Transparency in Coverage Final Rule: What Self-Funded Employers Need to Fix in Their TPA Contracts Before 2027

The Transparency in Coverage final rule landed on October 5, 2026, and most of the headlines focused on the good news. Smaller pricing files. Quarterly updates instead of monthly. Data that people can actually open and use.

All true. But if you sponsor a self-funded health plan, there’s a part of this rule that deserves a lot more of your attention than it’s getting.

Starting in March 2027, every major pricing file posted for your plan has to carry an attestation that the data is true, accurate, and complete. It also has to name a senior official who oversees that data. Your TPA may build the files. Your carrier may host them. The plan is still yours, though, and so is the compliance obligation.

Here’s the honest reality for most employers. You’ve never seen these files, you didn’t build them, and you probably couldn’t tell if they were wrong. That’s not a criticism. Nobody expects an HR director or CFO to audit a few hundred gigabytes of negotiated rates.

Which is exactly why your vendor contracts matter so much right now, before the Transparency in Coverage deadlines start piling up. Below, we’ll walk through what the Transparency in Coverage final rule changes, the dates you need on your calendar, and the specific contract questions to settle with your TPA before 2027 gets here.

What the Transparency in Coverage Final Rule Actually Changes

The original Transparency in Coverage rules came out in 2020, and the pricing files went live in July 2022. The idea was simple. Plans would publish their negotiated rates so employers, researchers, and patients could finally see what care costs.

In practice, the files turned into a mess. They were enormous, full of duplicate data, and hard to compare with what hospitals were posting. The Departments of Labor, Treasury, and Health and Human Services admitted as much in the new rule. According to the CMS fact sheet on the Transparency in Coverage final rule, regulators pointed to three big barriers: file size, missing context, and poor alignment with hospital price data.

So here’s what the Transparency in Coverage update fixes.

Smaller files with less junk in them

One reason the files got so big is that contracts often list a rate for every provider in a group, no matter their specialty. That’s how you end up with a podiatrist showing a negotiated rate for heart surgery. Under the Transparency in Coverage final rule, plans have to strip out those unlikely provider and service combinations, using the same internal rules they use to adjudicate claims.

Transparency in Coverage files will also be organized by provider network instead of by individual plan. Since lots of plans share the same network and rates, this should cut down on duplicate files in a big way.

Quarterly updates instead of monthly

The in-network rate files and out-of-network allowed amount files now update quarterly. The prescription drug file stays on a monthly schedule. CMS estimates the changes will save plans and issuers about $174.5 million a year once the second year of implementation kicks in.

More out-of-network data

The old 20-claim minimum meant many out-of-network files were nearly empty. The new threshold drops to 11 claims, and the data gets grouped by market type, including self-insured plans. You should see a lot more out-of-network pricing out there.

New context files and easier access

Plans now have to post a Taxonomy File and a Utilization File alongside their rate data, plus a plain text file in the website’s root folder that points to where the files live. That text file has to include a monitored email address for questions. There’s also a required homepage footer link labeled “Price Transparency” or “Transparency in Coverage.” And everything moves to one format, which regulators have said will be JSON.

For anyone who analyzes Transparency in Coverage data, these are welcome changes. For you as a plan sponsor, the bigger story sits a little further down in the rule.

Transparency in Coverage Final Rule Deadlines to Put on Your Calendar

The rule was published in the Federal Register on October 6, 2026, and it doesn’t all hit at once. Here’s how the phases line up for a calendar-year plan.

If your plan year doesn’t start in January, the Transparency in Coverage phone requirement follows your plan year. A July 1 plan would pick it up on July 1, 2027.

The column on the right is the one to pay attention to. Nearly every task on this list gets done by a vendor. Not one of them shifts the legal duty off your plan.

The Transparency in Coverage Attestation: Someone Has to Sign Off

This is the part of the Transparency in Coverage final rule that changes things for employers.

