Sending a COBRA notice by mail isn't optional — it's a federal legal requirement, and the penalties for getting it wrong are steep. Employers who fail to provide timely, compliant COBRA notices face excise taxes of $110 per qualified beneficiary per day of noncompliance, plus potential lawsuits from former employees who were denied coverage they were entitled to.
This guide walks benefits administrators and HR professionals through every step of sending COBRA continuation coverage notices by mail — what you're legally required to send, when you must send it, what must be included, and how to handle the physical mailing in a way that protects sensitive health information.
Prerequisites and What You'll Achieve
Before you start, confirm you have the following:
- The former employee's last known mailing address
- The qualifying event date (termination, reduction in hours, divorce, dependent aging out, etc.)
- Your group health plan details, including premium costs and coverage options
- A method for sending physical mail that creates a verifiable delivery record
By the end of this guide, you'll know exactly how to send a legally compliant COBRA notice by mail — on time, with the right content, in a format that holds up if your process is ever audited.
Step 1: Identify the Qualifying Event and Who Must Be Notified
Expected outcome: You know exactly who needs a notice and why.
COBRA continuation coverage applies when a "qualifying event" causes a covered employee, spouse, or dependent child to lose group health coverage. The Department of Labor's COBRA overview lists the qualifying events as:
- Voluntary or involuntary termination of employment (other than for gross misconduct)
- Reduction in hours below the threshold required for coverage
- Divorce or legal separation from the covered employee
- Death of the covered employee
- A dependent child aging out of coverage eligibility
- The covered employee becoming entitled to Medicare
Each person who loses coverage due to the qualifying event is a "qualified beneficiary" and must receive their own notice. If a departing employee has a spouse and two dependents on the plan, that's four separate qualified beneficiaries — each with a right to independent COBRA election.
Don't send one notice to "the Johnson family" and call it done. Courts have ruled that each qualified beneficiary is entitled to receive notice. Sending a single household notice is acceptable only if all qualified beneficiaries reside at the same address, but you should still document that assumption.
Step 2: Calculate Your Deadline for Sending the Notice
Expected outcome: You know the exact date by which the COBRA notice must be mailed.
The COBRA notification timeline involves two separate clocks, and confusing them is one of the most common compliance mistakes employers make.
Employer-to-plan administrator deadline: When a qualifying event occurs, the employer must notify the group health plan administrator within 30 days.
Plan administrator-to-qualified-beneficiary deadline: Once the plan administrator receives notification of the qualifying event, they have 14 days to send the COBRA election notice to each qualified beneficiary. If the employer is also the plan administrator (common for self-insured plans), the clock is still 44 days total from the qualifying event — but the DOL interprets this as one combined obligation.
This means if someone is terminated on September 1, 2026, the COBRA election notice must typically be mailed no later than October 15, 2026.
Missing this window doesn't just expose you to fines. If a former employee incurs medical expenses during the period they should have been notified, your plan may be liable for those costs. ERISA Section 502(c) gives courts discretion to award up to $110/day per beneficiary for late or missing notices.
Step 3: Prepare the COBRA Election Notice Content
Expected outcome: Your notice includes every legally required element.
The DOL provides model COBRA election notices that satisfy federal requirements when completed correctly. Using the model notice is strongly recommended — it shifts some compliance burden onto the DOL's drafting and provides a defensible baseline.
Your completed COBRA notice must include:
- Plan identification: The name of the group health plan and the plan sponsor
- Qualifying event description: What triggered the loss of coverage
- Qualified beneficiaries: Who is entitled to elect COBRA under this notice
- Coverage available: What specific coverage can be continued
- Election period: 60 days from the later of coverage loss or notice date
- Cost of coverage: The premium the qualified beneficiary will pay, including any administrative fee (up to 2% above the plan's cost)
- Payment information: How and where to make premium payments, and grace periods
- Early termination conditions: Circumstances under which COBRA coverage could end before the maximum period
- Conversion rights: Any right to convert to individual coverage at the end of COBRA
Do not send a generic "your coverage ends soon" letter. That does not constitute a compliant COBRA election notice. The DOL model notice runs several pages for a reason — courts expect the full disclosure.
Step 4: Determine the Correct Mailing Method
Expected outcome: You choose a mailing approach that is legally sufficient and creates a defensible paper trail.
Federal law requires that the COBRA election notice be sent "in a manner reasonably calculated to ensure actual receipt." Physical mail to the qualified beneficiary's last known address satisfies this standard — as long as you can demonstrate the notice was actually sent.
First-Class Mail is the standard. The DOL considers a notice mailed via USPS First-Class Mail to the last known address to be sufficient evidence of delivery, even if the recipient later claims they never received it. This is sometimes called the "mailbox rule."
Certified mail adds a layer of protection but is not legally required. For large employers with high turnover, certified mail for every COBRA notice quickly becomes expensive and logistically burdensome.
What you must document:
- The date the notice was mailed
- The address to which it was mailed
- Proof of mailing (postage receipt, postal log, or platform delivery record)
Keep this documentation for at least six years. ERISA's recordkeeping requirements mandate that plan administrators retain records relevant to reporting and disclosure obligations for that period.
Step 5: Send the COBRA Notice Using a HIPAA-Compliant Mailing Platform
Expected outcome: The notice is mailed securely, on time, with a documented delivery record — without anyone visiting a post office.
