Telehealth Coverage and the HDHP Health Savings Account Safe Harbor for Self-Funded Employers in 2026

For a decade, employers who chose high-deductible health plans accepted a trade. The tax-advantaged Health Savings Account sitting beside the plan came with a rule as old as the design itself — coverage before the deductible, with narrow exceptions, disqualifies the account. Preventive care was carved out; almost nothing else was. Then the pandemic arrived, and telehealth moved from novelty to necessity overnight.

The CARES Act answered that moment with a safe harbor. An HDHP could cover telehealth and remote-care services on a first-dollar basis — no deductible first — and the employee's HSA eligibility stayed intact. It was relief built for a crisis, and like most crisis relief, it carried an expiration date. Congress extended it, let it lapse, extended it again. The provision became a recurring item on the legislative calendar — renewed in fits and starts, always temporary, always uncertain.

That uncertainty came to a head on December 31, 2024. The year-end relief package signed that December, despite bipartisan support for the telehealth provision, did not carry it forward. The safe harbor lapsed. For calendar-year plans, the protection simply ended with the ball drop. Non-calendar plans fared slightly better — the prior extension carried them through the plan year that ended in 2025, a quirk of effective-date drafting that bought certain fiscal-year employers a few more months of runway.

What followed was a stretch of genuine exposure. From January through the first week of July 2025, a self-funded employer offering first-dollar telehealth inside an HDHP was making a bet — that the coverage its plan document promised would not quietly disqualify its own workforce from the accounts those workers were funding. Because that is precisely the risk. Without the safe harbor, telehealth furnished before the deductible, at no cost or below fair market value for non-preventive services, becomes disqualifying coverage. An employee who receives it is no longer HSA-eligible. Contributions made in reliance on eligibility become excess contributions — subject to excise tax, correction, and the kind of retroactive cleanup no benefits team wants to explain to its people.

The resolution came on July 4, 2025. The One Big Beautiful Bill Act — Public Law 119-21 — made the telehealth safe harbor permanent. Section 71306 of that law amended Section 223 of the Internal Revenue Code to codify what had lived for five years on borrowed time. More to the point for anyone who held the line during the lapse: the provision is effective for plan years beginning after December 31, 2024. That retroactive reach closes the gap. A calendar-year plan that continued first-dollar telehealth through the spring of 2025 was, in the end, protected — the law reached back and ratified the bet. IRS Notice 2026-5, released in December 2025, supplies the implementing guidance, defining eligible services by reference to Medicare's remote-care list and confirming the obvious boundary: the harbor covers remote services, not in-person visits, durable equipment, or pharmaceuticals.

So the answer, as of today, is the one benefits teams spent five years waiting for. The telehealth safe harbor is not expired, not temporarily extended, and no longer tethered to the next continuing resolution. It is permanent.

What self-funded and captive employers should take from this is less about relief and more about discipline. Permanence removes the annual scramble, but it does not remove the obligation to document. Your plan document and summary plan description should name the safe harbor and describe first-dollar telehealth as the intentional design it now is — not an inherited artifact from a lapsed statute. If your telehealth vendor agreement and your stop-loss disclosures were drafted around the temporary provision, they deserve a fresh read against Section 223 as amended. And the lesson of 2025 should not be discarded with the uncertainty that produced it — a benefit built on temporary relief is a benefit that can surface a compliance exposure the moment Congress looks away. Permanent is better than temporary, but the fiduciary habit of monitoring the legislation your plan depends on is what turned a lapse into a managed risk rather than a surprise.

Telehealth itself earns its place in a self-funded strategy for reasons that have little to do with tax-code mechanics. It moves routine care to a lower-acuity, lower-cost setting, it surfaces conditions before they harden into claims, and it widens access for a workforce that does not always have the time or the geography for an office visit. Inside a captive, where the employer owns more of the risk and more of the upside, that access-and-cost leverage compounds. The safe harbor simply removes the tax penalty that once made this harder to design well.

This is the work our 4-Step Strategic Process is built for. Strategic Discovery surfaces how your plan currently treats telehealth and where the documents lag the law. Risk Assessment weighs the HSA-eligibility exposure against your population's utilization. Solution Design writes the permanent safe harbor into your plan with intention. And Ongoing Optimization keeps a disciplined eye on the guidance — because the law is settled today, and settled is not the same as finished.