Transparency in the Post-CAA Era...Are We Ready?
Staff Writer

For many employers, the Consolidated Appropriations Act (CAA) has been treated as another annual compliance exercise. Submit the RxDC data. Complete the gag clause attestation. Ask the carrier, TPA, or PBM what they need. Check the box before the deadline, etc. That view, however, misses the bigger shift. The CAA did not simply change what employer-sponsored health plans have to report. It changed what plan sponsors are expected to understand. It moved the industry from passive compliance toward active oversight, and that shift is creating a new test for employers, brokers, consultants, PBMs, TPAs, and every vendor connected to the financial mechanics of a health plan.
Historically, the benefits industry has asked for more transparency. Now that transparency is beginning to arrive in force, the more important question is whether the industry is prepared to use it. More data does not automatically create better decisions. More reporting does not automatically create accountability. More disclosure does not automatically protect a plan sponsor from fiduciary risk. Transparency without interpretation can quickly become another form of confusion. This is the moment brokers and consultants must be prepared to meet.
Under the CAA, employers and group health plans are required to report prescription drug and health care spending information, including data related to high-cost drugs, frequently prescribed drugs, premiums, patient cost-sharing, and prescription drug rebates. The purpose is not simply to collect information for the sake of collecting information. The broader goal is to identify spending drivers, understand how rebates affect premiums and out-of-pocket costs, and promote greater transparency in healthcare and prescription drug pricing.
That means the law is not just asking, “Did you report?” It is asking something much more important: “Do you understand what is happening inside your plan?” Reporting is the floor. Accountability is now the standard.
The old employer health plan model allowed too much distance between the plan sponsor and the financial mechanics of the plan. A vendor could manage the pharmacy benefit. A consultant could run the RFP. A PBM could negotiate rebates. A carrier or TPA could submit data. The employer could reasonably assume that if the vendors were handling the details, the plan was being managed responsibly. The CAA is now challenging that assumption. The Employee Retirement Income Security Act (ERISA) already requires fiduciaries of group health plans to act prudently and understand their responsibilities. The CAA brings that responsibility into sharper focus by requiring disclosures and data that may expose whether plan dollars are being spent, retained, rebated, redirected, or obscured. Transparency is becoming part of the evidence trail and will be expected as the natural outcome of fiduciary practice...not just a nice to have.
For self-funded employers especially, this matters. Can the employer explain how rebates are defined? Can it identify which dollars are passed through and which are retained? Can it see spread compensation? Can it verify pharmacy clawbacks, price protection payments, GPO fees, rebate aggregator arrangements, or other forms of indirect compensation? Can it audit the disclosures it receives? Can it determine whether the compensation paid to its PBM, broker, consultant, TPA, or affiliated entities is reasonable?
These questions are no longer theoretical. They are becoming central to fiduciary oversight. The industry is entering a period where plan sponsors suddenly receive more information than they have ever had access to before. That sounds like progress, and in many ways it is. Yet for many employers, this may feel like stepping into a room where the lights have suddenly been turned on. The information was always there, moving through contracts, rebate arrangements, specialty classifications, formulary decisions, pharmacy reimbursement logic, administrative fee structures, and affiliate relationships. The difference is that employers are now being pushed closer to the details. The CAA does not simply hand employers a flashlight. It opens the blinds.
That level of visibility can be disorienting. Plan sponsors may receive new reports, new compensation categories, new rebate data, new vendor disclosures, and new audit opportunities without knowing which items are routine, which are material, and which require immediate action. This is where the role of brokers and consultants must evolve. The next generation of benefits advisors will not be judged only by their ability to place coverage, run renewals, benchmark pricing, or manage open enrollment. They will be judged by their ability to help employers navigate transparency. Plan sponsors do not need a data dump. They need a fiduciary filter. A fiduciary filter helps an employer understand what the data means, where the risk sits, what questions should be asked, what contract terms should be reviewed, and what decisions should be documented. It turns transparency from a compliance output into a governance process. That distinction matters because transparency alone does not create accountability.
