Lesson 10.7: Compliance and Regulatory Requirements

Where This Lesson Fits

Lesson 10.7 is the concluding lesson of Unit 10 and serves as the regulatory capstone for everything covered in lessons 10.1 through 10.6. The structural frameworks, tax rules, trust law, fiduciary standards, distribution mechanics, and custodial controls established in earlier lessons all generate specific compliance obligations—reporting requirements, testing deadlines, correction filings, and examination risks—that must be managed on an ongoing basis to maintain plan qualification and avoid penalties.

This lesson integrates across the entire unit: contribution monitoring (10.2) drives compliance with annual testing; fiduciary documentation (10.4) supports DOL examination defense; custody controls (10.6) underlie Form 5500 reporting accuracy; and distribution processing (10.5) generates the tax filings reviewed in IRS audits. Compliance is not a separate function from operations—it is the aggregate outcome of every operational decision made throughout the account's lifecycle.

For operations professionals, compliance proficiency means understanding not just the requirements but the consequences of failure and the correction pathways available when errors occur. The IRS and DOL provide robust voluntary correction programs precisely because compliance errors are common—and institutions that self-identify and correct problems proactively face far less severe consequences than those discovered through examination.

Lesson Objective

By the end of this lesson, students should be able to identify the primary regulatory frameworks governing retirement and trust account compliance, describe the annual reporting and disclosure requirements under ERISA, apply nondiscrimination testing concepts to 401(k) plan administration, explain the IRS correction programs available under EPCRS for retirement plan failures, outline the DOL's enforcement priorities and the operational practices that support examination readiness, and design a compliance calendar and documentation framework for ongoing retirement and trust account administration.

Lesson Overview

Retirement and trust account compliance spans two primary regulatory jurisdictions: the Internal Revenue Service (IRS), which governs plan qualification and tax treatment, and the Department of Labor (DOL), which enforces ERISA's fiduciary, reporting, and disclosure requirements. Both agencies have independent examination authority and can impose significant penalties for non-compliance. State agencies regulate trust administration through state trust codes, charitable trust oversight, and, in some cases, licensing requirements for corporate trustees.

ERISA's reporting and disclosure requirements form the compliance backbone for employer-sponsored plans. Every ERISA-covered plan must file an annual Form 5500 (Annual Return/Report of Employee Benefit Plan) with the DOL, disclosing plan assets, participants, service providers, financial statements, and compliance certifications. Large plans (generally 100 or more participants at the beginning of the plan year) must attach audited financial statements prepared by an independent qualified public accountant. Participant disclosure requirements include the Summary Plan Description (SPD), quarterly benefit statements, annual fee disclosures (404a-5), and blackout period notices.

Nondiscrimination testing ensures that 401(k) plans do not disproportionately benefit highly compensated employees (HCEs) over non-highly compensated employees (NHCEs). The Actual Deferral Percentage (ADP) test compares average deferrals across these two groups; the Actual Contribution Percentage (ACP) test applies to employer matching contributions. Plans that fail testing must either refund excess contributions to HCEs, make corrective contributions to NHCEs, or recharacterize contributions—each option with distinct tax and operational implications. Safe harbor plan designs (including safe harbor matching or nonelective contributions) exempt plans from ADP/ACP testing.

The IRS Employee Plans Compliance Resolution System (EPCRS) provides three correction pathways for retirement plan qualification failures: the Self-Correction Program (SCP) for insignificant failures that meet specific requirements; the Voluntary Correction Program (VCP) for significant failures self-identified before IRS examination; and the Audit CAP for failures discovered during examination, which involves negotiated sanctions. Using EPCRS proactively is almost always preferable to waiting for examination discovery, as sanctions increase substantially when problems are found by the IRS.

Trust compliance is governed primarily by state law, including the Uniform Trust Code adopted in many states, which requires trustees to provide annual accountings to beneficiaries, respond to beneficiary information requests, and maintain records sufficient to support a full accounting. Charitable trusts are subject to additional state oversight and must file IRS Form 990-PF (for private foundations) or Form 5227 (for split-interest trusts such as charitable remainder trusts).

