred to as Michelle's Law . Plans must cover the essential health benefits (EHB). The benefits that comprise the EHB are not defined in federal law; rather, the law lists 10 broad categories from which benefits and services must be included. The HHS Secretary is tasked with further defining the EHB. To date, the HHS Secretary has directed each state to select an EHB benchmark plan to serve as the basis for the state's EHB. The EHB requirement does not prohibit states from maintaining or establishing state-mandated benefits. State-mandated benefits enacted on or before December 31, 2011, are considered part of the EHB. However, any state that requires plans to cover benefits beyond the EHB and what was mandated by state law prior to 2012 must assume the total cost of providing those additional benefits. In other words, states must defray the cost of any mandated benefits enacted after December 31, 2011. Plans generally are required to provide coverage for certain preventive health services without imposing cost sharing. The preventive services include the following minimum requirements: evidence-based items or services that have in effect a rating of "A" or "B" from the United States Preventive Services Task Force (USPSTF); immunizations that have in effect a recommendation for routine use from the Advisory Committee on Immunization Practices of the Centers for Disease Control and Prevention; evidence-informed preventive care and screenings (for infants, children, and adolescents) provided for in the comprehensive guidelines supported by the Health Resources and Services Administration (HRSA); and additional preventive care and screenings for women not described by the USPSTF, as provided in comprehensive guidelines supported by HRSA. Additional services other than those recommended by the USPSTF may be offered but are not required to be covered without imposing cost sharing. A plan with a network of providers is not required to provide coverage for an otherwise required preventive service if the service is delivered by an out-of-network provider, and the plan may impose cost-sharing requirements for a recommended preventive service delivered out of network. Additionally, if a recommended preventive service does not specify the frequency, method, treatment, or setting for the service, then the plan can determine coverage limitations by relying on established techniques and relevant evidence. Plans are prohibited from excluding coverage for preexisting health conditions. In other words, plans may not exclude benefits based on health conditions for any individual. A preexisting health condition is a medical condition that was present before the date of enrollment for health coverage, whether or not any medical advice, diagnosis, care, or treatment was recommended or received before such date. Plans are allowed to establish premium discounts or rebates or to modify cost-sharing requirements in return for adherence to a wellness program. If a wellness program is made available to all similarly situated individuals , and it either does not provide a reward or provides a reward based solely on participation, then the program complies with federal law without having to satisfy any additional standards. If a program provides a reward based on an individual meeting a certain standard relating to a health factor, then the program must meet additional requirements specified in federal regulations and the reward must be capped at 30% of the cost of employee-only coverage under the plan. However, the Secretaries of HHS, Labor, and the Treasury have the discretion to increase the reward up to 50% of the cost of coverage if the increase is determined to be appropriate. Plans must comply with annual limits on out-of-pocket spending. The limits apply only to in-network coverage of the EHB. In 2018, the limits cannot exceed $7,350 for self-only coverage and $14,700 for coverage other than self-only. In 2019, those limits will be $7,900 and $15,800, respectively. The self-only limit applies to each individual, regardless of whether the individual is enrolled in self-only coverage or coverage other than self-only. For instance, if an individual is enrolled in a family plan and incurs $8,000 in cost sharing, the plan is responsible for covering the individual's costs above $7,350 in 2018. Plans must tailor cost sharing to comply with one of four levels of actuarial value. Actuarial value (AV) is a summary measure of a plan's generosity, expressed as the percentage of total medical expenses that are estimated to be paid by the issuer for a standard population and set of allowed charges. In other words, AV reflects the relative share of cost sharing that may be imposed. On average, the lower the AV, the greater the cost sharing for enrollees overall. Federal law requires each level of plan generosity to be designated according to a precious metal and to correspond to an AV. Regulations allow plans to fall within a specified AV range and still comply with each of the four levels. See Table 2 for details. Plans are prohibited from setting lifetime and annual limits on the EHB. Lifetime and annual limits are dollar limits on how much the plan spends for covered health benefits either during the entire period an individual is enrolled in the plan (lifetime limits) or during a plan year (annual limits). Plans are permitted to place lifetime and annual limits on covered benefits that are not considered EHBs, to the extent that such limits are otherwise permitted by federal and state law. Plans are required to provide a summary of benefits and coverage (SBC) to individuals at the time of application, prior to the time of enrollment or reenrollment, and when the insurance policy is issued. The SBC must meet certain requirements with respect to the included content and the presentation of the content. The SBC may be provided in paper or electronic form. Enrollees must be given notice of any material changes in benefits no later than 60 days prior to the date that the modifications would become effective. Plans also must provide a uniform glossary of terms commonly used in health insurance coverage (e.g., coinsurance) to enrollees upon request. Plans are required to submit a report to the HHS Secretary concerning the percentage of premium revenue spent on medical claims ( medical loss ratio , or MLR). The MLR calculation includes adjustments for quality improvement expenditures, taxes, regulatory fees, and other factors. Plans in the individual and small-group markets must meet a minimum MLR of 80%; for large groups, the minimum MLR is 85%. States are permitted to increase the percentages, and the HHS Secretary may lower a state percentage for the individual market if HHS determines that the application of