Starting March 6, 2027, each in-network rate file, out-of-network allowed amount file, Taxonomy File, and Utilization File has to include an attestation. It states that, to the best of the plan’s knowledge and belief, the file includes all required information and the data is true, accurate, and complete as of the file’s date.

The files also have to list the name of the plan’s CEO, president, or a senior official designated to oversee the data. That name requirement reaches the prescription drug file too.

Regulators were pretty clear about why they added this to Transparency in Coverage. When they asked for public input, many commenters pushed hard for stronger accountability on data accuracy. The Departments said the attestation is meant to build confidence in the disclosures and line them up with the hospital price transparency rules, which already use a similar sign-off.

Why this lands on your desk

Think about who’s actually named here. The rule talks about the plan’s CEO, president, or senior official. For a self-funded plan, the plan is yours.

Now think about what that person would be vouching for. Rates negotiated between a carrier and thousands of providers. Contract terms you likely can’t see. Claims logic that lives inside your TPA’s systems. The rule does say the person signing can consult with the staff who built the files. But most employers don’t have that staff. Your TPA does.

So picture your CFO being asked to sign a statement that a file the size of a small library is complete and accurate. That conversation probably won’t go well, and honestly, it shouldn’t. You can’t attest to something you have no way to check.

The good news: your TPA can attest

The rule includes special provisions for plans that hand this work to a service provider under a written agreement. In plain terms, a TPA or issuer can take on the file work and the attestation for your plan, if your contract spells that out.

That’s the whole ballgame. The protection you get depends almost entirely on what your agreement actually says. If it’s silent, you shouldn’t assume your vendor has picked this up.

You Can Delegate the Work, Not the Responsibility

This is where a lot of employers get caught off guard. Handing the files to your TPA doesn’t hand off your legal exposure under the Transparency in Coverage final rule.

The Departments said it plainly in the preamble to the rule. The duty to comply rests with the group health plan, even when the plan pays a service provider to do the work. They went a step further, too. If a self-insured plan sponsor worries its TPA can’t meet the new requirements, the Departments said the plan should deal with that in its contract with the TPA.

That’s basically regulators telling you where to look. Your contract is the tool.

Your Transparency in Coverage obligations also tie into your broader fiduciary duties under ERISA. Picking a vendor is a fiduciary decision, and so is keeping an eye on whether that vendor is doing the job. The Department of Labor’s fiduciary education resources walk through the basics: review your service providers’ performance, read the reports they send you, and check the fees you’re actually paying.

What the penalties can look like

Transparency in Coverage requirements sit in the same part of the tax code as other group health plan mandates. That means a failure can trigger the excise tax under Internal Revenue Code Section 4980D, which is generally $100 for each day of noncompliance for each individual the failure relates to.

Run the math on a mid-sized plan and it gets uncomfortable fast. If a problem were found to affect 1,000 covered members, that’s up to $100,000 a day in potential excise tax. There are caps, exceptions, and correction rules for failures that weren’t willful, so the real number would depend on the facts. Still, it’s not a figure any CFO wants to explain to the board.

The Departments also said they’ll make compliance and enforcement a priority as these rules roll out, and they plan to make enforcement actions more visible to the public. Regulators clearly heard the complaints that some Transparency in Coverage files haven’t been meaningfully updated in years.

Costs will probably show up in your admin fees

One more Transparency in Coverage detail worth flagging. The Departments openly expect service providers to pass the cost of these changes along through administrative fees. They think the increase will be modest because a lot of the systems already exist. Even so, you’ll want to know what you’re paying for, and whether that fee comes with real accountability attached.

The Phone Requirement Starts With Your 2027 Plan Year

The attestation gets most of the attention, but the phone piece of the Transparency in Coverage final rule is the one your employees will actually notice.