Why This Matters in Wealth & Asset Operations

Compliance failures in retirement and trust administration carry consequences that extend far beyond monetary penalties. Plan disqualification—the most severe outcome of a qualification failure—eliminates the tax-favored status of all plan contributions and earnings retroactively, creating immediate and substantial tax liability for all participants. Even without disqualification, ERISA civil penalties (up to $250 per day for missing participant disclosures, $250 per day for late Form 5500 filings) accumulate rapidly when compliance deadlines are missed.

DOL enforcement has intensified significantly in recent years, with a particular focus on late contribution remittances, fee reasonableness, cybersecurity practices for participant data, and missing participant obligations. Institutions serving as service providers to retirement plans are increasingly subject to DOL scrutiny of their own fee structures and fiduciary status disclosures. Being prepared for an examination—with organized, complete records and a demonstrable compliance process—is both a legal obligation and a competitive differentiator.

For operations teams, compliance means building regulatory requirements into every workflow from the outset: contribution remittance timelines, testing deadlines, disclosure distribution dates, and Form 5500 filing windows must all be calendared and monitored proactively. Reactive compliance—responding to problems only after they arise—is significantly more expensive, both financially and reputationally, than prevention.

Core Concept

Form 5500 (Annual Return/Report of Employee Benefit Plan) — The primary annual reporting document filed by ERISA-covered retirement and welfare benefit plans with the DOL (through the EFAST2 electronic filing system). Form 5500 discloses plan demographics, financial condition, service providers, funding status (for defined benefit plans), and compliance certifications. Large plans must attach CPA-audited financial statements. The filing deadline is seven months after the plan year-end (typically July 31 for calendar-year plans), with a two-and-a-half-month extension available.

Employee Plans Compliance Resolution System (EPCRS) — The IRS's comprehensive correction framework that allows plan sponsors and administrators to voluntarily identify and correct retirement plan qualification failures, restoring the plan's qualified status and protecting participants' tax benefits. EPCRS encompasses three programs: the Self-Correction Program (SCP), the Voluntary Correction Program (VCP), and the Audit CAP. The availability and cost of each program depend on the nature and significance of the failure and whether the IRS has already initiated an examination.

These two frameworks—mandatory reporting through Form 5500 and voluntary correction through EPCRS—represent the primary tools for maintaining and restoring retirement plan compliance in wealth and asset operations.

How Compliance Requirements Are Managed in Portfolio Systems

Retirement and trust compliance is supported by several integrated operational components:

• Compliance Calendar Module — Maintains a plan-specific calendar of all regulatory deadlines: nondiscrimination testing completion, Form 5500 filing, participant disclosure distributions, RMD processing windows, fidelity bond renewals, and plan document restatement cycles. Automated alerts notify responsible parties in advance of each deadline.
• Nondiscrimination Testing Engine — Compiles employee classification data (HCE vs. NHCE), contribution rates, and compensation information to run ADP, ACP, and top-heavy tests annually, generating a test results report with correction options if a test fails.
• Form 5500 Data Aggregation Module — Consolidates participant counts, plan asset values, contribution and distribution totals, and service provider information from the recordkeeping and custody platforms into the data fields required for Form 5500 preparation, reducing manual data collection and transcription errors.
• Participant Disclosure Tracking System — Records the distribution of required disclosures (SPD, quarterly benefit statements, 404a-5 fee disclosures, blackout notices) to each participant, maintaining delivery confirmation records to support ERISA disclosure compliance documentation.
• EPCRS Correction Tracking Module — Documents identified failures, the correction methodology elected, correction calculations (e.g., missed contributions with earnings), correction execution records, and the final VCP submission or SCP documentation retained in the plan file.
• Examination Readiness Repository — Maintains an organized, indexed archive of all plan documents, trust agreements, amendment history, Form 5500 filings, participant disclosures, testing results, correction records, and service provider agreements in a format that supports rapid document production in response to a DOL or IRS information request.

