HHS Role in ACA Marketplace Regulation
The Department of Health and Human Services (HHS) serves as the primary federal regulatory authority over the ACA health insurance Marketplaces, overseeing plan certification, consumer protections, and state compliance. Understanding HHS authority is essential for insurers, state regulators, navigators, and employers whose employees access Marketplace coverage. This page covers the scope of HHS jurisdiction, the mechanisms through which that authority operates, common regulatory scenarios, and the boundaries between HHS, IRS, and state responsibilities.
Definition and scope
HHS exercises regulatory authority over the ACA Marketplaces under Title I of the Affordable Care Act (Public Law 111-148), codified primarily at 42 U.S.C. §§ 18001–18122. The Centers for Medicare & Medicaid Services (CMS), an operating division of HHS, administers the federal Marketplace (HealthCare.gov) and performs oversight functions over State-Based Marketplaces (SBMs).
The scope of HHS authority extends across four primary domains:
- Qualified Health Plan (QHP) certification — HHS establishes the standards insurers must meet to sell coverage through the Marketplace, including network adequacy, essential health benefits, and actuarial value requirements.
- Consumer protection rules — HHS issues regulations governing non-discrimination, guaranteed issue, community rating, and the prohibition on annual and lifetime benefit limits (ACA §2711, 42 U.S.C. §300gg-11).
- State Marketplace approval and oversight — States seeking to operate their own Marketplace must receive HHS approval and demonstrate ongoing compliance with federal standards (45 C.F.R. Part 155).
- Premium stabilization programs — HHS administers the permanent Risk Adjustment program and operated the transitional Reinsurance and Risk Corridor programs under ACA §§1341–1343.
The full regulatory context for ACA implementation involves HHS, IRS, and DOL acting in coordinated but distinct jurisdictional lanes.
How it works
HHS regulation of the Marketplace operates through an annual rulemaking cycle. Each year, CMS publishes a Notice of Benefit and Payment Parameters (NBPP) that sets the specific rules governing QHP certification, cost-sharing limits, risk adjustment methodology, and network adequacy standards for the upcoming plan year. The NBPP is published in the Federal Register and subject to public comment under the Administrative Procedure Act.
The QHP certification process follows a structured sequence:
- Application submission — Insurers submit plan data through the Health Insurance Oversight System (HIOS), a CMS-operated platform.
- Data validation — CMS reviews actuarial value calculations, benefit design, and network submissions against standards published in the applicable NBPP.
- State regulatory review — Even in federally facilitated Marketplace (FFM) states, the state insurance commissioner retains rate review authority; HHS conducts supplemental review in states without effective rate review programs.
- QHP agreement execution — Certified issuers sign the QHP Issuer Agreement, binding them to federal marketing, quality reporting, and non-discrimination requirements.
- Ongoing compliance monitoring — CMS conducts oversight audits, reviews consumer complaints, and can decertify QHPs that fall out of compliance during a plan year.
The Risk Adjustment program, administered permanently under 45 C.F.R. Part 153, transfers funds from insurers with lower-risk enrollee populations to those with higher-risk populations within each state market. HHS calculates risk scores using the HHS-HCC (Hierarchical Condition Category) model and publishes methodology updates annually through the NBPP.
Common scenarios
Federally Facilitated Marketplace vs. State-Based Marketplace. In FFM states (those using HealthCare.gov), HHS exercises direct plan management authority. In the 18 states (plus the District of Columbia) operating State-Based Marketplaces as of the 2024 plan year (CMS SBM list), HHS retains a backstop role: SBMs must meet federal floor standards, and CMS can step in if a state fails to perform required functions.
Special Enrollment Period (SEP) verification. HHS establishes the qualifying life events that trigger SEPs and has authority to require documentation verification from applicants. CMS implemented pre-enrollment SEP verification requirements starting in 2017, and the applicable procedures are specified in 45 C.F.R. §155.420.
Essential Health Benefits benchmark disputes. Each state selects an EHB benchmark plan; HHS reviews the selection for compliance with ACA §1302 requirements. If a state benchmark lacks a required benefit category, CMS can substitute a federal default benchmark. An overview of what must be covered under benchmark rules appears in the ACA plan design: what must be covered reference.
Navigator and assister oversight. HHS sets federal training and certification standards for Navigators under 45 C.F.R. Part 155, Subpart F. Navigator programs receiving federal grants are accountable directly to CMS for compliance with conflict-of-interest and privacy standards.
Decision boundaries
HHS authority is not unlimited, and the lines between HHS, IRS, and DOL jurisdiction are operationally significant.
| Function | Primary Authority |
|---|---|
| Employer Shared Responsibility (penalty assessment) | IRS (26 U.S.C. §4980H) |
| ACA reporting (Forms 1094-C/1095-C) | IRS |
| ERISA plan fiduciary rules | DOL / EBSA |
| QHP certification and Marketplace operations | HHS / CMS |
| Medicaid/CHIP eligibility determinations | HHS / CMS (with states) |
| Rate review (supplemental) in FFM states | HHS / CMS |
| Consumer protection enforcement (grandfathered plans) | HHS and DOL jointly |
HHS does not assess the employer mandate penalties under IRC §4980H — that authority belongs to the IRS, as detailed in the ACA overview resource at the site index. Similarly, HHS does not govern ERISA plan design for self-insured employer plans except as to certain ACA consumer protection provisions that apply regardless of funding arrangement (e.g., lifetime limit prohibition, dependent coverage to age 26).
State authority operates concurrently with HHS in several areas. States can impose requirements stricter than federal ACA standards — such as broader network adequacy rules or additional EHB mandates — provided they do not conflict with federal law. States cannot, however, weaken the federal floor protections established under Title I.
References
- U.S. Department of Health & Human Services — ACA Implementation
- Centers for Medicare & Medicaid Services — Health Insurance Marketplace
- Electronic Code of Federal Regulations — 45 C.F.R. Part 155 (Exchange Establishment)
- Electronic Code of Federal Regulations — 45 C.F.R. Part 153 (Premium Stabilization Programs)
- Affordable Care Act, Public Law 111-148 (GPO Full Text)
- CMS — State-Based Marketplace Technical Assistance Resources
- 42 U.S.C. §300gg-11 — Prohibition on Annual and Lifetime Limits (Cornell LII)
The law belongs to the people. Georgia v. Public.Resource.Org, 590 U.S. (2020)