A plan can have reporting and still lack meaningful visibility. A contract can say “pass-through” and still contain exclusions. A PBM can promise “lowest net cost” while controlling the definitions that determine whether that promise is meaningful. A consultant can run an RFP while still steering employers toward arrangements that protect legacy economics. A dashboard can show savings while hiding the underlying mechanics that produced them. The CAA forces employers to look beyond the label and into the machinery.
This is especially important in pharmacy because the money rarely moves in one straight line. It can move through rebates, administrative fees, data fees, price protection, spread pricing, formulary incentives, specialty arrangements, rebate aggregators, GPOs, and pharmacy recoupments. When money can move through that many doors, accountability depends on whether the employer has the contractual right, data access, and expertise to follow it. Compliance teams may file the report. Fiduciaries still own the responsibility.
That is where many employers, by default, may be exposed. The CAA can easily become a task delegated to compliance, benefits administration, or a vendor portal. A vendor can help submit the file, yet the employer still needs to understand whether the submitted information reflects the plan’s actual economics. A consultant can help gather data, yet the employer still needs to understand whether that consultant has any direct or indirect compensation tied to the vendors being evaluated. A PBM can provide reports, yet the employer still needs to know whether those reports are complete, auditable, and aligned with the contract.
The employer does not have to perform every administrative task internally, but it does need a prudent process for understanding, questioning, documenting, and verifying the plan’s financial arrangements. That creates both pressure and opportunity for brokers and consultants. The pressure is obvious. Advisors can no longer rely on surface-level benchmarking, familiar vendor relationships, or broad assurances that a deal is “competitive.” The CAA era requires a deeper command of compensation flows, rebate definitions, contract language, claims logic, formulary incentives, specialty categorization, audit rights, and reconciliation mechanics.
The bottom line is this: employers are going to need help. Real help. Not because they are incapable or unsophisticated. They’ll need assistance because the system they are being asked to oversee has become extraordinarily more complex than it ever was. A strong broker or consultant can and should shield the employer from being overwhelmed by the sudden burst of transparency. That does not mean shielding the employer from the truth. It means protecting the employer from confusion, noise, and vendor-driven interpretations that do not fully serve the plan’s interests. The best advisors will help plan sponsors slow the process down, ask better questions, and connect disclosures to decisions. They will help employers move beyond asking, “Did we submit our RxDC report?” toward asking, “What did the data reveal?” They will help employers move beyond asking, “Did our PBM provide rebate information?” toward asking, “How are rebates defined, allocated, reconciled, and audited?” Most importantly, they will help employers move beyond asking, “Are we compliant?” toward asking, “Are we accountable?”
That is the real shift.
The CAA should not be viewed only as a regulatory burden. It gives employers a reason to reopen old assumptions. It creates a basis for stronger vendor questions. It supports better contract language. It gives fiduciaries a framework for demanding cleaner data. It helps shift the conversation from promised savings to verifiable economics. For employers who have felt locked out of their own pharmacy data, this is the moment to change the posture.
Ask for the claims detail. Ask for the rebate definitions. Ask for the compensation disclosures. Ask for the audit rights. Ask who gets paid when drug spend increases. Ask who benefits when a medication is placed on formulary. Most importantly, stop asking and start demanding. Accountability is not proven by saying, “We trusted our vendors.” It is proven by showing the questions asked, the data reviewed, the risks identified, and the decisions made on behalf of the plan and its participants are top priority. The industry asked for transparency. Now it must prove it is ready for it. For brokers and consultants, this is not a threat. It is an opportunity to become more valuable, more independent, and more aligned with the employers they serve.
The CAA did not just change what employers have to report. It changed what employers are expected to know. The future of health plan fiduciary responsibility will belong to plan sponsors who can look at their pharmacy benefit and say: We know where the money goes. We know how our vendors are paid. We know what our contracts allow. We know what our data shows and we have a process to verify it.
The real impact of the CAA is not just more paperwork...it’s bringing accountability into focus.