The Main Layers of Retirement and Trust Compliance Administration

Retirement and trust compliance administration operates across six functional layers:

• Plan Document and Qualification Layer — Maintains the plan document, adoption agreement, and amendment history in a current, IRS-compliant form; manages the plan restatement cycle required by the IRS (approximately every 6 years for pre-approved plans); and ensures that plan operations match plan document provisions.
• Annual Testing and Certification Layer — Conducts ADP/ACP, top-heavy, coverage, and minimum participation tests on the required annual schedule; prepares corrective distributions or contributions where needed; and certifies test results for Form 5500 reporting.
• Reporting and Disclosure Layer — Prepares and files Form 5500 (and required schedules and attachments); distributes required participant disclosures on required schedules; and maintains delivery records for all disclosures.
• Prohibited Transaction and Correction Layer — Monitors for prohibited transactions and other operational failures; self-corrects eligible failures under SCP; prepares VCP submissions for significant failures; and maintains correction documentation in the plan file.
• Participant Rights and Remediation Layer — Ensures participants receive their full entitlement to benefits (including locating missing participants), responds to benefit claims and appeals on required timelines, and processes qualified domestic relations orders (QDROs) in accordance with plan procedures.
• Examination Defense Layer — Maintains examination-ready records; prepares responses to DOL and IRS information requests; coordinates with legal counsel on examination strategy; and implements any examination findings through corrective action plans.

How Compliance Requirements Differ Across Plan Types and Regulators

IRS compliance focuses primarily on plan qualification: ensuring that contributions, vesting, distributions, and testing all conform to the requirements that entitle the plan—and its participants—to tax-favored treatment. IRS qualification failures range from minor operational errors (a single participant receiving the wrong distribution amount) to structural failures (a plan document that has never been restated to reflect statutory changes). The IRS's EPCRS provides a clear, structured pathway for addressing both, with the voluntary correction options offering significantly better outcomes than examination-discovered failures.

DOL compliance focuses primarily on fiduciary conduct and participant protection: plan assets are invested prudently for participants' exclusive benefit; participants receive required disclosures; service providers are reasonable; and contributions are remitted timely. DOL enforcement actions are more likely to result in civil penalties, restoration orders, and fiduciary removal than IRS qualification-focused corrections. The DOL's Voluntary Fiduciary Correction Program (VFCP) allows plan fiduciaries to self-correct certain prohibited transactions and operational failures and receive a no-action letter from the DOL.

Trust compliance under state law is administered primarily through the courts (beneficiary petitions and accountings) and state attorneys general (for charitable trusts). Unlike ERISA plans, trusts do not have a mandatory annual filing requirement with a single regulatory body—compliance is demonstrated through timely, accurate accountings to beneficiaries and responsive administration of distribution requests and trustee decision-making. State banking regulators may also examine corporate trustees as part of their trust company oversight functions.

Operational Workflow for Annual Compliance Administration

The standard annual compliance workflow for an employer-sponsored retirement plan proceeds as follows:

1. January–February: Compile year-end participant data (compensation, deferrals, employer contributions, hours of service) from payroll records and the recordkeeping platform; verify data completeness against participant census.
2. February–March: Run ADP/ACP nondiscrimination tests, top-heavy determination, coverage test (IRC 410(b)), and minimum participation test. Document results and determine whether corrective action is required.
3. March–April: If tests fail, calculate corrective refunds (excess contributions to HCEs) or corrective contributions (QNECs or QMACs to NHCEs); process corrections before the applicable deadline (generally 2.5 months after plan year-end for refunds without 10% excise tax; 12 months for extended correction options).
4. April–June: Gather Form 5500 data: plan asset values, contribution and distribution totals, participant counts (beginning and end of year, active and terminated vested), service provider information, and fidelity bond details. Prepare Form 5500 and required schedules.
5. June: Engage the independent qualified public accountant for the large-plan audit, if applicable; provide requested plan documents, financial data, and participant records.
6. July 31: File Form 5500 (for calendar-year plans) electronically through EFAST2, or file Form 5558 for an automatic 2.5-month extension if the audit is not yet complete.
7. Throughout the year: Distribute required participant disclosures on required schedules; process benefit claims and appeals on required timelines; monitor for prohibited transactions and operational failures; update the compliance calendar for the following year.
8. As needed: If a qualification failure is identified, evaluate whether it is eligible for SCP; if not, prepare VCP submission promptly to avoid examination discovery. Document all correction steps.
9. Upon DOL or IRS contact: Acknowledge promptly; gather all requested documents from the examination readiness repository; engage legal counsel; coordinate response through the examination defense workflow.

