From reviewing state enforcement actions and DOL compliance letters across the insurance sector, the Georgia action’s scale dwarfs anything previously seen at the state level for mental health parity. Commissioner John F. King’s January 12, 2026, orders imposed nearly $25 million in fines against 11 commercial health insurers after market conduct examinations revealed more than 6,000 parity violations across 22 companies. Oscar Health alone absorbed a $10.2 million penalty. This was not a one-off action: King had already levied over $20 million in a separate August 2025 enforcement round, bringing Georgia’s combined MHPAEA fines to approximately $45 million in under six months.

That figure is staggering when measured against the national baseline. Over the prior six years, 10 states combined had imposed roughly $31 million in mental health parity fines. Georgia exceeded that total in a single action. The enforcement signal is clear, and the actuarial implications reach well beyond Georgia’s borders. With the Trump administration pausing enforcement of the September 2024 federal MHPAEA final rule and the DOL acknowledging that every comparative analysis it has reviewed to date was initially found deficient, state regulators are stepping into the vacuum. Health plan actuaries who build NQTL comparative analyses, price behavioral health benefits, or advise plan fiduciaries need to understand what Georgia found, how regulators are evolving their enforcement methodology, and where the compliance gaps persist.

$25M
Fines Against 11 Georgia Insurers (Jan 2026)
6,000+
Parity Violations Found Across 22 Companies
74%
DOL Health Plan Audits Finding Violations (2022-2024)

What Georgia Found: The $25 Million Breakdown

The Georgia Office of the Commissioner of Insurance (OCI) conducted comprehensive market conduct examinations of 22 commercial health insurers using calendar year 2022 claims data. The examinations were triggered by a first-of-its-kind mental health parity data call report produced on August 15, 2023, under Georgia’s Mental Health Parity Act framework established by HB 1013 (2022). That law required annual data calls on insurer compliance, annual compliance reports from insurers, a consumer complaint repository, and an 85% medical loss ratio requirement for behavioral health services.

The violations concentrated in operational parity failures rather than clinical judgments. Regulators examined whether insurers’ systems and administrative processes treated mental health and substance use disorder (MH/SUD) services less favorably than comparable medical and surgical (M/S) services. The specific NQTL categories where violations clustered included:

  • Prior authorization requirements applied more restrictively to MH/SUD services than to comparable M/S services
  • Utilization management rules with inconsistent standards between MH/SUD and M/S services
  • Benefit classification inconsistencies imposing more restrictive limits on MH/SUD coverage
  • Post-service denials with unclear or unjustified medical necessity rationale for behavioral health claims
  • Deficient member communications providing inadequate explanations of benefits and denial notifications for MH/SUD claims
  • Concurrent care review procedures applied more stringently to MH/SUD inpatient and outpatient services

Fines were assessed on a per-violation basis. The 11 insurers receiving penalties were ordered to implement mandatory corrective action plans under ongoing departmental oversight, with a 10-day appeal window from order receipt.

Insurer Fine Amount
Oscar Health Plan of Georgia $10,247,000
Anthem BCBS Healthcare Plan of Georgia $4,619,000
Kaiser Foundation Health Plan of Georgia $2,586,000
Cigna Healthcare of Georgia $2,058,000
Aetna $1,843,000
Alliant Health Plans $926,000
Humana $821,000
UnitedHealthcare of Georgia $643,000
CareSource $527,000
Kaiser Permanente Insurance Company $289,000
Nippon Life Insurance Company of America $224,000
Total $24,783,000

One important caveat: as of late March 2026, none of the $25 million had been collected. Insurers retain the right to appeal, and the administrative hearing process can extend the timeline considerably. This pattern is not unusual in state insurance enforcement, but it does create a gap between the headline deterrent effect and actual financial consequences. Advocacy groups, including the Georgia Mental Health Policy Partnership, have noted this distinction publicly.

