Your 401(k) Plan Is Compliant. Why That Is Not the Same as Being Protected
Many employers view compliance with federal regulations as the ultimate measure of success for their 401(k) plan. They diligently complete annual filings, pass nondiscrimination testing, satisfy disclosure requirements, and receive confirmation that the plan meets the standards set by the Internal Revenue Service and the Department of Labor. This achievement provides a reassuring sense of accomplishment, leading many business owners and human resources professionals to conclude that their obligations have been fully met. After all, compliance is tangible, documented, and often verified by third-party administrators or auditors.
However, compliance represents only the minimum threshold required by law. It ensures that the plan avoids immediate penalties for technical violations, but it does not confirm that the plan delivers optimal value to participants or adequately safeguards the employer from longer-term risks. Meeting regulatory baselines does not automatically translate into reasonable fees, high-quality investment options, strong employee outcomes, or robust protection against fiduciary liability. In fact, numerous plans pass all compliance checks while harboring inefficiencies that erode retirement savings over time and expose sponsors to potential legal challenges.
Compliance delivers measurable documentation and external validation, yet it rarely addresses the quality of participant experiences or the long-term sustainability of retirement assets. A plan may pass every required test while still allowing fees to erode balances quietly, default investments to deliver mediocre results for the majority of participants who never change their allocations, or communication gaps to leave employees disengaged from one of their most valuable benefits. Recent analysis underscores the scale of this disconnect. According to a January 2025 study conducted by Abernathy Daley 401(k) Consultants, which reviewed the most recent Form 5500 filings for 764,729 retirement plans across the United States, approximately 84 percent of these plans display at least one red flag signaling potential regulatory or fiduciary concerns.
Of those, 43 percent carry regulatory infraction red flags that could invite civil penalties or litigation, while 76 percent exhibit egregious plan mismanagement red flags tied directly to fiduciary shortcomings. These figures reveal that more than 600,000 American companies operate plans that meet minimum filing and testing requirements but still expose themselves and their participants to unnecessary risks.
High fees represent one of the most pervasive yet least visible threats within otherwise compliant plans. Even when administrative and investment costs satisfy disclosure rules, they frequently exceed market benchmarks for plans of comparable size and complexity. According to the Investment Company Institute, 401(k) participants investing in equity mutual funds paid an average expense ratio of just 0.26 percent in 2024, a 66 percent decline from 0.76 percent in 2000. Target-date funds, now the most common default investment, averaged 0.29 percent, down 57 percent from 0.67 percent in 2008. These figures show that investment-level costs have fallen dramatically over the past two decades. However, total plan expenses—including recordkeeping, advisory, and administrative fees—can still be significantly higher, especially in smaller and mid-sized plans, meaning participants may pay more than they realize if oversight is limited.
The U.S. Department of Labor highlights just how meaningful fee differences can be over decades. In its guidance on plan fees, the DOL shows that if an employee begins with a $25,000 401(k) balance and earns 7 percent average annual returns over 35 years, the ending balance can vary dramatically depending on fees. At a 0.5 percent fee level, the account would grow to approximately $227,000. If fees are instead 1.5 percent, the ending balance drops to about $163,000, meaning that a single percentage‑point difference in fees can reduce retirement savings by 28 percent.
Default Investments: Compliance Does Not Guarantee Suitability in 401(k) plans
Default investment options present another area where compliance and optimal design diverge sharply. Most 401(k) participants, estimated at 80 percent or more in many plans, remain in the plan’s default fund throughout their tenure because they never make an active election. Qualified default investment alternatives, primarily target-date funds, satisfy regulatory safe harbors when properly selected and disclosed, yet compliance testing does not evaluate whether these options deliver competitive performance or appropriate risk-adjusted returns for the specific workforce demographics.
An analysis by Abernathy Daley found that more than 99 percent of examined corporate plans included at least one investment option for which a cheaper, higher-performing public-market alternative existed over both three- and five-year periods, with more than 70 percent containing at least ten such underperforming funds. When defaults carry higher expense ratios or fail to adjust glide paths effectively for the average participant age and risk tolerance, the consequences multiply across the entire participant population.
Employees who joined the plan years ago and never revisited their allocations may find their balances growing more slowly than expected, delaying retirement or forcing continued employment beyond desired timelines. Employers who assume regulatory approval equates to suitability miss the chance to refine defaults through periodic reviews that incorporate updated performance data, participant demographic shifts, and evolving market conditions. Plans that proactively align defaults with contemporary standards not only improve average outcomes but also reduce the likelihood of future claims alleging imprudent selection or monitoring.