Real-World Example

A 401(k) plan TPA completes nondiscrimination testing in February and finds that the plan has failed the ADP test: the average HCE deferral rate is 8.2%, while the average NHCE deferral rate is 4.7%, producing a permissible HCE rate of 6.7% (NHCE rate plus 2%). The plan sponsor has two primary options: refund excess contributions to HCEs (reducing their deferrals to bring the average down to 6.7%) or make a qualified nonelective contribution (QNEC) to NHCEs to raise their average deferral rate to the required level.

The TPA calculates that corrective refunds of $31,400 in excess deferrals must be returned to the five affected HCEs, with earnings through the correction date. The refunds must be processed by March 15 (2.5 months after the December 31 plan year-end) to avoid the 10% excise tax that would apply to excess contributions returned after that date. The TPA processes the corrective distributions, withholds income taxes at a 20% mandatory rate, and generates Form 1099-R for each affected HCE.

The plan sponsor also reviews the prior year's Form 5500 and discovers that the fidelity bond was not renewed timely—there was a 45-day lapse in coverage. The TPA advises that this is a prohibited transaction (operating without required bond coverage) eligible for correction under the DOL's Voluntary Fiduciary Correction Program. The plan sponsor obtains retroactive coverage from the bonding company, files a VFCP submission documenting the lapse and correction, and receives a DOL no-action letter confirming the correction. Both the ADP test failure and the bond lapse are documented in the plan's compliance file and disclosed appropriately on the Form 5500.

Common Mistakes

Mistake 1: Missing the Form 5500 filing deadline without requesting an extension

Filing Form 5500 late without having timely requested an extension (Form 5558) triggers DOL penalties of $250 per day, up to $150,000 per plan year. The DOL's Delinquent Filer Voluntary Correction Program (DFVCP) offers significantly reduced penalties for late filers who self-identify before DOL contact.

Mistake 2: Failing to provide required participant disclosures on time

Missing deadlines for Summary Plan Descriptions, quarterly benefit statements, or 404a-5 fee disclosures triggers per-participant penalties and creates fiduciary exposure. Tracking delivery of each required disclosure—including method and date—is essential to demonstrate compliance.

Mistake 3: Allowing plan operations to diverge from the plan document

Operating the plan in a manner inconsistent with the plan document—such as allowing loans when the document prohibits them, or applying the wrong vesting schedule—creates a qualification failure that may require EPCRS correction. Regular plan document reviews and operational audits are essential to catch and correct operational failures before they become entrenched.

Mistake 4: Failing to run nondiscrimination tests on time or using incorrect compensation data

Using incorrect employee compensation figures, misclassifying employees as HCE or NHCE, or failing to complete testing by the correction deadline can invalidate test results and force more costly corrections—or trigger examination-discovered failures with higher penalty exposure.

Mistake 5: Waiting for examination to address known compliance failures

Identifying a qualification failure or prohibited transaction and choosing not to correct it—or delaying correction—dramatically increases the cost and severity of the outcome. EPCRS and VFCP sanctions are a fraction of the penalties and corrective actions imposed under examination, and self-correction preserves the plan sponsor's good faith, which may reduce sanctions further.

Practical Exercises

Exercise 1: ADP Test Calculation and Correction

A 401(k) plan has 8 HCEs with an average deferral rate of 9.4% and 52 NHCEs with an average deferral rate of 5.1%. Determine whether the plan passes or fails the ADP test (using the 1.25x multiplier method and the 2%/2x method). If it fails, calculate the total excess deferrals that must be returned and explain the timing and tax treatment of the corrective refunds.