a minimum MLR of 80% would destabilize the individual market within the state. Plans whose MLR falls below the specified limit must provide rebates to policyholders on a pro rata basis. Any required rebates must be paid to policyholders by August of that year. Plans must implement an effective appeals process for coverage determinations and claims. At a minimum, plans must have an internal claims appeals process; provide notice to enrollees regarding available internal and external appeals processes and the availability of any applicable assistance; and allow an enrollee to review his or her file, present evidence and testimony, and receive continued coverage pending the outcome. Plans are subject to three requirements relating to the choice of health care professionals. First, plans that require or allow an enrollee to designate a participating primary care provider are required to permit the designation of any participating primary care provider who is available to accept the individual. Second, the same provision applies to pediatric care for any child who is a plan participant. Third, plans that provide coverage for obstetrical or gynecological care cannot require authorization or referral by the plan or any person (including a primary care provider) for a female enrollee who seeks obstetrical or gynecological care from an in-network health care professional who specializes in obstetrics or gynecology. Plans also must comply with one requirement relating to benefits for emergency services. If a plan covers services in an emergency department of a hospital, the plan is required to cover those services without the need for any prior authorization and without the imposition of coverage limitations, irrespective of the provider's contractual status with the plan. If the emergency services are provided out of network, the cost-sharing requirement will be the same as the cost sharing for an in-network provider. Plans are subject to nondiscrimination and other provisions with respect to qualified individuals ' access to and costs associated with clinical trials. Specifically, plans cannot prohibit qualified individuals from participating in an approved clinical trial; deny, limit, or place conditions on the coverage of routine patient costs associated with participation in an approved clinical trial; or discriminate against qualified individuals on the basis of their participation in approved clinical trials. Plans are not allowed to discriminate, with respect to participation under the plan, against any health care provider who is acting within the scope of that provider's license or certification under applicable state law. Federal law does not require that a plan contract with any health care provider willing to abide by the plan's terms and conditions, and it also does not prevent a plan or the HHS Secretary from establishing varying reimbursement rates for providers based on quality or performance measures. The HHS Secretary was required to develop quality reporting requirements for use by specified plans, concluding no later than two years after enactment of the ACA. The Secretary was to develop these requirements in consultation with experts in health care quality and other stakeholders. The Secretary also was required to publish regulations governing acceptable provider reimbursement structures not later than two years after ACA enactment. Not later than 180 days after these regulations were promulgated, the U.S. Government Accountability Office (GAO) was required to conduct a study regarding the impact of these activities on the quality and cost of health care. To date, the Secretary has not published the required regulations; therefore, the required GAO report has not been published. However, the Department of Labor (DOL), Employee Benefits Security Administration, published a proposed rule on July 21, 2016, that would make modifications to current annual reporting requirements for pension and other employee benefit plans under ERISA Titles I and IV. Under these requirements, plans would report on the financial condition and operations of the plan, among other things, using standardized forms (Form 5500 Annual Return/Report or the Form 5500-SF). This rule proposes that a group health plan in compliance with these reporting requirements would satisfy the quality reporting requirements in PHSA Section 717, as incorporated in ERISA. Once the reporting requirements are implemented, plans will submit annually, to the HHS Secretary (and to DOL and the Department of the Treasury) and to enrollees, a report addressing whether plan benefits and reimbursement structures do the following: improve health outcomes through the use of quality reporting, case management, care coordination, and chronic disease management; implement activities to prevent hospital readmissions, improve patient safety, and reduce medical errors; and implement wellness and health promotion activities. The HHS Secretary is required to make these reports available to the public and is permitted to impose penalties for noncompliance. Wellness and health promotion activities include personalized wellness and prevention services, specifically efforts related to smoking cessation, weight management, stress management, physical fitness, nutrition, heart disease prevention, healthy lifestyle support, and diabetes prevention. These services may be made available by entities (e.g., health care providers) that conduct health risk assessments or provide ongoing face-to-face, telephonic, or web-based intervention efforts for program participants.

Summary: A majority of Americans have health insurance from the private health insurance (PHI) market. Health plans sold in the PHI market must comply with requirements at both the state and federal levels; such requirements often are referred to as market reforms. The first part of this report provides background information about health plans sold in the PHI market and briefly describes state and federal regulation of private plans. The second part summarizes selected federal requirements and indicates each requirement's applicability to one or more of the following types of private health plans: individual, small group, large group, and self-insured. The selected market reforms are grouped under the following categories: obtaining coverage, keeping coverage, developing health insurance premiums, covered services, cost-sharing limits, consumer assistance and other patient protections, and plan requirements related to health care providers. Many of the federal requirements described in this report were established under the Patient Protection and Affordable Care Act (ACA; P.L. 111-148, as amended); however, some were established under federal laws enacted prior to the ACA.