Regulatory Context for ACA
The Affordable Care Act (ACA) operates within a layered federal regulatory structure that distributes enforcement authority across three cabinet-level departments, establishes distinct compliance tracks for employers and insurers, and generates ongoing guidance through formal rulemaking and sub-regulatory notices. Understanding which agency controls which requirement — and how penalties are assessed — is foundational for any employer, insurer, or administrator working within the law. This page maps the primary regulatory instruments, compliance obligations, and exemption frameworks that define operational ACA compliance across the United States.
Enforcement and review paths
ACA enforcement does not flow through a single agency. The law assigns jurisdiction based on the type of regulated entity and the specific provision at issue, a structure often called the "three-legged stool" of federal oversight.
Internal Revenue Service (IRS) — The IRS enforces employer shared responsibility under Internal Revenue Code §4980H, administers premium tax credit eligibility under IRC §36B, and collects the employer mandate penalty known as the Employer Shared Responsibility Payment (ESRP). Enforcement is triggered primarily through the ACA information reporting system: employers file Forms 1094-C and 1095-C, the IRS cross-references those filings against individual tax returns claiming premium tax credits, and penalty assessments are issued via IRS Letter 226-J. Penalty amounts under §4980H(a) and §4980H(b) are indexed annually; for the 2024 tax year, the IRS set the §4980H(a) annualized penalty at $2,970 per full-time employee (beyond a 30-employee threshold) (IRS Rev. Proc. 2023-29).
Department of Labor (DOL) — The Employee Benefits Security Administration (EBSA), a division of the DOL, enforces ACA consumer protections as they apply to group health plans subject to ERISA. This includes rules on coverage of dependents to age 26, prohibition of lifetime and annual dollar limits, and mental health parity. The DOL's enforcement role covers plan disclosure requirements and the Summary of Benefits and Coverage (SBC) mandate under 29 C.F.R. Part 2590.
Department of Health and Human Services (HHS) — HHS, through the Centers for Medicare & Medicaid Services (CMS), regulates the individual and small group insurance markets, oversees state Marketplace operations, certifies Qualified Health Plans (QHPs), and administers the medical loss ratio (MLR) standards requiring insurers to spend at least 80% of premium revenue on medical care in the individual and small group markets, or 85% in the large group market (45 C.F.R. Part 158). The HHS role in ACA Marketplace regulation extends to approving state innovation waivers under ACA §1332.
Primary regulatory instruments
ACA implementation is governed by four categories of regulatory instrument:
-
Statutory text — The primary law is the Patient Protection and Affordable Care Act (Pub. L. 111-148), as amended by the Health Care and Education Reconciliation Act of 2010 (Pub. L. 111-152). Both are codified across multiple titles of the U.S. Code, principally 26 U.S.C. (tax provisions), 29 U.S.C. (ERISA provisions), and 42 U.S.C. (public health provisions).
-
Final regulations — Agencies publish binding rules in the Code of Federal Regulations (C.F.R.). Employer mandate regulations appear at 26 C.F.R. § 54.4980H-1 through § 54.4980H-6. Market reform rules for health plans appear at 45 C.F.R. Parts 147–156.
-
Notices and guidance — The IRS issues Notice documents and Revenue Procedures (e.g., IRS Notice 2015-87 on affordability safe harbors) that carry interpretive authority without undergoing full notice-and-comment rulemaking. These are binding in practice even when not codified.
-
State law overlay — States retain authority to impose requirements stricter than federal ACA minimums. As of 2024, 5 states (California, Massachusetts, New Jersey, Rhode Island, and Vermont) operate their own individual mandate, requiring state-level reporting in addition to federal obligations (State Health Facts, KFF).
Compliance obligations
Compliance obligations split cleanly between employers and insurers/plans, with different reporting cycles and penalty exposure for each.
For Applicable Large Employers (ALEs) — An ALE is any employer averaging 50 or more full-time equivalent employees in the prior calendar year (26 C.F.R. § 54.4980H-1(a)(4)). ALEs must:
- Offer minimum essential coverage (MEC) to at least 95% of full-time employees and their dependents to avoid §4980H(a) penalties.
- Ensure offered coverage meets the ACA affordability standard and minimum value requirements to avoid §4980H(b) penalties.
- File Forms 1094-C and 1095-C annually; electronic filing is mandatory for employers submitting 10 or more returns as of tax year 2023 (IRS T.D. 9972).
For insurers and self-funded plans — Market reform obligations include eliminating pre-existing condition exclusions (42 U.S.C. § 300gg-3), covering essential health benefits in the individual and small group markets, and meeting actuarial value requirements by metal tier. Self-funded employer plans are exempt from the essential health benefits mandate but remain subject to ERISA-based ACA market reform rules enforced by DOL and IRS.
The ACA compliance checklist for HR teams and the broader framework indexed at acaauthority.com address the operational steps behind these obligations in greater detail.
Exemptions and carve-outs
The ACA does not impose uniform obligations on every entity. Recognized exemptions include:
Grandfathered plans — Plans that were in existence on March 23, 2010, and have not made specified changes to cost-sharing or benefits retain grandfathered status under ACA §1251 (42 U.S.C. § 18011). Grandfathered plans are exempt from certain market reform requirements, including preventive care mandates and appeals process standards, but must still comply with lifetime limit prohibitions and dependent coverage to age 26.
Small employer exemption — Employers with fewer than 50 full-time equivalent employees face no §4980H employer mandate obligations and no §4980H penalty exposure. They remain subject to market reform rules if they offer group coverage.
Religious and hardship exemptions — Individuals may claim an exemption from the individual mandate (which carries no federal penalty after 2018 under the Tax Cuts and Jobs Act, Pub. L. 115-97) in states without their own mandate. Certain religious organizations and members of health care sharing ministries qualify for statutory exemptions under 26 U.S.C. § 5000A(d).
State innovation waivers (§1332) — States may apply to HHS and Treasury for waivers of specific ACA market requirements if they can demonstrate equivalent coverage and affordability outcomes. ACA waivers and state innovation programs detail the procedural and substantive standards these applications must meet. As of the date HHS last updated its §1332 guidance, 13 states had approved reinsurance waivers in effect.
Self-insured student health plans — Certain self-insured student health plans sponsored by institutions of higher education received extended transitional relief under HHS guidance, exempting them from specific Marketplace integration requirements while remaining subject to the core ACA plan requirements applicable to non-grandfathered group health plans.
References
- Patient Protection and Affordable Care Act, Pub. L. 111-148 (full text via Congress.gov)
- 26 C.F.R. § 54.4980H — Employer Shared Responsibility Regulations (eCFR)
- 45 C.F.R. Part 158 — Medical Loss Ratio (eCFR)
- 45 C.F.R. Parts 147–156 — Health Insurance Market Reforms (eCFR)
- IRS Rev. Proc. 2023-29 — ACA Penalty Inflation Adjustments
- [IRS
The law belongs to the people. Georgia v. Public.Resource.Org, 590 U.S. (2020)