What Is a 401(k) Plan Fiduciary?

Under the Employee Retirement Income Security Act (ERISA), a fiduciary is anyone who exercises discretionary authority or control over the management of a retirement plan or its assets. It is one of the highest legal duties in American law — and if you sponsor a 401(k) plan, you almost certainly qualify.

Who Is a Fiduciary?

ERISA defines fiduciary status functionally, not by job title. You are a fiduciary if you:

• Have discretionary authority or control over plan management
• Exercise authority or control over plan assets
• Provide investment advice for a fee
• Have discretionary responsibility in plan administration

In practice, this typically includes the company (as plan sponsor), its board of directors, the HR or benefits manager who selects the recordkeeper, members of an investment committee, and in some cases the financial advisor who recommends the investment menu.

The 402(a) Named Fiduciary

Fiduciary status under Section 3(21) is functional — it attaches to whoever actually exercises control, whether or not anyone wrote it down. ERISA Section 402(a) works the other way around. It requires every plan to be established and maintained under a written instrument, and requires that instrument to provide for one or more “named fiduciaries” who have authority to control and manage the operation and administration of the plan.

This is the top of the chain rather than a specialist post. The named fiduciary holds overall responsibility for the plan, and it is the party that appoints — and then has to keep watching — every other fiduciary who serves it.

A named fiduciary can be identified two ways: named outright in the plan document, or identified through a procedure the plan document sets out. In most plans it is the employer itself. Some documents instead name a retirement plan committee, or an officer by title such as the CFO. Naming a position rather than a person is usually the more durable choice, because it survives turnover.

If you cannot tell from your plan document who your named fiduciary is, that is worth resolving before anything else on this page. It is the answer to “who is ultimately responsible here?” — and it is the first document a regulator or a plaintiff's attorney will ask to see. Note that this is a separate question from who your 3(16) plan administrator is: ERISA supplies a fallback for the administrator role if the document designates no one, but Section 402(a) simply expects the named fiduciary to be provided for in writing.

What a Named Fiduciary Can Hand Off

ERISA Section 405(c) lets a plan document establish a procedure by which the named fiduciary designates other people to carry out fiduciary responsibilities. That provision is the legal machinery behind hiring a 3(16) administrator or appointing a 3(38) investment manager.

Delegation done properly does narrow what the named fiduciary answers for. It never empties the role. Two duties survive every appointment: selecting the appointee prudently, and monitoring them afterwards. The Supreme Court was explicit about the second one in Tibble v. Edison International (2015) — the duty to monitor is continuing and separate from the duty to choose well in the first place.

The 401(k) Fiduciary Hierarchy

The numbered ERISA sections are easier to hold onto if you stop treating them as a glossary and start treating them as an org chart. Every 401(k) plan has to get five jobs done. Each job can be kept in-house or hired out, and each one carries a different amount of legal exposure.

1. Oversight — ERISA 402(a)

The named fiduciary sits at the top and answers for the plan as a whole. It appoints everyone below it, and it is the only role that cannot be created by hiring someone: the plan document has to name it. In most plans it is the employer.

2. Plan administration — ERISA 3(16)

The plan administrator runs the plan day to day: Form 5500 filings, participant notices, eligibility determinations, distribution and loan approvals, and testing. By default the plan sponsor holds this role too. A provider can be appointed to take it on, which moves real liability off your desk — but only for the functions the agreement actually names.

Your recordkeeper and your TPA are usually not fiduciaries. They execute instructions inside a framework somebody else set, which is ministerial work rather than discretionary authority. That distinction is the whole subject of TPA vs. 3(16) plan administrator.

3. Investment selection — ERISA 3(21) and 3(38)

Somebody has to choose the fund lineup and keep watching it. A 3(21) investment fiduciary recommends and you decide, so the final lineup remains yours. A 3(38) investment manager takes discretion and decides directly; under Section 405(d)(1), a properly appointed investment manager relieves the trustee of liability for that manager's acts. A broker or insurance agent selling you funds may be neither. See 3(21) vs. 3(38) investment fiduciary.

4. Asset custody — ERISA 403(a)

ERISA requires plan assets to be held in trust. The trustee under Section 403(a) has exclusive authority and discretion over those assets, which makes the role unavoidably fiduciary. Most plans instead use a directed trustee under Section 403(a)(1), which acts on the directions of a named fiduciary rather than on its own judgment.

A directed trustee is still a fiduciary — just a narrower one. It is obliged to follow only proper directions: those consistent with the plan document and not contrary to ERISA. A custodian that merely holds assets and settles trades, with no discretion at all, is generally not a fiduciary.

5. Monitoring — the job nobody can take from you

Every appointment above can be delegated. The duty to choose those appointees prudently, and to keep evaluating them afterwards, cannot be. This is the one that gets sponsors sued, because it has no completion date and leaves no artifact unless you deliberately create one — which is what committee minutes, benchmarking files, and periodic fee reviews are for.

Who Is a Fiduciary, and Who Only Looks Like One

A plan with six providers may have only two fiduciaries among them. This is the table worth checking your own service agreements against:

The rows marked usually and often are doing real work. None of these labels is decided by what a provider calls itself in a brochure. Fiduciary status turns on what the executed agreement says and on what the provider actually does, which is why the reliable move is to read the agreement and the 408(b)(2) disclosure rather than trust the title on the business card.

A provider will occasionally offer to serve as named fiduciary itself. It is uncommon and priced accordingly, because it is a far broader acceptance of responsibility than a 3(16) or 3(38) appointment. Even then, the decision to appoint them — and the duty to monitor them — stays with you.

What Does the Fiduciary Duty Require?

ERISA Section 404 imposes four core duties on fiduciaries:

1. Duty of Loyalty: Act solely in the interest of plan participants and beneficiaries — not in the interest of the employer or yourself.
2. Duty of Prudence: Act with the care, skill, prudence, and diligence that a knowledgeable person would use in a similar situation.
3. Duty to Diversify: Diversify plan investments to minimize the risk of large losses, unless it is clearly not prudent to do so.
4. Duty to Follow Plan Documents: Administer the plan in accordance with its written terms, so long as those terms comply with ERISA.

What Is the Fiduciary Standard for Fees?

The prudence standard — combined with ERISA Section 408(b)(2) — requires plan fiduciaries to ensure that fees paid to service providers are "reasonable" in relation to the services provided. This is not a theoretical standard. The Department of Labor investigates plans and courts have awarded billions of dollars in settlements against fiduciaries who failed to document or benchmark plan fees.

Personal Liability

One of the most important — and sobering — aspects of fiduciary status is that it carries personal liability. If you breach your fiduciary duties, you can be held personally responsible for losses to the plan. The company's general liability insurance may not cover ERISA breaches.

This is why fee benchmarking matters. It is one of the most direct and defensible ways to demonstrate that you have met your duty of prudence.

The Prudent Expert Standard

ERISA does not expect you to be an investment expert. It expects you to act like one — or to hire one. The "prudent expert" standard means you should seek qualified advice when you lack the expertise yourself, document your decision-making process, and monitor decisions periodically.

Courts have been clear: simply hiring a reputable firm and trusting them is not enough. You must independently monitor their performance and fees over time.