DOL Electronic Disclosure Safe Harbors: When Plan Notices May Be Furnished Electronically and What the Record Must Show

Scope of the electronic notice rules

ERISA plan administrators must use measures reasonably calculated to ensure actual receipt of required disclosures. The electronic methods in 29 CFR 2520.104b-1 provide safe harbors for specified circumstances. The 2020 method is an additional option. It did not replace the older electronic-media safe harbor.

The 2020 rule, published May 27, 2020, at 85 FR 31884, added 29 CFR 2520.104b-31. It provides an optional method for furnishing covered pension-plan disclosures to covered individuals. The rule applies to employee pension benefit plans. It does not provide a general electronic-notice safe harbor for ERISA welfare plans.

The 2020 rule also does not change the underlying content or timing requirements for a disclosure. For example, 29 CFR 2520.104b-2 sets timing requirements for furnishing a summary plan description (SPD). It is not itself an electronic-delivery safe harbor.

The legacy safe harbor under § 2520.104b-1(c)

The legacy method covers two broad groups. First, it covers employees who can effectively access electronic disclosures at locations where they are reasonably expected to work, when access to the employer's electronic information system is an integral part of their duties. Second, it covers individuals entitled to ERISA documents who affirmatively consent to electronic delivery, subject to the rule's consent and access requirements.

The legacy safe harbor also requires controls reasonably designed to support actual receipt and protect personal information. It requires appropriate notice when an electronic document's significance is not otherwise apparent, and a paper version must be furnished upon request. For individuals providing consent, the plan's disclosures must explain matters including the documents covered, withdrawal procedures, paper-copy rights, and hardware and software requirements.

This method remains available. Plan administrators should identify which safe harbor supports each recipient and disclosure rather than treating electronic delivery as a single, universal rule.

The 2020 notice-and-access safe harbor

Under § 2520.104b-31, a covered individual is a participant, beneficiary, or other person entitled to covered documents who provides an electronic address to the employer, plan sponsor, administrator, or appropriate designee. An employer-assigned address can qualify when assigned for employment-related purposes that include, but are not limited to, delivery of plan documents.

For covered pension plans, covered documents generally include documents or information required under Title I of ERISA, except items that must be furnished only upon request. The administrator can use notice-and-access, or the rule's separate direct-email method, if the applicable conditions are met.

One-time paper initial notice

Before relying on the safe harbor for an individual, the administrator must furnish that person a paper notification. It must state that covered documents will be furnished electronically, identify the electronic address to be used, and include access instructions. It must also explain the free right to request a paper copy and the free right to opt out of electronic delivery and receive only paper documents.

For notice-and-access, the initial notice must include the caution that a document is not required to remain online for more than one year or, if later, after it is superseded. The notice must be written so the average plan participant can understand it.

Notice of internet availability

For each covered document posted online, the administrator generally furnishes a separate notice of internet availability (NOIA) at the time the document is made available. The NOIA must include the required prominent subject statement, "Disclosure About Your Retirement Plan," and the statement, "Important information about your retirement plan is now available. Please review this information."

It must identify the document, provide a sufficiently specific website address or hyperlink, explain how to request a free paper copy, explain how to opt out of electronic delivery, include the one-year availability caution, and provide a telephone number for the administrator or designated plan representative. The notice must be concise, understandable, and generally separate from other disclosures.

A combined annual NOIA is permitted for specified categories, including the SPD and documents required annually that do not require action by a particular deadline. If a combined NOIA was furnished in the prior plan year, the next one must be furnished each plan year and no more than 14 months after the prior year's notice. This does not extend the deadline for posting any document.

Website availability and paper rights

A covered document must be available online no later than its ERISA furnishing deadline. It must remain available for at least one year after posting or, if later, until it is superseded by a subsequent version. It must be readable, printable, electronically searchable, and capable of permanent electronic retention in a usable format. The website or repository must also protect the confidentiality of personal information.

