Glass-walled house with a pool
401(k) · Benefit Plans · ERISA

Running a benefit plan makes you a fiduciary.

Coverage for employers, owners and trustees against claims of mistakes in managing 401(k), retirement and health benefit plans.

By Sam Alishahi · CA Insurance License #4348151 · Reviewed November 2026 · How this page is researched

Why it matters

Personal liability for plan decisions

Under ERISA, people who manage an employee benefit plan can be held personally liable for losses caused by mistakes, such as high fees, poor investment choices or late contributions.

The ERISA fidelity bond many plans must carry protects the plan against theft, not the fiduciaries against lawsuits. Fiduciary liability insurance covers the defense and settlement of those claims.

  • Breach of dutyClaims of imprudent plan management.
  • Administrative errorsEnrollment and contribution mistakes.
  • Legal defenseDefense costs for covered claims.
  • Personal assetsProtection for individual fiduciaries.
Who I help

Employers I insure

Companies with a 401(k)

Owners and plan committees.

Health and welfare plans

Employer-sponsored benefits.

Nonprofits

Plans for nonprofit staff. See details

Directors and officers

D&O for the company. See details

Employment practices

EPLI for employee claims. See details

Growing companies

As headcount and plan assets grow.

Before you call

What underwriters will ask

Having these ready means I can go to market on the first call. The quote form asks for the same things, and anything you don’t know yet can wait.

Start the Quote Form

  • Plans: retirement, health or both.
  • Assets: total plan assets.
  • Participants: number of employees in the plan.
  • Administration: outside administrator or advisor.
  • Company stock: whether the plan holds it.
  • History: any audits, complaints or claims.

What ERISA actually says about your liability

I walk every client through three short sections of federal law before we look at a policy.

  • The standard you are judged by (29 U.S.C. 1104). A fiduciary must act solely in the interest of participants and beneficiaries, for the exclusive purpose of providing benefits and defraying reasonable expenses of administering the plan, and with the care, skill, prudence and diligence of a prudent person familiar with such matters. The fiduciary must also diversify plan investments to minimize the risk of large losses, unless it is clearly prudent not to, and follow the plan documents so far as they are consistent with ERISA.
  • Personal liability (29 U.S.C. 1109). A fiduciary who breaches those duties is personally liable to make good to the plan any losses resulting from each breach and to restore any profits the fiduciary made through use of plan assets. A court can also order other equitable or remedial relief, including removal of the fiduciary.
  • Liability for someone else's breach (29 U.S.C. 1105). You can be liable for a co-fiduciary's breach if you knowingly took part in it or knowingly tried to conceal it; if your own failure to meet the 1104 duties in carrying out your specific responsibilities enabled it; or if you knew of it and did not make reasonable efforts under the circumstances to remedy it.

First, fiduciary status comes from what you do, not your title: the Department of Labor says exercising discretion over plan administration or control over plan assets makes you a fiduciary to that extent, and hiring a service provider is itself a fiduciary function. Second, section 1109(b) says a fiduciary is not liable for a breach committed before becoming one or after ceasing to be one. When someone joins or leaves the committee, I want the application to reflect who served when.

Who pays the premium matters

ERISA section 410 (29 U.S.C. 1110) does two things. It makes any provision in an agreement or instrument that tries to relieve a fiduciary of responsibility or liability void as against public policy, with narrow statutory exceptions. Then it expressly allows insurance, in three forms:

  1. The plan may buy insurance for its fiduciaries or for itself covering liability or losses from a fiduciary's act or omission, but only if the insurance permits recourse by the insurer against the fiduciary in the case of a breach.
  2. A fiduciary may buy insurance covering his or her own liability, from and for his or her own account.
  3. An employer or an employee organization may buy insurance covering the potential liability of the people who serve as plan fiduciaries.

That recourse condition is why I ask, on every fiduciary submission, whether the premium will come out of plan assets or out of the company's operating account. The statute attaches the recourse condition only to insurance the plan buys; the provisions for insurance bought by a fiduciary or by the employer or employee organization contain no such condition. Tell me how you intend to pay before we bind, so the application and the policy wording reflect it.

Separately, the Department of Labor says those who handle plan funds or other plan property generally must be covered by a fidelity bond, which protects the plan against losses from fraud or dishonesty. That is a different instrument with its own rules; see ERISA bonds and do I need an ERISA bond.

Late 401(k) deposits and the self-correction route

Underwriters ask whether employee deferrals have ever been deposited late. The Department of Labor rule (29 CFR 2510.3-102) treats amounts withheld from wages as plan assets as of the earliest date they can reasonably be segregated from the employer's general assets. For a pension plan, that date can be no later than the 15th business day of the month following the month in which the amounts would otherwise have been payable to the participant in cash. That date is an outer limit, not the general rule.

