Making 3(16) Fiduciary Services Work

An ERISA Section 3(16) fiduciary arrangement allows an employer to delegate specified retirement-plan administrative responsibilities to a professional administrator. Depending on the service agreement, these responsibilities may include eligibility, participant transactions, payroll oversight, compliance, required notices, and Form 5500 filings. Employers generally retain responsibility for prudently selecting and monitoring the provider, making plan-design decisions, and supplying accurate and timely payroll and employee data.

A 3(16) administrator’s role should also be distinguished from that of a 3(21) investment adviser or 3(38) investment manager, with each party’s responsibilities clearly documented in writing. Effective administration requires reliable data, secure technology, defined service standards, ongoing compliance monitoring, appropriate error-correction procedures, and careful review of fees, insurance, bonding, indemnification, and contractual limitations. Although a 3(16) arrangement can reduce administrative burdens and strengthen accountability, it does not eliminate the employer’s oversight obligations.

A workplace retirement plan involves more than selecting investments. It requires ongoing administration of eligibility, payroll, participant transactions, disclosures, compliance testing, and regulatory filings. Managing these functions internally can consume significant employer resources and create operational risks when deadlines, data, or plan requirements are overlooked.

A 3(16) arrangement provides a framework for delegating defined administrative duties to a professional provider. The scope of that delegation depends on the written agreement, not the provider’s marketing materials or general description of its services. Employers should understand which responsibilities the provider formally accepts and which remain with the employer.

Successful implementation depends on clearly assigned responsibilities, reliable information, appropriate internal controls, and ongoing monitoring. When these elements are in place, a 3(16) arrangement can improve administrative consistency and accountability while supporting more effective retirement-plan governance.

Role of a 3(16) Administrator

Depending on the service agreement, a 3(16) administrator may perform the following functions:

• Eligibility and enrollment: Track hours and plan entry dates, identify eligible employees, and distribute enrollment materials.

• Participant requests: Review loans, hardship withdrawals, distributions, and qualified domestic relations orders (QDROs) to the extent these responsibilities are delegated.

• Payroll oversight: Reconcile payroll information and monitor the timely deposit of employee contributions.

• Compliance and filings: Coordinate compliance testing, required notices, Form 5500 preparation and filing, and audit requests.

• Operational corrections: Identify plan errors, calculate corrections and lost earnings, coordinate required funding, and maintain supporting records when included in the agreement.

A traditional third-party administrator (TPA) may provide calculations, reports, and recommendations while leaving decisions and implementation to the employer. A 3(16) arrangement may transfer specified administrative discretion and formal responsibility to the provider. The service agreement determines the actual division of duties.

What Employers Still Own

Delegating administrative responsibilities does not eliminate the employer’s fiduciary obligations. Employers generally remain responsible for prudently selecting and monitoring service providers and ensuring that delegated functions are performed appropriately. They also retain plan-design decisions, commonly referred to as settlor functions, such as establishing, amending, or terminating a plan and selecting its design features.

The employer must also provide accurate and timely information. Errors in hire or termination dates, compensation classifications, hours worked, employee elections, or payroll files can compromise plan administration. Agreements may assign responsibility for correcting problems caused by inaccurate or late employer data back to the employer.

Employee contributions must be deposited into the plan trust as soon as they can reasonably be segregated from the employer’s general assets. The source document identifies a seven-business-day safe harbor for certain small plans and the 15th business day of the following month as an outside limit for large plans. Employers should verify the requirements applicable to their particular plan and circumstances rather than treating either time-frame as a universal rule.

Operational Workflow

The employer’s payroll function supplies compensation, hours, contribution elections, and employment-status information. The provider validates the data against plan terms, identifies discrepancies, and completes authorized administrative actions. Records should document the work performed, exceptions identified, and their resolution so the employer can monitor the provider’s performance.

Automated integrations can reduce manual data entry and support contribution processing, eligibility tracking, and matching calculations. However, automation does not replace data validation, exception management, or secure access controls. Employers and providers should establish procedures for resolving discrepancies and protecting sensitive participant information.

Correcting Operational Errors

If an eligible employee’s valid deferral election is not implemented, the provider may identify the missed election, calculate the missed deferral opportunity and any related employer match under applicable correction rules, determine lost earnings, coordinate employer funding, and document the correction. The appropriate correction depends on the facts and current IRS guidance; illustrative percentages should not be treated as universally applicable.

Late contribution deposits may require lost-earnings calculations, corrective filings, and potentially excise-tax reporting. The service agreement should clearly identify who is responsible for detecting the problem, calculating corrective amounts, funding the correction, submitting required forms, and communicating with participants or regulators.

Regulatory Oversight

The Department of Labor (DOL), through the Employee Benefits Security Administration (EBSA), oversees ERISA fiduciary conduct and matters such as required disclosures, benefit claims, and contribution handling. The Internal Revenue Service (IRS) oversees tax qualification, contribution limits, and compliance testing under the Internal Revenue Code. Employers must also monitor the service providers they select and the performance of delegated responsibilities.

Regulatory examinations may involve the signed service agreement, plan document, Form 5500 filings, participant notices, payroll records, account transactions, and evidence supporting eligibility and vesting calculations. Complete and organized records help establish who performed each task, demonstrate compliance, and document how exceptions were addressed.

