401(k) Fiduciary Duty Doesn't End at the Investment Menu

For years, most 401(k) plan sponsors have concentrated the lion’s share of their fiduciary efforts on investments. Pick solid funds, keep an eye on fees, document the process, done. While these actions are vital, a steady stream of ERISA litigation over the past several years has made one thing clear — the courts are not stopping at the investment menu, and neither should plan sponsors.

Litigation Keeps Expanding — and Courts Don’t Agree

ERISA lawsuits have moved well past fund selection and expense ratios. Plaintiffs are now testing plan sponsors on how benefits are calculated, how actuarial and administrative assumptions are applied, how forfeited funds are handled, and how day-to-day plan operations are run. And the results in court have been anything but consistent. Cases that once looked settled get sent back for another round. Legal theories that succeed in one court fail in another.

As ERISA litigation attorneys at Groom Law Group have observed, courtroom outcomes  “illustrate the uncertain legal landscape that sponsors face.” For every plan sponsor watching from the sidelines, the pattern is the same: more questions than answers.

Sponsors can’t wait for the law to settle before deciding how seriously to take oversight, because given the standards and complexities of ERISA, it is unlikely to ever fully settle. Bottom line? Uncertainty is an inherent risk in sponsoring a retirement plan. 

Proactive Oversight In Action

As Eric Dyson, Executive Director of 90 North Consulting and a widely recognized voice in ERISA fiduciary governance, points out, making decisions and monitoring results are the guts of what every plan sponsor needs to take seriously. That applies to all aspects of the plan, not just investments and fees. Consider, for example, that most of the day-to-day mechanics of a retirement plan are run through automated systems — recordkeepers, payroll platforms, third-party administrators, custodians. Auto-enrollment escalations, hardship withdrawals, vesting schedules, required minimum distributions — all handled by software most sponsors never look at directly.

Yet, none of that outsourcing transfers the liability. A plan sponsor can hand off the administrative work, but not the fiduciary responsibility that comes with it. If a vendor’s software miscalculates a benefit or applies an outdated formula, the sponsor is still the one who was supposed to be watching. Consider these pointers toward ratcheting up proactive oversight of the retirement plan:

• Revisit the basics with your advisor. The Department of Labor’s guide, Meeting Your Fiduciary Responsibilities, is a useful refresher on where personal liability actually sits.
• Track and act on enforcement priorities. The Employee Benefits Security Administration updates its national enforcement projects regularly — cybersecurity currently sits at the top of that list, alongside benefit distribution practices.
• Build a responsibility matrix. Work with your advisor and legal counsel to map exactly who owns each calculation, notice, and data handoff across your recordkeeper, TPA, and payroll provider. Vague accountability is where problems hide.
• Treat monitoring as ongoing, not annual. A single yearly review isn’t enough when litigation theories and vendor systems are both changing throughout the year.

Good to Know: Fidelity Bonds Do Not Protect Plan Sponsors

One of the most common misconceptions we see among small and midsize business owners: assuming the ERISA Fidelity Bond their plan is required to carry will also protect them if a participant sues over a calculation error or an alleged breach of fiduciary duty. It won’t. There are three broad categories of risk sponsors need to be concerned about, and the ERISA Bond only covers one: 

• ERISA Fidelity Bond: protects the plan’s assets from theft or fraud by people who handle plan funds.
• Fiduciary Liability Insurance: protects the fiduciaries themselves — their personal assets and the company’s finances — from the cost of defending and resolving claims of mismanagement or breach of duty.
• Cyber Liability Insurance: helps to cover the plan’s exposure to data breaches and cyberattacks, an area regulators are watching closely right now.

Best Practice: Ongoing Fiduciary Vigilance—and Protection

Litigation trends will keep evolving, and so will regulatory priorities. The plans that succeed (and even thrive) aren’t the ones that got fiduciary duty right once — they’re the ones that treat governance, documentation, and monitoring as a continuous habit. That, paired with the right coverage, is what actually protects a plan sponsor when letters of inquiry arrive from regulators, plan participants complain, or plaintiff attorneys come knocking. 

Colonial Surety Company, makes protection efficient and affordable for every retirement plan sponsor. Uniquely, our Fiduciary + Cyber Liability Bundle combines the ERISA Fidelity Bond, Fiduciary Liability Insurance, and Cyber Liability Insurance so plan sponsors aren’t left guessing which risks are actually covered. 

As an A.M. Best “A (Excellent)” rated, U.S. Treasury-listed surety licensed in all 50 states — and rated 4.8 on Trustpilot — Colonial Surety Company makes it simple to get every layer of protection in place, without piecing it together from multiple sources.