Plans with fewer than 100 participants at the beginning of the plan year get a safe harbor: amounts deposited no later than the 7th business day after the day they were received by the employer or would otherwise have been payable to the participant in cash are treated as on time. The regulation calls the safe harbor an optional alternative method of compliance, not the exclusive one.

If deposits were late, the Voluntary Fiduciary Correction Program (VFCP), most recently updated effective March 17, 2025, is the DOL's program for correcting them. The update added a Self-Correction Component for delinquent participant contributions and loan repayments to pension plans:

  • Available to plans of any size when lost earnings total $1,000 or less.
  • The delinquent amounts must be remitted within 180 calendar days of the date they were withheld or received by the employer.
  • Lost earnings are calculated with the online calculator, and the self-corrector pays any penalties, late fees and other charges.
  • The self-corrector files an SCC Notice through EBSA's web tool, gives the SCC Retention Record Checklist and a penalty of perjury statement to the plan administrator to keep, and receives an email acknowledgment rather than a no-action letter.
  • Neither the plan nor the self-corrector can be under investigation, as the VFCP defines it.

If contributions were late and corrected, send me the record of the correction.

Fee disclosures you should already have

Under the DOL's 408(b)(2) regulation (29 CFR 2550.408b-2(c)), a covered service provider to a pension plan (one that reasonably expects $1,000 or more in direct or indirect compensation for fiduciary or registered investment adviser services, certain recordkeeping or brokerage services, or certain other services paid through indirect compensation) must give the responsible plan fiduciary written disclosures. They include a description of the services, a statement on whether the provider acts as a fiduciary or registered investment adviser, and its direct and indirect compensation.

  • Timing: reasonably in advance of the date the contract or arrangement is entered into, extended or renewed; changes to the core items within 60 days of the provider being informed of them.
  • When a disclosure turns out to be missing: the regulation's relief for a fiduciary who did not know of the failure requires a written request for the information. If the provider does not comply within 90 days, the fiduciary notifies the DOL no later than 30 days after the earlier of the refusal or the end of that 90-day period, and decides whether to keep the arrangement; for future services, if the information is not promptly disclosed after the 90 days, the contract must be terminated as expeditiously as possible.

The DOL's guidance for fiduciaries says prudence focuses on the process for making decisions: document them, give each prospective provider the same information so bids can be compared, monitor fees to determine whether they continue to be reasonable, and ask a provider whether the firm has fiduciary liability insurance. When I prepare a submission, the committee minutes and the latest 408(b)(2) disclosures are among the first documents I ask for.

Questions

Fiduciary liability insurance, answered

Isn't my ERISA bond enough?

No. The ERISA bond protects the plan from theft by people who handle it. Fiduciary liability protects fiduciaries from lawsuits over their decisions.

Does using a third-party administrator protect me?

It helps, but the employer and plan committee usually remain fiduciaries and can still be sued.

Is it expensive?

For most small and mid-size plans, fiduciary liability is modestly priced relative to the protection.

Can it be combined with D&O?

Often, as part of a management liability package.

What is the deposit deadline for SIMPLE IRA contributions?

Under 29 CFR 2510.3-102(b)(2), for a SIMPLE plan that involves SIMPLE IRAs, withheld amounts must become plan assets no later than the 30th calendar day following the month in which they would otherwise have been payable to the participant in cash.

Do you offer fiduciary liability insurance outside California?

Yes. Clients across the country send the same quote form. Sam Alishahi is licensed in all 50 states and Washington, DC and places policies there directly. The shopping across carriers works the same way. Rules, minimums and markets differ by state — see insurance requirements by state.

Fiduciary liability insurance

Send your plan details. I'll shop it.

Plan type, assets and participants are enough to start.

Alishahi Insurance · Saman Alishahi, independent insurance broker, California License #4348151. General information, not a quote or a promise of coverage; coverage depends on underwriting and the terms, conditions and exclusions of the policy actually issued.

Get a quote

Tell me how to reach you. I’ll take it from there.

Takes about 30 seconds. Your next step comes by email, and you get an update at every step until your quotes are ready.

(877) 711-4545

Answered 24/7 · CA License #4348151

Only your name, phone and email are required; every question here is optional. This is a request for insurance: Alishahi Insurance (Saman Alishahi, licensed insurance agent) will contact you about it by email, and by text if you check the box. Sending this form doesn’t bind coverage; coverage starts only when it’s confirmed in writing.

Not shopping yet?

Get a reminder before your renewal.

Tell me when your policy renews and I’ll email you about six weeks before, when it’s worth comparing. One email, no calls.