Exercise 2: Form 5500 Filing Timeline

A calendar-year 401(k) plan has 210 participants at the beginning of the plan year. Identify: (a) whether the plan is a "large plan" subject to independent audit requirements; (b) the initial Form 5500 filing deadline; (c) the extended filing deadline if Form 5558 is timely filed; and (d) the daily penalty rate for each day the filing is late without a timely extension request.

Exercise 3: EPCRS Correction Program Selection

A plan sponsor identifies three failures: (a) a participant received a hardship withdrawal in excess of their available elective deferral balance by $3,200 three years ago—the plan has no IRS examination pending; (b) the plan failed to implement the correct vesting schedule for new hires starting 18 months ago, affecting 12 participants; and (c) the plan failed ADP testing two years ago and corrective refunds were not made within the required window. For each failure, identify the most appropriate EPCRS correction program and outline the correction steps.

Exercise 4: Compliance Calendar Design

Design a 12-month compliance calendar for a calendar-year 401(k) plan with 150 participants. Include all required testing deadlines, participant disclosure dates, Form 5500 filing windows, fidelity bond renewal review, and plan document review milestones. For each item, identify the responsible party (plan sponsor, TPA, recordkeeper, auditor) and the consequence of missing the deadline.

Key Terms

Form 5500 — The annual report filed by ERISA-covered retirement plans with the DOL, disclosing plan demographics, financial condition, service providers, and compliance certifications; large plans must attach audited financial statements.

Nondiscrimination Testing — Annual IRS-required tests for 401(k) and other defined contribution plans, including the ADP test (comparing deferral rates of HCEs and NHCEs) and ACP test (comparing employer matching contribution rates), designed to prevent plans from disproportionately benefiting highly compensated employees.

Highly Compensated Employee (HCE) — An employee who, for the current plan year, was a 5% owner at any time during the year, or who earned more than the IRS-established compensation threshold ($155,000 in 2024) in the prior plan year.

Qualified Nonelective Contribution (QNEC) — An employer contribution to a 401(k) plan that is 100% vested immediately and satisfies specific IRS requirements, used as one method to correct a failed ADP or ACP test by boosting NHCE contribution rates.

Employee Plans Compliance Resolution System (EPCRS) — The IRS framework for identifying and correcting retirement plan qualification failures, consisting of three programs: Self-Correction Program (SCP), Voluntary Correction Program (VCP), and Audit CAP.

Self-Correction Program (SCP) — An EPCRS pathway allowing plan sponsors to correct eligible operational failures without IRS approval or submission, available for insignificant failures at any time and for significant failures within a defined correction window.

Voluntary Correction Program (VCP) — An EPCRS pathway requiring formal IRS submission and approval, available for significant failures not yet under examination; corrections are negotiated with the IRS and result in a compliance statement confirming plan qualification.

Audit CAP — The EPCRS program for failures discovered during an IRS examination; corrections are mandatory and sanctions are negotiated with the IRS, typically resulting in significantly higher costs than voluntary correction.

Summary Plan Description (SPD) — A plain-language document required by ERISA that describes the plan's key features, eligibility, benefits, rights, and procedures; must be provided to participants within 90 days of plan entry and within 210 days of a new plan's adoption.

Qualified Domestic Relations Order (QDRO) — A domestic relations court order that assigns a portion of a plan participant's retirement benefits to an alternate payee (typically a former spouse) without triggering plan disqualification or early withdrawal penalties.

Knowledge Check

Question 1
What is the initial filing deadline for Form 5500 for a retirement plan with a December 31 plan year-end, and what automatic extension is available?

A. June 30; no extension available
B. July 31; 2.5-month extension to October 15 with timely Form 5558 filing
C. April 15; 6-month extension to October 15
D. December 31 of the following year; no extension needed

Question 2
Under the ADP test, a 401(k) plan's NHCEs have an average deferral rate of 3.0%. Using the 1.25x multiplier method, what is the maximum permissible average deferral rate for HCEs?

