ERISA Fiduciary Litigation and Self-Funded Health Plan Governance in 2026

For a decade, ERISA fiduciary-breach litigation was a retirement-plan story—excessive 401(k) fees, imprudent fund menus, revenue-sharing arrangements no one could see. In 2026 that same body of law has crossed into the health plan, and the employers who sponsor self-funded medical and pharmacy benefits are now the named defendants. The plaintiffs' bar has followed the money: health benefits are often an organization's second-largest expense after payroll, and the fiduciary duties that govern them have gone largely unexercised. The wave is here, and it is reshaping how a disciplined plan sponsor thinks about governance.

What the CAA changed

The turn began with the Consolidated Appropriations Act of 2021. Two provisions did the quiet work. The first removed the "gag clauses" that carriers and administrators had long written into contracts—terms that blocked plan sponsors from seeing their own claims and network-pricing data—and required plans to attest annually that no such clause survives. The second forced brokers and consultants to disclose their direct and indirect compensation. Together they dismantled the oldest defense in health benefits: I could not have known. Once a plan sponsor is entitled to the data and the fee arrangements, the fiduciary duty of prudence attaches to what it does with them. Information the law hands you becomes information you are expected to have used.

The marquee cases and where they stand

The litigation that followed tested exactly that duty. In Lewandowski v. Johnson & Johnson, a plan participant alleged that J&J mismanaged its prescription-drug program—accepting a PBM arrangement that priced generic drugs at multiples of their market cost—and thereby inflated premiums and out-of-pocket spend. The District of New Jersey dismissed the amended complaint on November 26, 2025, finding the participant's alleged injury too speculative to establish Article III standing; the plaintiff has appealed. Navarro v. Wells Fargo advanced the same theory of imprudent PBM oversight and met the same result: the District of Minnesota dismissed on March 3, 2026, again on standing grounds. Then the pattern broke. In Stern v. JPMorgan Chase, the Southern District of New York on March 9, 2026 allowed portions of a parallel drug-pricing complaint to survive dismissal, distinguishing the earlier rulings on how the out-of-pocket harm was pleaded. The early scoreboard favors defendants on standing—but Stern illuminates the doctrine's direction, and the appeals in Lewandowski and Navarro are not expected to resolve before 2027. A dismissal on standing is not a ruling that the underlying process was prudent.

Prudence applied to pharmacy and PBM contracting

Strip away the procedural posture and every one of these cases asks the same question a court will eventually reach on the merits: did the fiduciary run a prudent process? For pharmacy, that means benchmarking PBM fees against the market rather than accepting a rebate headline; negotiating audit rights and genuine data access instead of a summary the administrator chooses to share; and evaluating pass-through and transparent-pricing alternatives to the spread-pricing model, in which the PBM keeps the gap between what the plan pays and what the pharmacy receives. Reform is arriving to reinforce the point—the Consolidated Appropriations package enacted in February 2026 mandates full PBM compensation disclosure and 100 percent rebate pass-through for ERISA plans, with core provisions phasing in through the end of the decade—but transparency delivered by statute does not discharge the duty to read the contract. The fiduciary obligation is a process, not a document.

Building the governance that answers it

The defensible answer is structural. A plan sponsor should stand up a health-plan fiduciary committee with a written charter, the way retirement plans have done for years—a body that meets on a schedule, reviews fees and vendor performance against benchmarks, and records its reasoning in minutes. Prudence is proven by documentation: the deliberation, the alternatives weighed, the rationale for the choice. That paper trail is the difference between a decision a court respects and one it second-guesses. It is also where fiduciary-liability insurance enters. Most sponsors carry fiduciary-liability coverage sized to their 401(k) exposure; few have revisited limits, definitions, or defense-cost provisions against the reality that health-plan claims are now live. Confirming that the policy responds to health and pharmacy fiduciary allegations—and that limits reflect the plan's scale—is itself an act of governance.

Where captive discipline fits

A self-funded or captive structure does not replace fiduciary governance; it rewards it. When an employer owns its claims dollars and finances risk through a captive, it also owns the data, the leverage, and the runway to negotiate on its own terms rather than a carrier's. That ownership is precisely what makes disciplined oversight possible—and precisely what the duty of prudence now expects. Structure and governance are two halves of one posture: control of the economics, and accountability for how they are managed. The captive does not exempt the sponsor from fiduciary duty; it equips the sponsor to meet it.

This is the work PFTN's four-step process is built to do—Strategic Discovery to map the plan's contracts, fees, and data rights; Risk Assessment to test the current PBM and vendor arrangements against the market and the emerging case law; Solution Design to craft the committee, the charter, and the fiduciary-liability coverage that hold up under scrutiny; and Ongoing Optimization to keep the process current as rulings and regulations move. The litigation wave will sort employers into those who exercised their fiduciary duty and those who assumed someone else would. In 2026, that is a distinction a plan sponsor gets to author.