COBRA notices contain protected health information. The name, address, health plan details, qualifying event, and coverage information in a COBRA notice can constitute PHI under HIPAA, depending on the context. Mailing these documents through a platform that handles data carelessly creates compliance exposure on two fronts simultaneously — COBRA and HIPAA.
This is where WriteToMail's HIPAA-compliant physical mail service solves a real operational problem for HR and benefits teams.
Here's how to use WriteToMail to send COBRA notices by mail:
Option A — Single beneficiary:
- Log in to WriteToMail and create a new letter
- Use the rich text editor or upload your completed COBRA notice as a PDF
- Enter the qualified beneficiary's name and last known mailing address
- Select USPS First-Class Mail delivery
- Submit — WriteToMail handles printing, postage, and USPS handoff
You get a record of when the letter was submitted and sent. No printer, no envelope stuffing, no post office trip.
Option B — Multiple terminations (bulk mailing):
If you're processing layoffs or benefits transitions affecting multiple employees, WriteToMail's CSV bulk mailing capability lets you upload a spreadsheet with each qualified beneficiary's name, address, and variable notice details. The platform maps CSV columns to letter placeholders and generates personalized notices for each recipient in a single session.
This is the right approach for HR teams handling more than a handful of separations at once. Manually printing and stuffing envelopes at scale is where address errors and missed notices happen.
Because WriteToMail is HIPAA-compliant, you're not routing sensitive health benefit data through an unsecured print vendor. The platform's SOC 2 certified infrastructure handles PHI securely throughout the printing and mailing process — which matters when you consider that a data breach involving former employee health information carries its own set of regulatory consequences. You can read more about what HIPAA compliance actually requires for physical mail workflows in this guide to HIPAA-compliant physical mail for healthcare organizations.
Step 6: Document the Mailing and Update Your Records
Expected outcome: Your plan files reflect a complete, auditable COBRA notification record.
After the notice is sent, document the following in your plan administration records:
- Beneficiary name and address mailed to
- Date of mailing
- Qualifying event type and date
- Method of mailing (First-Class Mail, certified, platform delivery log)
- Plan administrator who authorized the notice
If you use WriteToMail, save your order confirmation as part of this documentation. This timestamp is your proof of mailing.
Retain all COBRA election notices and mailing records for six years from the date of filing or the date when the document was required to be filed — whichever is later. Build this into your benefits administration workflow rather than treating it as an afterthought.
Common Mistakes That Create COBRA Liability
Sending to the wrong address. Your obligation is to mail the notice to the "last known address." If you don't update addresses when employees move, you may have a stale address on file. Consider asking departing employees to confirm their mailing address during offboarding.
Counting the election period wrong. The 60-day election period begins on the later of: (1) the date coverage is lost, or (2) the date the notice is provided. If you send the notice late, the election period may extend past the date you expected.
Omitting a qualified beneficiary. Spouses and dependent children are often overlooked — particularly if they weren't listed prominently on the original enrollment form. Pull the full plan enrollment record before generating notices.
Using the notice as the qualifying event notification. The notice sent to qualified beneficiaries is not the same as the employer's obligation to notify the plan of the qualifying event. Both obligations exist independently.
Mailing without documentation. A notice you can't prove was sent is legally equivalent to a notice that was never sent. Document everything.
Assuming email is sufficient. Electronic delivery of COBRA notices is permissible under specific DOL safe harbor conditions — but only if the qualified beneficiary has affirmatively consented to electronic delivery and has regular access to electronic information in the ordinary course of their work duties. Defaulting to email for former employees rarely satisfies these conditions. Physical mail remains the legally safe default.
Next Steps
Once COBRA notices are sent, your compliance obligations don't end. Track which qualified beneficiaries elect COBRA, process premium payments within grace periods, and send timely notices if coverage terminates early (for example, if a beneficiary obtains coverage elsewhere).
For benefits teams managing large employee populations, consider building COBRA notice mailing into a repeatable workflow. WriteToMail's online print and mail service supports ongoing single sends and bulk mailings from the same platform — so whether you're processing one termination or fifty, the workflow is consistent.
If your organization handles other sensitive benefit communications — like HIPAA breach notifications, privacy notices, or authorization forms — the same HIPAA-compliant infrastructure handles those too. Read the guide to sending HIPAA breach notification letters online to understand how the same mailing workflow applies to that obligation.
COBRA compliance isn't glamorous. But a $110/day-per-beneficiary fine for a missed notice is the kind of thing that gets a benefits administrator's attention fast. Get the process right once, document it, and repeat it.
Sources
- U.S. Department of Labor — An Employer's Guide to Group Health Continuation Coverage Under COBRA — Authoritative DOL overview of COBRA obligations, qualifying events, notice requirements, and excise tax penalties
- DOL EBSA — COBRA Model General Continuation Coverage Election Notice — The DOL's official model election notice template referenced in Step 3
- U.S. Code Title 29, Section 1132 — ERISA Section 502(c) — Legal basis for the $110/day civil penalty for failure to provide required notices
- U.S. Department of Labor EBSA — Recordkeeping Requirements — ERISA six-year recordkeeping obligation for plan administrators
- IRS — COBRA Continuation Coverage — IRS guidance on COBRA excise taxes and employer obligations for noncompliance