The Federal Enforcement Landscape: Accelerating, Then Pausing

Georgia’s enforcement does not exist in isolation. Federal MHPAEA enforcement by the DOL’s Employee Benefits Security Administration (EBSA) and CMS has been building steadily since the Consolidated Appropriations Act of 2021 strengthened NQTL comparative analysis requirements. But the trajectory took a sharp turn in May 2025.

EBSA enforcement through FY 2023: EBSA investigated 102 health plans in FY 2023, with 51 investigations involving MHPAEA compliance. Regulators found 31 MHPAEA violations across 17 investigations, including 10 involving financial limits, 4 involving quantitative treatment limitations (QTLs), and 16 involving NQTLs. One service provider removed a limitation on visits for autism spectrum disorder therapies, affecting over 15 million participants across 52 different plans.

Cumulative DOL enforcement (2021-2023): EBSA issued 199 initial letters requesting comparative analyses covering more than 480 NQTLs, followed by 183 insufficiency letters addressing more than 330 NQTLs. Corrections from these enforcement actions benefited more than 7.6 million participants across more than 72,000 plans. The staffing ratio underscores the scale challenge: EBSA has roughly 302 investigators, or approximately one investigator for every 13,900 plans it regulates. MHPAEA enforcement constitutes nearly 25% of EBSA’s total enforcement program.

CMS enforcement has intensified even faster. During the most recent reporting period (August 2023 through July 2025), CMS issued more than four times as many insufficiency letters and twice as many final determination letters as EBSA. Six plans received final noncompliance determinations for 10 NQTLs from CMS, versus five plans for seven NQTLs from DOL. CMS has only 15 investigators dedicated to MHPAEA enforcement, but its scope covers individual and small group markets where state-level enforcement may be thinner.

Then came the pause. On May 15, 2025, the Trump administration announced it would not enforce the 2024 MHPAEA final rule or pursue enforcement actions based on failures to comply during the litigation period, plus an additional 18 months. The announcement came in connection with ERIC v. HHS (Case No. 1:25-cv-00136, D.D.C.), where the ERISA Industry Committee challenged the final rule’s discriminatory factors prohibition and data evaluation requirements. The Tri-Agencies indicated they intend to “reconsider” the final rule, including whether to issue a notice of proposed rulemaking rescinding or modifying it.

The critical distinction for health plan actuaries: the 2013 MHPAEA regulations and the statute as amended by the Consolidated Appropriations Act of 2021 remain fully in effect. The pause applies only to the September 2024 final rule’s new provisions, including the discriminatory factors prohibition, the meaningful benefits standard, and the data evaluation requirements effective for plan years beginning January 1, 2026. The core NQTL comparative analysis requirement, the six-step comparative analysis framework, and the fiduciary certification obligation all predate the 2024 rule and remain enforceable.

More important for the immediate compliance calculus: state enforcement actions operate independently of the federal pause. Georgia’s authority under O.C.G.A. §33-24-28.3 and HB 1013 is not constrained by the ERIC v. HHS litigation or the Tri-Agency enforcement posture.

Oliver Wyman’s March 2026 Warning: Most Plans Cannot Demonstrate Compliance

Oliver Wyman published an analysis in March 2026 titled “Why Insurers Must Act on Mental Health Parity Now” that quantified the compliance gap health plans face. The central finding was unambiguous: across four consecutive annual DOL reports to Congress, few of the initial NQTL comparative analyses submitted were sufficient to demonstrate compliance. This persistent failure rate suggests that most plans have not yet developed the institutional competency required for defensible parity documentation.

