Do Employer Have to File a Gag Clause Attestation Every Year?

In simplest terms- yes.

The Gag Clause Prohibition Clause Attestation (GCPCA) submission must be made annually. The GCPCA attests to a health plan’s (or insurer’s) compliance with the prohibition against “gag clauses” in any agreements with providers, provider networks, or entities offering provider network access. (A gag clause is any contractual term directly or indirectly restricting the plan or insurer from disclosing specified data and information, such as cost or quality of care data.) A group health plan with more than one benefit package may submit a single attestation even if some coverage types are insured and others are self-insured. For employers that sponsor multiple group health plans, a separate attestation is required for each plan.

An attestation must be made by December 31 each calendar year. Submissions are made through CMS’s Health Insurance Oversight System (HIOS) and are accepted throughout the year. After the initial attestation that was due Dec 31, 2023, each subsequent attestation covers the period from the date of the prior attestation through the date of the subsequent attestation. For example, if a plan submitted its first GCPCA on November 30, 2023, and submits its second GCPCA on November 15, 2024, the second GCPCA’s “attestation period” would be December 1, 2023, to November 15, 2024, and the “attestation year” would be 2024.

You should make sure that the attestation is filed annually (and of course that the plan complies with the underlying prohibition), either by confirming if your medical carrier is filing on your behalf or if you (the employer) will need to file.