Selecting and Monitoring a Provider

Evaluate Capability and Contract Scope

Before engaging a provider, employers should evaluate its administrative capabilities, contractual responsibilities, technology, controls, and capacity to support the plan. Key questions include:

• Does the agreement identify the provider as the Plan Administrator where intended and clearly specify each delegated responsibility?

• Which duties are excluded, and who is responsible for historical errors, late or incomplete payroll data, claims, audits, and participant communications?

• What data integrations, authentication procedures, exception-escalation processes, and information-security controls are in place?

• Is a current SOC 1 Type II report available, and what exceptions or user-control responsibilities does it identify?

• Are insurance policies and fidelity bonds current, and do their coverage types, limits, and exclusions align with the provider’s actual responsibilities?

• Are service-level agreements (SLAs) measurable and specific to transactions, notices, reporting, and issue resolution?

• Are staffing, business-continuity plans, subcontractor arrangements, and cybersecurity practices adequate?

Employers should pay particular attention to contractual carve-outs that shift liability back to the employer, including exclusions for late data or errors originating in prior periods. Indemnification provisions should be evaluated against the provider’s actual insurance coverage, recognizing that stated policy limits do not guarantee recovery.

Ongoing monitoring should include SLA performance, unresolved errors, filing accuracy, SOC report findings, insurance and bonding renewals, and material changes to systems or subcontractors. The employer or responsible committee should document its reviews, decisions, and follow-up actions in meeting minutes.

Fees and Cost Considerations

Provider pricing varies according to plan size, complexity, service scope, and the provider selected. Fees may be paid by the employer or, where permitted and properly disclosed, from plan assets. Employers should assess the total cost of the arrangement, including internal staff time, system integration, error remediation, and services or liabilities excluded from the contract.

The source document also references potential SECURE Act 2.0 startup-plan tax credits for eligible small employers. Eligibility, credit amounts, and qualifying expenses are subject to statutory requirements and may change. Employers should confirm the current rules with qualified tax advisers or IRS guidance.

Insurance, Risk, and Contract Terms

Insurance can help protect against certain claims and losses, but it is neither a blanket guarantee nor a substitute for carefully drafted contractual protections.

• Fiduciary liability insurance: May cover qualifying claims alleging fiduciary breaches or administrative negligence. Employers should determine whether defense costs reduce policy limits and whether relevant penalties or correction expenses are covered.

• ERISA fidelity bonds: Protect the plan against covered losses resulting from fraud or dishonesty by persons handling plan assets. Fidelity bonding is distinct from fiduciary liability insurance.

• Cyber and network security insurance: May cover certain data breaches, ransomware incidents, response expenses, and third-party claims. Employers should review exclusions and confirm whether subcontractors are covered.

• Professional errors and omissions insurance: May cover certain professional-service errors that fall outside fiduciary liability coverage.

Policy terms and limitations are as important as the stated coverage amounts. Claims-made policies generally depend on when a claim is made and reported, making continuity of coverage, prior-acts protection, and extended reporting periods important considerations. Defense costs may erode policy limits, aggregate limits may be shared across multiple clients, and exclusions may apply to prior acts, intentional misconduct, or contractual obligations that would not otherwise exist.

Employers should not assume that insurance will cover every regulatory assessment or restore all plan losses. Policy language should be reviewed with the insurer or qualified coverage counsel. Separately, employers should evaluate indemnification provisions, contractual liability caps, and the provider’s financial capacity to meet its obligations.

Contract Checkpoints

Before signing, employers should compare the service agreement with the provider’s actual operating model and confirm:

• The provider’s named fiduciary status, where applicable, and any specific discretionary authority.

• Clear ownership of each administrative task and the deadlines for supplying required data.

• Responsibility for historical errors, corrections, and related funding.

• Claims procedures, audit support, and participant communication responsibilities.

• Record-access rights, record retention, and transition assistance upon termination.

A provider may advertise substantial insurance coverage while limiting its contractual liability to a much narrower amount, such as fees paid during a specified recent period. Employers should determine whether indemnification meaningfully addresses the risks being transferred and whether contractual exclusions undermine the intended allocation of responsibility. Insurance certificates alone are insufficient; relevant policy provisions should be examined, with professional advice obtained when appropriate.

Conclusion

A 3(16) fiduciary arrangement can help employers delegate defined retirement-plan administrative responsibilities while improving consistency, accountability, and operational efficiency. However, delegation does not eliminate the employer’s responsibility to prudently select and monitor the provider, make plan-design decisions, and supply accurate and timely information.

The effectiveness of the arrangement depends on a clearly written service agreement, well-defined responsibilities, reliable payroll and participant data, secure systems, measurable service standards, and effective procedures for identifying and correcting errors. Employers should also evaluate fees, insurance, bonding, indemnification, contractual liability limits, and ongoing provider performance as part of their broader fiduciary oversight.

Ultimately, a 3(16) relationship works best as a governance partnership rather than a simple outsourcing arrangement. When responsibilities are clearly assigned, performance is documented, and oversight remains active, employers can reduce administrative demands while maintaining the controls needed to support a compliant and well-managed retirement plan.