Oliver Wyman identified three categories of comparative analysis deficiency that appear repeatedly in enforcement actions:

  1. Insufficient explanation of NQTL factor sourcing. Plans must state where the factors used to design each NQTL were derived, whether from clinical guidelines, federal or state law, actuarial data, or operational considerations. Vague references to “industry standards” or “clinical best practices” without identifying the specific source have consistently been found deficient.
  2. Vague descriptions of NQTL application. Plans must describe the step-by-step processes used to apply each NQTL, including the teams involved, the timelines followed, and the criteria used at each decision point. Regulators have rejected analyses that describe policies in the abstract without demonstrating how those policies translate into operational practice.
  3. Lack of comprehensive comparative and operational data. Plans must provide sufficient quantitative data to validate their parity claims across all six benefit classifications. This includes denial rates, prior authorization approval rates, turnaround times, out-of-network utilization, and provider reimbursement benchmarks. Aggregate data without classification-level granularity has been consistently rejected.

The priority enforcement targets identified by Oliver Wyman and confirmed by DOL reporting include network adequacy and composition, treatment exclusions, prior authorization and concurrent review, network admission standards, and out-of-network reimbursement methodologies. These are precisely the NQTL categories where actuarial analysis is most directly required.

The Access Disparity Data Underlying Enforcement

Enforcement actions are not occurring in a data vacuum. The structural disparities between MH/SUD and M/S benefit access remain substantial and have, by some measures, worsened over the past decade.

The 2024 MHPAEA Report to Congress documented persistent out-of-network utilization gaps. Seventy-three percent of total dollars paid for substance use disorder care went to out-of-network providers, compared to 42% for mental health care and only 17% for medical and surgical care. These ratios have not materially improved since Milliman’s landmark 2019 parity research, which documented that behavioral health inpatient services were 5.2 times more likely to be rendered out-of-network compared to M/S inpatient, up from 2.8 times in 2013.

Denial rate disparities compound the access problem. The American Psychological Association’s 2024 Parity Report found that behavioral health services face denial rates 85% higher than comparable medical services. DOL found violations in approximately 74% of health plans audited between 2022 and 2024, a rate that suggests noncompliance is the norm rather than the exception.

For health plan actuaries, these access disparity metrics are not merely compliance indicators. They directly affect the accuracy of utilization assumptions in behavioral health pricing. If a plan’s network is structured in a way that drives MH/SUD services out of network at rates far exceeding M/S services, the observed in-network utilization data reflects suppressed demand rather than the true utilization level that would emerge under a parity-compliant network. Pricing behavioral health benefits using this suppressed-demand data systematically understates the cost of parity-compliant coverage and creates a cycle where inadequate rates make it harder to build adequate networks.

State Enforcement Beyond Georgia: The National Pattern

Georgia’s action is the largest, but it is part of a broader pattern of state-level enforcement acceleration. In the first six weeks of 2026 alone, state regulators imposed over $40 million in health insurance fines nationally. California levied a $15 million fine against Anthem Blue Cross for member complaint mishandling, plus $1.3 million against Centene’s Health Net for provider payment disputes. Washington state imposed $300,000 (with $100,000 suspended) against Kaiser Foundation for mental health parity violations.

Historical state enforcement provides additional context. New York imposed more than $2.5 million in parity fines across multiple plans between 2017 and 2025. Illinois levied $500,000 in parity fines in 2023 and announced explicitly that it would not waive or defer enforcement on any provision of the 2024 final rules. Washington fined UnitedHealthcare $500,000 for parity violations in 2023. California reached a $55 million settlement with L.A. Care Health Plan in 2024 that included MH/SUD violations.

Illinois’s posture is particularly notable because it signals that at least some states intend to enforce the 2024 final rule provisions regardless of the federal enforcement pause. Health plans operating across multiple states face a patchwork enforcement landscape where compliance standards may differ by jurisdiction, and the strictest state standard effectively sets the floor.

The financial proportionality question is also worth noting. For Anthem’s parent company, Elevance Health, with $171.3 billion in annual revenue, a $15 million fine represents 0.009% of revenue. For UnitedHealth Group at $371.6 billion, the ratio is even smaller. At current penalty levels, fines function more as reputational signals and enforcement precedents than as direct financial deterrents. Georgia legislators have recognized this dynamic.