A. 3.0%
B. 3.75%
C. 5.0%
D. 6.0%

Question 3
Which EPCRS correction program requires a formal submission to the IRS and results in a compliance statement confirming plan qualification?

A. Self-Correction Program (SCP)
B. Voluntary Correction Program (VCP)
C. Audit CAP
D. Delinquent Filer Voluntary Correction Program (DFVCP)

Question 4
What is a Qualified Domestic Relations Order (QDRO) and what is its primary operational significance for retirement plan administration?

A. A court order requiring a plan sponsor to increase employer contributions to correct a failed nondiscrimination test
B. A domestic relations court order assigning a portion of a plan participant's benefits to an alternate payee without triggering plan disqualification
C. An IRS order requiring distribution of excess deferrals to highly compensated employees
D. A DOL order requiring restoration of improperly invested plan assets

Question 5
What is the primary advantage of self-correcting a retirement plan failure under EPCRS before it is discovered in an IRS examination?

A. Failures corrected before examination are permanently exempt from future IRS scrutiny
B. Voluntary correction through SCP or VCP typically results in significantly lower sanctions than examination-discovered failures under Audit CAP
C. Self-correction eliminates the need to file Form 5500 for the year of the failure
D. The IRS waives all excise taxes for voluntarily corrected failures regardless of severity

Lesson Summary

• Retirement plan compliance spans two primary regulatory jurisdictions: the IRS (plan qualification and tax treatment) and the DOL (fiduciary conduct, reporting, and participant protection), with state law governing trust compliance.
• Form 5500 is the primary annual reporting document for ERISA plans, filed by July 31 for calendar-year plans; large plans must attach audited financial statements prepared by an independent CPA.
• Nondiscrimination testing (ADP, ACP, top-heavy, coverage) ensures 401(k) plans do not disproportionately benefit HCEs; failed tests must be corrected by refunding excess contributions or making corrective employer contributions within required windows.
• The IRS Employee Plans Compliance Resolution System (EPCRS) provides three correction pathways—SCP, VCP, and Audit CAP—with voluntary correction consistently yielding better outcomes than examination-discovered failures.
• Proactive compliance requires a detailed annual compliance calendar, systematic participant disclosure tracking, organized record retention, and an examination readiness repository that supports rapid document production for DOL and IRS requests.
• Compliance is not a separate function from operations—it is the cumulative outcome of every operational decision made throughout the account's lifecycle, from contribution intake through beneficiary distribution and final plan termination.

Looking Ahead

This lesson concluded Unit 10 by examining the regulatory and compliance framework governing retirement and trust account administration. With the full lifecycle of retirement and trust accounts now established—from structural setup through tax treatment, fiduciary obligations, distribution mechanics, custodial controls, and regulatory compliance—students are prepared to advance to the next unit, which will explore additional specialized account structures and advanced portfolio administration topics within the Wealth & Asset Operations Track.

Study Support

• Templates & Tools

  Use annual compliance calendars, ADP/ACP test calculation worksheets, Form 5500 data preparation checklists, EPCRS correction documentation templates, and participant disclosure tracking logs to build practical compliance administration skills.

• Glossary Support

  Review key terms including Form 5500, nondiscrimination testing, HCE, QNEC, EPCRS, SCP, VCP, Audit CAP, Summary Plan Description, and Qualified Domestic Relations Order.

• Case Examples

  Study real-world cases involving failed ADP test corrections, DOL enforcement actions for late Form 5500 filings, EPCRS submissions for operational failures, missing participant remediation programs, and plan disqualification avoidance through timely EPCRS correction.

Practical Application

By the end of this lesson, students should be able to design a complete annual compliance calendar for a calendar-year 401(k) plan, calculate and interpret ADP test results and identify correction options, select the appropriate EPCRS correction program for a given failure scenario, identify Form 5500 filing requirements and deadlines, and explain the elements of an examination-ready compliance record system that supports both DOL and IRS review.

Next Lesson

Proceed to Unit 11 to continue your study of specialized account structures and advanced portfolio administration within the Wealth & Asset Operations Track.

Lesson Navigation