The Role of HSAs in Financial Wellness and Retirement

Financial providers can partner with employers to offer the benefit and help employees achieve their goals.


As more workers invest their health savings account (HSA) balances to achieve retirement security, more financial providers are partnering with employers to offer the benefit. 

Experts at the virtual 2021 PLANSPONSOR HSA Conference discussed how financial wellness and retirement are integrated, and how employers can work with their providers and maximize HSAs to help employees achieve both financial wellness and retirement security.

Never miss a story — sign up for PLANADVISER newsletters to keep up on the latest retirement plan adviser news.

One topic that came up throughout the discussion was the idea of decoupling HSAs from high-deductible health plans (HDHPs). Traditionally, the benefit has been offered with these plans to help offset the high costs associated with them. Separating the two and offering the benefit to other employees could grow participation and therefore help more employees achieve increased savings, noted Inci Kaya, senior analyst at Aite Group’s Health Insurance Practice.

“There’s a lot of market growth and head growth to expand,” she said. “If HSAs can be uncoupled from HDHPs and made broader to those with any type of health care, that would be one possibility to expand.”

Financial advisers working with employers on HSAs could also help grow participation, but providers must first be incentivized to create such a partnership, Kaya added. Traditionally, HSAs are organized through a health plan broker and a third-party administrator (TPA), not a financial adviser.

“If we can find a way to make it a compelling offering for the broader community of financial advisers, then you have room,” Kaya added. “If we can make it worth their while to sell these products, that’s one way.”

Greg Puig, vice president of benefits consulting services at Sentinel Benefits and Financial Group, said he believes one of the best solutions to add an HSA into a plan design is to partner with firms that understand the offering and have knowledge about the benefit. “Take a step back and look at who you are working with today, and make sure they have the knowledge base and the relationships to integrate these conversations,” he said.

Amy Ray, director, advice and wellness product development, Transamerica, said it’s important to integrate retirement and HSA benefits. She said it’s especially helpful to offer them on the same online platform. The idea is that every time a participant logs onto a site to view their retirement or HSA, they should see both benefits side-by-side. This way, participants are not only seeing the two together, but they’re memorizing one portal, login and password, which can incentivize them to engage more often with the benefits, Ray added.

The advantages of managing one single platform extend to the employer, too, as plan sponsors can offer their benefits all in one space. It can be difficult for plan sponsors who receive different materials from several providers, rather than one, to integrate and work with that information. By working with one provider, “you can analyze the trends and get engaged with how [participants] are using the different benefits,” Ray said.

DOL Issues Cybersecurity Guidance

The guidance, which is the first of its kind, includes best practices and tips for protecting retirement benefits.


The U.S. Department of Labor (DOL) has released new guidance for plan sponsors, plan fiduciaries, recordkeepers and plan participants on best practices for maintaining cybersecurity, including tips on how to protect the retirement benefits of America’s workers. This is the first time the DOL’s Employee Benefits Security Administration (EBSA) has issued cybersecurity guidance.

As of 2018, the EBSA estimates that there are 34 million defined benefit (DB) plan participants in private pension plans and 106 million defined contribution (DC) plan participants with combined assets of $9.3 trillion. The agency notes that without sufficient protection, these participants and assets may be at risk from internal and external cybersecurity threats.

Want the latest retirement plan adviser news and insights? Sign up for PLANADVISER newsletters.

The DOL also noted that the Employee Retirement Income Security Act (ERISA) requires plan fiduciaries to take appropriate precautions to mitigate these risks.

The guidance comes in three forms.

The first piece of guidance is tips for hiring a service provider with strong cybersecurity practices and monitoring their activities. The EBSA recommends asking about a service provider’s security standards, practices and policies, as well as evaluating its track record in the industry.

The second piece of guidance lays out cybersecurity program best practices to help plan fiduciaries and recordkeepers stay on top of their responsibilities to manage cybersecurity risks. The best practices include having a formal, well-documented cybersecurity program; conducting annual risk assessments; clearly defining roles and responsibilities; and conducting periodic cybersecurity awareness training.

Lastly, the DOL issued online security tips aimed at plan participants and beneficiaries who check their retirement accounts online; they are basic rules to reduce the risk of fraud and loss, such as being wary of public WiFi and using strong, unique passwords.

“The cybersecurity guidance we issued today is an important step towards helping plan sponsors, fiduciaries and participants to safeguard retirement benefits and personal information,” said Acting Assistant Secretary for Employee Benefits Security Ali Khawar. “This much-needed guidance emphasizes the importance that plan sponsors and fiduciaries must place on combatting cybercrime and gives important tips to participants and beneficiaries on remaining vigilant against emerging cyberthreats.”

In March, the Government Accountability Office (GAO) called on the DOL to issue cybersecurity guidance, saying it failed to clarify fiduciary responsibility for mitigating cybersecurity risks and establish minimum expectations for protecting personally identifiable information and plan assets.

Even before the release, the shift to remote work in the past year in response to the coronavirus pandemic has raised concerns for plan advisers and plan sponsors about cyberattacks, as well as questions about whose responsibility it is to protect participant and plan data. In response, those in the financial advisory industry have increased their cybersecurity measures, especially as more firms have faced lawsuits. Plan sponsors are also being warned of a rise in retirement plan litigation related to cyberhacks.

«