Covered individuals can request a paper copy free of charge. They can also opt out of electronic delivery entirely and receive only paper versions. The administrator must promptly honor these requests and maintain procedures that do not unduly hinder them.

The system must alert the administrator to an invalid or inoperable electronic address. If an address fails, the administrator must promptly take reasonable steps to cure the issue, such as using a valid secondary address or obtaining a new one. Otherwise, the individual must be treated as having opted out, and the document identified in the undelivered NOIA must be furnished on paper as soon as reasonably practicable.

At employment separation, the administrator must take measures reasonably calculated to maintain the accuracy and availability of an employer-assigned address used for plan disclosures or obtain a new address.

Direct email alternative

Section 2520.104b-31(k) permits direct furnishing by email instead of posting a document and sending an NOIA. The document must be sent by the ERISA deadline and included in the email body or as an attachment. The email must use the subject statement "Disclosure About Your Retirement Plan" and include applicable document-identification, paper-copy, opt-out, and contact information. The other relevant safe-harbor requirements, including the initial paper notice, paper rights, address-failure response, and separation controls, continue to apply. The website availability requirements do not apply to direct email delivery.

What the evidence file should show

The regulation specifies delivery safeguards, but a well-maintained evidence file makes those safeguards reviewable. Retain a record for each recipient and covered document that connects the requirement, destination, notice, posting or transmission, and any corrective action.

A practical file includes:

• Recipient and address: recipient identity, electronic address used, source or assignment basis, and address status at the time of furnishing.
• Initial notice: a copy of the paper notice, the individual it covered, and the date and method it was furnished.
• Document and deadline: the exact version furnished, the applicable ERISA deadline, and the date it was posted or sent.
• NOIA or email: a copy of the notice or message, recipient address, subject line, content, and transmission date.
• Access record: the relevant website or repository location and records showing document availability, usability, and retention period.
• Exceptions and cures: bounce or undeliverable alerts, review date, steps taken, updated address if obtained, and paper delivery or opt-out treatment if the issue was not promptly cured.
• Participant elections: requests for paper copies, opt-out elections, processing dates, and completion records.
• Separation and ownership: address verification or update after separation when an employer-assigned address is used, plus the responsible administrator or service provider.

The safe harbor does not require administrators to monitor whether a participant opens or reads a notice or visits the website. Evidence of transmission and the required response to an invalid address are distinct from proof of readership. The record should show the delivery process and exceptions accurately, without claiming that an email receipt alone proves a person read or understood the disclosure.

Distinguish website availability from record retention

The one-year website rule is a minimum availability period under the notice-and-access method. It does not replace ERISA's separate recordkeeping duties or other applicable retention requirements. Preserve the issued document, NOIA or direct email, delivery data, and exception history according to the requirements that apply to the plan and records.

A retrieval test can confirm whether the file links the recipient, address, notice date, document version, posting or transmission date, and curative steps. The audit trail framework provides additional guidance for connecting requirements, owners, issuance records, and evidence. For a distinct notice workflow that involves paper delivery, Certified Mail can support mailing documentation where that method is required or selected; it is not an ERISA electronic-disclosure requirement.

Operational sequence

1. Confirm the plan and document fall within the selected safe harbor.
2. Verify the recipient's qualifying electronic address and address source.
3. Furnish the one-time initial notification on paper before relying on the 2020 method.
4. Meet the document's ERISA deadline through compliant posting and NOIA or direct email.
5. Maintain free paper-copy and global opt-out procedures.
6. Detect invalid addresses and document prompt cures or paper delivery.
7. Preserve the complete evidence file and test retrieval.

For SPD timing and scope, review 29 CFR 2520.104b-2 alongside the disclosure method. For the rule's text and history, consult 29 CFR 2520.104b-1, 29 CFR 2520.104b-31, and the 2020 Federal Register final rule.

General compliance information, not legal advice.