Georgia Considers Raising the Penalty Caps

In February 2026, the Georgia House Insurance Committee took up House Bill 1262, which would increase the per-violation penalty caps under the state’s parity enforcement framework. The proposed changes would raise caps for unknowing violations from $2,000 to $10,000 per violation and for knowing violations from $5,000 to $25,000 per violation. The current caps had been unchanged for 15 years (unknowing) and 30 years (knowing).

House Insurance Committee Chairman Eddie Lumsden framed the rationale directly: “While those penalties may once have represented a meaningful deterrent, inflation and market growth have significantly eroded the impact that those fines might have.” A companion bill, House Bill 1344, would increase nearly 40 additional fines and strengthen fraud enforcement. Senate Bill 131 would create a parity enforcement review panel with ongoing oversight authority.

If HB 1262 passes, the math changes significantly. Under the current $5,000 cap per knowing violation, Georgia’s 6,000+ violations yielded approximately $25 million. At a $25,000 cap, the same violation count could produce fines exceeding $100 million. Even the unknowing violation cap increase from $2,000 to $10,000 would quintuple the potential penalty for the most common violation category. For insurers operating in Georgia, the cost-benefit calculation around compliance investment shifts materially if these caps increase.

The Federal Pause Creates a State Enforcement Vacuum

The interaction between the federal enforcement pause and state enforcement acceleration creates a complex compliance environment for health plan actuaries. On one side, the Trump administration’s decision not to enforce the 2024 final rule during the ERIC v. HHS litigation reduces the immediate federal enforcement risk for the rule’s newest provisions. On the other side, states like Georgia and Illinois are demonstrating willingness to enforce parity requirements aggressively under their own statutory authority, and the underlying 2013 federal regulations and CAA 2021 requirements remain in full effect.

This creates several practical considerations for actuaries building compliance infrastructure:

The comparative analysis obligation has not changed. The requirement to produce NQTL comparative analyses dates to the CAA 2021, not the 2024 final rule. Plans must still be prepared to produce these analyses within 45 days of a request from regulators, participants, or beneficiaries. Georgia’s market conduct examination approach, using data calls to identify potential violations before requesting formal analyses, demonstrates that states are developing their own enforcement methodologies independent of the federal framework.

State data call authority extends the compliance surface. Georgia’s HB 1013 approach of requiring annual parity data calls provides a model that other states may replicate. A data call requirement means that regulators do not need to wait for participant complaints or DOL referrals to initiate enforcement. They can proactively identify outliers in claims denial rates, prior authorization patterns, and network adequacy metrics, then target market conduct examinations accordingly. This shifts the enforcement model from reactive to proactive and substantially increases the probability of detection for noncompliant plans.

Multi-state plans face the strictest-state problem. A national carrier operating in Georgia, Illinois, California, and New York faces enforcement standards from regulators with different priorities, different penalty structures, and different data call requirements. Building a compliance infrastructure that meets only the minimum standard in each state creates ongoing risk; building to the strictest standard across all states is operationally more efficient but may require greater upfront investment.

The Actuarial Compliance Framework: What Plans Need Now

From tracking enforcement patterns and DOL insufficiency letters over several years, a practical compliance framework for health plan actuaries emerges. The framework addresses the specific deficiency categories that regulators have consistently identified.

Step 1: NQTL inventory and classification mapping. Catalog every NQTL applied to the plan, including prior authorization, concurrent review, step therapy, network admission standards, reimbursement rate determination methodologies, and benefit exclusions. Map each NQTL to all six benefit classifications (inpatient in-network, inpatient out-of-network, outpatient in-network, outpatient out-of-network, emergency care, and prescription drugs). For each cell in the resulting matrix, document whether the NQTL applies to MH/SUD benefits, M/S benefits, or both.