Fiduciary Responsibility: Beyond Regulatory Checklists
Fiduciary responsibility extends far beyond satisfying compliance checklists. Under ERISA, plan sponsors and other fiduciaries must act prudently and solely in the interests of participants when selecting providers, monitoring fees and investments, and ensuring overall plan alignment with workforce needs. Compliance testing verifies operational accuracy but does not substitute for the ongoing duty of prudence, which requires documented processes, independent comparisons, and timely responses to changing circumstances.
The surge in ERISA litigation illustrates the gap. In 2025 alone, plaintiff firms filed approximately 155 fiduciary class-action lawsuits targeting defined contribution plans, many alleging excessive fees, imprudent investment retention, or misuse of forfeitures despite the plans having passed all routine regulatory reviews. Settlements in recent years have reached tens of millions of dollars per case, as seen in high-profile resolutions involving major employers. Personal liability for fiduciaries remains a real possibility, extending to individual board members or committee participants who cannot demonstrate prudent oversight.
Employers who treat fiduciary duties as synonymous with compliance expose themselves to claims that surface years later when participants compare their outcomes against benchmarks or market alternatives. Robust documentation of decision-making processes, regular independent reviews, and clear delegation to qualified advisors serve as the strongest defenses, transforming potential vulnerabilities into evidence of diligence.
Real-World Consequences: A Case Study in Hidden Vulnerabilities
Consider the practical implications for a mid-sized manufacturer whose plan passes every annual test yet incurs total costs near the upper end of industry ranges. Participants in the default target-date series may experience returns that lag lower-cost index alternatives by 50 to 100 basis points annually, a difference that compounds to tens of thousands of dollars less at retirement for typical workers. Employee surveys reveal confusion about matching contributions and hesitation to increase deferrals, contributing to turnover among younger staff who prioritize competitive benefits. When a routine Department of Labor inquiry or participant-initiated lawsuit eventually arises, the absence of proactive benchmarking and engagement records weakens the company’s position, even though all formal filings remain pristine.
The Path Forward: Implementing Intentional Oversight
Organizations that recognize these patterns and implement consistent oversight achieve measurably superior results. Regular benchmarking against peer plans of similar asset size and participant count reveals hidden cost savings that can be redirected toward richer matching formulas or enhanced education. Periodic plan-design audits ensure eligibility rules, vesting schedules, and automatic features align with current workforce composition and labor-market realities. Default-fund reviews incorporate updated performance metrics and demographic data, protecting the majority of passive savers. Comprehensive communication strategies, including personalized projections and workshops, foster higher contribution rates and greater appreciation for the benefit. Thorough records of every fiduciary decision, supported by independent expert input where appropriate, demonstrate the prudence required under ERISA and deter potential challenges.
Long-Term Benefits of Proactive Management of 401(k)
Taking care of your 401(k) plan early and reviewing it regularly does more than improve numbers on a report. Fixing small issues now can make a big difference over time. When small inefficiencies are corrected early, the benefits grow year after year. If problems are ignored, they often turn into bigger, more expensive issues later that require major changes.
Employees also notice when their retirement plan improves. When they see better projections and feel more confident about their future, they are more satisfied at work. That confidence often leads to stronger loyalty and higher morale.
For employers, a well-managed 401(k) plan sends a clear message. It shows that the company truly cares about employees’ long-term financial well-being, not just meeting minimum legal requirements. In competitive job markets, this can set a company apart. Businesses that treat their retirement plan as an important benefit, not just paperwork, are more likely to attract and keep employees who value financial security and thoughtful leadership.
Conclusion: From 401(k) Compliance as the Floor to Protection as the Standard
Compliance will always remain the essential foundation, the floor upon which every 401(k) plan must stand. It ensures basic operational integrity and legal adherence. Yet protection resides at a higher level, achieved when employers treat their plans as living programs deserving of ongoing strategic attention. By moving past the illusion that regulatory approval equates to excellence, forward-looking organizations create retirement benefits that genuinely secure employee futures while safeguarding the enterprise against hidden risks and missed opportunities.
For companies whose 401(k) plans have operated primarily under the banner of compliance, the time to pursue a more comprehensive evaluation has arrived. The rewards—measured in enhanced participant outcomes, meaningful cost efficiencies, a stronger fiduciary posture, and improved organizational health—far outweigh the effort required to bridge the gap between minimum standards and true protection. Partnering with experienced professionals can make this transition seamless and highly effective. At nVest Advisors our team specializes in helping plan sponsors make exactly this transition. Our team conducts comprehensive 401(k) assessments that go well beyond compliance checklists to identify cost savings, optimize investment defaults, enhance employee engagement, and document prudent decision-making processes that stand up to scrutiny.
Schedule a confidential appointment, no-obligation plan review with nVest Advisors today.