For plan years starting on or after January 1, 2027, members can call and get the same personalized cost-sharing estimates they’d find in the online tool or on paper. A few details matter here:

• It’s the number on the ID card. Plans have to use the customer assistance number already printed on member ID cards. No separate hotline.
• The answer has to be accurate when it’s given. Estimates must be correct as of the time of the call and provided during the call.
• There’s a cap, if the plan chooses to use it. Plans can limit phone estimates to no fewer than 20 providers per day, as long as they tell the caller about the limit.
• It does double duty. Meeting this requirement also satisfies the No Surprises Act price comparison rule for phone guidance, including for grandfathered plans that aren’t otherwise covered by the Transparency in Coverage rules.

Regulators decided not to add new call center standards like required hours or wait times. They left that to plans and their vendors. So it’s on you to make sure the service your members get is actually useful.

And think about how that call goes for an employee. They’re scheduling an MRI, they dial the number on their card, and they want a real price. If the rep can’t pull it up, or reads off something that turns out to be wrong, that frustration lands on HR, not on the TPA. It’s worth asking your vendor how they’re training staff and testing this before January.

7 Questions to Settle With Your TPA Before 2027

Most administrative services agreements were written years ago. At best, they say the TPA will “provide machine-readable files as required by law.” That one line won’t cover what the Transparency in Coverage final rule now asks for.

Here’s what we’d want answered about Transparency in Coverage, in writing, before March.

1. Who signs the attestation?

This is the big one. Ask your TPA or carrier to confirm that it will provide the attestation for your plan’s files, and that it’s also taking responsibility for producing and posting those files. Get it into the contract or an amendment. A friendly email doesn’t count.

If your vendor won’t attest, that tells you something important about how confident they are in their own data.

2. Who posts the files, the text file, and the footer link?

Most self-funded employers don’t host pricing files on their own websites. Confirm where the files will live, who maintains the new root-folder text file, and who monitors the email inbox for questions about the data. If any of this lands on your own website, your IT and HR teams need to know now.

3. How fast do errors get fixed?

Transparency in Coverage files will be wrong sometimes. That’s reality. What matters is how quickly your vendor catches and corrects problems, and whether they tell you when they do. Ask for a written correction process with clear timelines.

4. Who pays if something goes wrong?

Look for indemnification language that covers penalties, excise taxes, and costs that come from inaccurate or incomplete files your vendor produced. If the contract caps your vendor’s liability at a few months of admin fees, that cap may not mean much against a per-day, per-person excise tax.

It’s also smart to check with your fiduciary liability insurance carrier about whether and how this kind of exposure would be covered.

5. Is the phone line really ready?

Ask how customer service reps will pull personalized estimates, how they’re being trained, and what happens when the system can’t produce an answer. If your plan year starts January 1, you’re already short on time.

6. Can you get your own claims data?

The Departments used this rule to remind plans about the Consolidated Appropriations Act gag clause ban. Your service agreements can’t block you from accessing your plan’s de-identified claims and encounter data. Published Transparency in Coverage rates are one thing. Your claims tell you what your plan actually paid. If your contract makes that data hard to get, fix it now. And since the annual gag clause attestation is due every December 31, this is a good moment to look at both together.

7. What are you paying for this?

If your admin fee is going up to cover new Transparency in Coverage work, you should see what that money buys. Fair questions include what’s being added, what accountability comes with it, and whether the increase is a one-time charge or permanent.

None of these questions are hostile. A good partner should welcome them. If yours gets defensive, that’s useful information too.

What Transparency Still Won’t Tell You

The Transparency in Coverage final rule is a real step forward. Cleaner files and better context will help researchers, regulators, and the tools built on top of this data.

But be honest about its limits. A published rate shows what a carrier negotiated with a provider. It doesn’t show how your specific claims were priced, bundled, or adjusted before they hit your plan’s bank account. The Departments even said the files can’t reflect any one person’s actual cost-sharing.

So the most useful number for your plan is still the one sitting in your own claims data. That’s why the contract questions above matter so much. Access to your data, accountability for accuracy, and clear terms on who answers for mistakes are what turn transparency into something you can actually use.