Step 2: Factor sourcing documentation. For every NQTL, document the specific factors used in its design and the source of each factor. If prior authorization criteria reference clinical guidelines, cite the specific guidelines and edition. If reimbursement rates benchmark to a fee schedule, identify the fee schedule, the percentile used, and the effective date. If network admission standards reference credentialing requirements, document the specific requirements and their provenance. Vague citations to “industry practice” or “clinical judgment” have been consistently rejected by regulators.

Step 3: Operational process documentation. Document the step-by-step processes used to apply each NQTL in practice, not merely as written in policy documents. Identify the teams involved, the decision criteria at each step, the timelines followed, and any discretionary judgment points. Georgia’s enforcement focused specifically on operational parity failures, meaning that even facially neutral policies can produce violations if they are applied differently to MH/SUD and M/S claims in practice.

Step 4: Quantitative comparative analysis. Build classification-level comparisons for each NQTL using claims data. Key metrics include claims denial rates (number and percentage denied, MH/SUD versus M/S, by classification), prior authorization approval and denial rates with turnaround times, provider reimbursement rates benchmarked to Medicare fee schedules, out-of-network utilization rates, percentage of in-network clinicians actively submitting claims (the “ghost network” test), time and distance standards, and appeals and overturn rates. The “actively submitting claims” metric is particularly important because provider directory counts routinely overstate actual network availability for behavioral health providers.

Step 5: Material difference identification and remedial action. Where the data shows material differences in access between MH/SUD and M/S benefits, document the difference, assess whether it results from the design or application of the NQTL, and implement corrective actions. Potential remedial actions include adjusting provider reimbursement rates to achieve network adequacy, modifying prior authorization criteria to reduce disparate denial rates, expanding telehealth access for behavioral health services, and conducting targeted provider recruitment. Document the actions taken and their measurable effects.

Step 6: Perpetual readiness. The comparative analysis must be available within 45 days of a request under the CAA 2021 provisions (or within 10 business days under the 2024 final rule, if ultimately enforced). This means building automated data pipelines that can refresh the analysis at least quarterly rather than assembling it manually for each request. Plans that treat the comparative analysis as a one-time compliance exercise rather than an ongoing monitoring obligation are the most likely enforcement targets.

Why This Matters for Health Plan Actuaries

Georgia’s enforcement action resets the risk calculus for health plan actuaries in three specific ways.

First, the scale of penalties signals that MHPAEA enforcement has moved from a low-probability, low-severity risk to a moderate-probability, material-severity risk. At $25 million for a single state action, with penalty cap increases under legislative consideration, the expected cost of noncompliance now plausibly exceeds the cost of building robust comparative analysis infrastructure for plans of any significant size.

Second, the state enforcement acceleration fills the gap left by the federal pause. Actuaries who interpreted the Trump administration’s enforcement pause as a reprieve from compliance investment may find themselves underexposed to state-level risk. Georgia, Illinois, and California have demonstrated that state regulators will enforce parity requirements independently, and their enforcement methodologies are becoming more sophisticated through data call programs and proactive market conduct examinations.

Third, the actuarial work product itself is under scrutiny. NQTL comparative analyses are fundamentally actuarial documents: they require data collection, metric construction, statistical comparison, and professional judgment about whether observed differences are material. Regulators have found that most submitted analyses are deficient. The quality of the actuarial work behind these analyses is no longer an internal matter; it is a regulatory compliance deliverable subject to external review, fiduciary certification, and, in Georgia’s case, potential per-violation penalties exceeding $10,000 each.

Plans that have deferred MHPAEA compliance investment are running out of runway. The Georgia enforcement model is replicable by any state with the statutory authority and political will to conduct parity data calls. The Oliver Wyman analysis confirms that the compliance gap is widespread. And the underlying access disparities, with behavioral health services denied at 85% higher rates and out-of-network utilization running at four times the M/S rate, provide regulators with ample evidence to justify continued enforcement escalation.

Further Reading

Sources