Federal regulators have issued new guidance that will affect how employers manage health plan data sharing for the rest of 2026. The update comes in response to a rise in cybersecurity incidents involving third-party administrators, payroll vendors, and benefits platforms. While the rules do not create new penalties, they clarify that employers—not vendors—are ultimately responsible for protecting employee health information.

Employee benefits managers are facing one of the busiest compliance years in more than a decade. Several major federal requirements are converging at the same time, and most of them carry real penalties for employers that miss deadlines or fail to document their efforts. The result is a mid-year “compliance crunch” that is catching many organizations off guard.

Pharmacy spending is once again the fastest growing component of employer health plans. Specialty drugs now account for more than half of total pharmacy spend, and GLP 1 medications for diabetes and weight management are reshaping budgets. Employers are feeling the pressure: rising premiums, unpredictable claims, and employee expectations for access to high cost therapies.

After several years of experimentation, many employers are tightening hybrid schedules or requiring more in-office days. This “return-to-office reset” is reshaping benefits strategies as organizations look for ways to support commuting employees, improve onsite experience, and maintain flexibility. What began as a workplace policy shift is now driving a broader rethinking of how benefits can reinforce culture, productivity, and retention.

A troubling new study reveals that the majority of employees are not using all of their paid time off (PTO), costing them and their employers.

Self funding is no longer just for large employers. In 2026, small and mid sized businesses are embracing level funded and partially self funded plans at record rates. Rising premiums, greater access to stop loss coverage, and improved data analytics are making self funding a viable option for groups as small as 25–50 employees.