State Regulation of HDHP Plans

State insurance regulators shape how high-deductible health plans operate within their borders, layering requirements on top of the federal floor established by the IRS and the Affordable Care Act. This page explains the scope of state authority over HDHPs, the mechanisms through which that authority is exercised, and the practical boundaries that separate state power from federal preemption. Understanding this regulatory landscape is essential for employers, benefits administrators, and plan participants navigating multi-state coverage.

Definition and scope

State regulation of HDHPs refers to the body of insurance laws, mandated benefit requirements, market conduct rules, and rate review processes that individual states apply to health insurance products sold within their jurisdiction. The authority derives from the McCarran-Ferguson Act of 1945, which preserved the primacy of state insurance regulation, subject to federal law where Congress has expressly preempted state action.

The scope of state authority depends critically on whether a plan is fully insured or self-funded:

Fully insured plans — purchased by employers from a licensed insurance carrier — are subject to state insurance mandates, premium rate review, and network adequacy standards.
Self-funded plans — where an employer directly assumes the financial risk of claims — are governed primarily by the Employee Retirement Income Security Act (ERISA) and are largely preempted from state insurance regulation. The ERISA and HDHP plans page examines that federal preemption framework in detail.

For fully insured HDHPs, state departments of insurance can require benefits that go beyond the federal minimum. A state mandate requiring coverage of specific services before the deductible is met — such as certain chronic disease medications — can affect whether a plan qualifies as an IRS-compliant HDHP, because the IRS definition of an HDHP requires that no benefits be paid before the statutory minimum deductible is reached, with the exception of preventive care and a limited set of federally recognized carve-outs.

How it works

State regulation of HDHPs operates through four primary mechanisms:

Mandated benefit laws — Legislatures in all 50 states have enacted statutes requiring insurers to cover specified services. The National Conference of State Legislatures (NCSL) tracks these mandates; as of its most recent published count, states collectively have enacted more than 2,000 such mandates across all plan types (NCSL Health Insurance Mandates). When a mandate requires first-dollar coverage of a non-preventive service, it can create a conflict with IRS HDHP rules for fully insured products.
Rate review and filing requirements — States require insurers to file HDHP premium rates with the department of insurance before marketing those plans. Under the ACA, states with "effective" rate review programs review rate increases of 10 percent or more for individual and small-group markets (CMS Rate Review Program). Large-group market rate review thresholds vary by state.
Network adequacy standards — State regulators set minimum standards for the size and geographic distribution of provider networks, affecting which HDHP products can be sold in a given market. These standards are increasingly enforced through quantitative access metrics, such as maximum travel time or distance to primary care providers.
Market conduct oversight — State insurance commissioners examine how carriers handle claims, disclosures, and appeals. An insured participant's right to appeal an HDHP claim denial is enforced partly through state external review requirements, which the ACA extended to all states as a baseline.

Common scenarios

Scenario 1: A state mandates pre-deductible coverage for diabetes supplies. If a state law requires an insurer to cover insulin and glucose monitors before the deductible is satisfied, a fully insured HDHP in that state cannot simultaneously comply with the state mandate and qualify as an HDHP under IRS rules — unless the mandate aligns with the IRS safe-harbor list for preventive care or Congress or the IRS issues a specific accommodation. Employers offering that plan in the state must weigh whether HSA eligibility for employees is forfeited.

Scenario 2: A multistate employer with a fully insured HDHP. A company operating in 15 states that purchases a fully insured group HDHP must confirm that the plan satisfies each state's mandates in the states where employees reside. This often results in state-specific policy endorsements that alter the benefit structure by state, potentially producing inconsistent HSA eligibility across the workforce.

Scenario 3: An employer switches to a self-funded HDHP. By moving to a self-funded arrangement, the employer's plan becomes subject to ERISA preemption and is shielded from most state benefit mandates. The plan must still comply with federal requirements under the ACA and IRS rules. The comprehensive overview at hdhpauthority.com covers the federal compliance layer that applies uniformly in this structure.

Decision boundaries

Three boundaries define where state authority ends and federal rules take over:

ERISA preemption wall — Self-funded plans are not "insurance" for purposes of state regulation. States cannot impose mandated benefits on self-funded HDHP arrangements, though states retain authority over stop-loss insurance carriers that self-funded employers may purchase.
ACA federal floor — States may exceed ACA minimums (such as the essential health benefits framework for small-group markets) but cannot fall below them. Preventive care coverage without cost-sharing — a rule that directly affects HDHP structure — is a federal ACA requirement, not a discretionary state option for qualifying plans (HHS ACA Preventive Services).
IRS threshold compliance — The IRS annually sets the minimum deductible and out-of-pocket maximum for HDHP status (see annual IRS HDHP and HSA threshold updates). State mandates that compel pre-deductible coverage of non-preventive services push a fully insured plan outside IRS HDHP parameters, stripping participants of HSA eligibility. No state insurance mandate can override this federal tax consequence.

Fully insured HDHPs must satisfy both layers simultaneously — the state regulatory requirements and the IRS qualification criteria — while self-funded arrangements navigate federal law primarily, with state oversight limited to ancillary contracts such as stop-loss policies.

References

The law belongs to the people. Georgia v. Public.Resource.Org, 590 U.S. (2020)