Most HR teams treat dependent eligibility as an enrollment-day problem. The DOL, the IRS, and your stop-loss carrier treat it as a year-round fiduciary problem.
Here are the five most common breakdowns I’ve seen surface in published audits, ERISA litigation, and stop-loss denials — and the cleanup work each one requires.
1. Self-attestation is your only verification
Employees check a box that says “this is my spouse” or “this is my child” — and that’s it. No marriage certificate, no birth certificate, no tax-dependent confirmation.
Public-sector audits in Chicago Public Schools (2007), the State of Georgia DCH, and audits referenced in GAO reports on FEHB have repeatedly found ineligible-dependent rates of 5–12% when self-attestation is the only control. At a $6,500 PEPY contribution and a self-insured plan paying real claims, that’s a six-figure leak before you count the catastrophic-claim risk.
Fix: Require documentation at enrollment for every dependent. Spouse = marriage certificate plus a recent joint tax return or joint household document. Child = birth certificate, court order, or adoption decree. Stepchild and domestic partner = additional residency or financial-support proof.
2. No process to remove ex-spouses
Divorce is the single biggest source of ineligible coverage on group plans, because the qualifying event lives entirely with the employee — and they’re not motivated to report it.
Under ERISA §404, paying claims for someone who is no longer an eligible dependent is a misuse of plan assets. Stop-loss carriers know this, and increasingly cite “lack of eligibility verification” as grounds to deny a large claim that would have otherwise hit the specific deductible.
Fix: Add divorce-specific disclosure language to your annual open-enrollment certification. Run a HRIS query against marital-status changes and cross-check against benefit elections. Build a 60-day COBRA notification trigger that fires automatically when the employee reports the event, not when payroll catches it three quarters later.
3. Confusing age 26 with your plan’s actual definition
The ACA requires coverage to age 26. It does not require coverage past age 26 — and it does not address state-law extensions, IRS tax-dependent rules, or your plan document’s specific definition.
Florida §627.6562 extends coverage to age 30 if the dependent meets four specific tests (unmarried, no children, FL resident or full-time student, financially dependent). Most HRIS systems don’t track those tests after the initial election, which leaves plans paying claims for adults who failed at least one test mid-year — and creates IRS imputed-income exposure for the employee.
Fix: If your plan covers adult children past 26 under any state law or grandfathered benefit, build an annual recertification cycle that re-tests every adult dependent against every applicable rule.
4. No annual attestation cadence
If the only time you ask “is this person still your dependent?” is during open enrollment (and even then, it’s buried in a checkbox), you have no defensible documentation when a claim hits or when the DOL asks how you exercise fiduciary oversight.
Stop-loss carriers are increasingly conditioning renewal — and large-claim payment — on the existence of an annual eligibility audit. “We trusted the employee” is not a fiduciary defense.
Fix: Build a separate, mid-year attestation. One page, one click, signed and dated. Keep the records for the full ERISA retention period (six years from the date of the filing).
5. §125 election changes without qualifying-event documentation
This one rarely makes the DOL audit list, but it shows up the moment the IRS examines your cafeteria plan. Every mid-year change requires both (a) a qualifying event under Treas. Reg. §1.125-4 and (b) consistency between the change and the event.
If you don’t have the documentation in the file — birth certificate, marriage certificate, prior carrier’s COBRA letter — the IRS position is that the entire cafeteria plan can be disqualified, retroactively converting every employee’s pre-tax election into taxable wages.
Fix: Standardize a single mid-year change form. Require the supporting document before the change is keyed. Audit a sample every quarter.
The pattern
Every one of these failures has the same root cause: eligibility is treated as a one-time event instead of a continuous monitoring discipline. That worked when plans were fully insured and the carrier ate the risk. On a self-insured plan, it’s a fiduciary problem the employer owns.
That’s the gap TidyRoster was built to close. We monitor dependent eligibility continuously, flag the life events your HRIS misses, and produce the documentation your stop-loss carrier and the DOL want to see.
The TidyRoster Compliance Brief is a free weekly newsletter for HR and benefits leaders running self-insured health plans. Forward it to a colleague who should be on the list.