What Is an ERISA Fiduciary?

ERISA fiduciary status follows function, not title.

A company officer can be a fiduciary for one decision and act only as an employer for another. A recordkeeper can handle millions of dollars of account data without being a fiduciary for every task. A committee member can become a fiduciary because the committee has discretion even if nobody added "fiduciary" to the person's job description.^[1][2][3]

That is the first test:

What authority, control or discretion did the person actually exercise?

Key Takeaways

• ERISA fiduciary status is functional. Discretionary authority over plan management or administration, control over plan assets, and certain compensated investment-advice functions can create fiduciary status.^[1][3]
• A fiduciary is responsible only to the extent of the fiduciary function performed.
• Employers can make nonfiduciary business decisions about whether to establish, amend or terminate a plan. Implementing those decisions can trigger fiduciary duties.^[2][3]
• Core fiduciary duties include:
• loyalty to participants and beneficiaries
• exclusive purpose
• prudence
• diversification where required
• following governing plan documents when consistent with ERISA
• paying only reasonable plan expenses.^[1][2][4]
• Hiring a service provider is itself a fiduciary act.^[2][6]
• Outsourcing recordkeeping or investment management does not eliminate the appointing fiduciary's duty to prudently select and monitor the provider.^[2][7][8]
• A bad investment outcome does not by itself prove imprudence. ERISA prudence focuses heavily on the decision-making process.^[2][4]
• A 3(38) investment manager can assume discretionary investment authority. The appointing fiduciary still must prudently select and monitor that manager.^[8]
• Participant-directed investing can limit fiduciary liability for losses caused by participants' own choices when applicable ERISA conditions are met, but fiduciaries still have duties involving the plan's investment menu and disclosures.^[5]
• DOL's 2024 Retirement Security Rule redefining investment-advice fiduciaries was vacated by court order in 2026. Articles that present that rule as currently effective are outdated.^[10]

The Functional Test

ERISA treats a person as a fiduciary to the extent that the person does one or more of the following under the applicable statutory framework:^[1][3]

• exercises discretionary authority or control over plan management
• exercises authority or control over plan assets
• has discretionary authority or responsibility in plan administration
• provides investment advice for compensation under the applicable fiduciary-advice rules

The word discretionary matters.

Someone who decides may be a fiduciary.

Someone who merely processes the decision may not be.

Example: Same Company, Two Different Hats

Assume a company's board makes two decisions.

Decision 1

Add a 4% employer match next year.

That is generally an employer plan-design decision. DOL treats decisions such as establishing a plan, choosing plan features, amending the plan and terminating it as business or "settlor" decisions rather than fiduciary acts.^[2][3]

Decision 2

Choose which investment funds participants can use.

That is a fiduciary function.

Same employer.

Different legal capacity.

Failing to separate those roles creates bad analysis.

Plan Design Is Not the Same as Plan Administration

An employer can decide:

• whether to sponsor a plan
• whether to offer Roth contributions
• whether to add a match
• whether to freeze a pension
• whether to terminate a plan

Those are generally business decisions.^[2][3]

Once the plan says:

"Eligible employees receive a 100% match on the first 4% contributed"

someone has to administer that promise.

Calculating the match, applying eligibility rules, crediting service and correcting errors move into plan administration.

That implementation can involve fiduciary responsibility.

Who Is Commonly a Fiduciary?

The answer depends on actual authority, but DOL identifies roles commonly associated with fiduciary functions:^[1][2][3]

• named fiduciary
• plan trustee
• plan administrator
• investment committee members
• administrative committee members
• investment advisers when the applicable fiduciary-advice test is met
• people who select fiduciary committee members
• investment managers with discretionary authority

The list is not exclusive.

A title can suggest fiduciary status.

It does not decide it.

The Named Fiduciary

ERISA plans must have at least one fiduciary named in the written plan or identified through a procedure described in the plan.^[2][3]

The named fiduciary might be:

• employer
• board committee
• benefits committee
• individual officer
• another entity

The named fiduciary is not necessarily the only fiduciary.

Functional fiduciaries can arise from what other people actually do.

A Recordkeeper Is Not Automatically the Fiduciary

Recordkeepers can perform significant work:

• maintain participant accounts
• process investment elections
• issue statements
• operate the website
• process distributions
• maintain transaction histories

That does not make every recordkeeping function fiduciary.

If the provider follows preset rules and instructions without meaningful discretion, the work can be ministerial rather than fiduciary.^[3]

Now change the facts.

If the provider has discretionary authority to decide plan administration issues or control plan assets, fiduciary analysis changes.

The contract label is not enough.

The Plan Administrator Is a Legal Role

Participants often call the recordkeeper "the administrator" because that company runs the website.

ERISA's plan administrator is a defined plan role.

The SPD and governing documents should identify the plan administrator.

It may be:

• the employer
• an internal benefits committee
• another named entity

The recordkeeper can support the administrator without becoming the legal plan administrator.

INV-068 explains where to find that information.

The Trustee

A trustee typically holds plan assets and can have fiduciary responsibility over those assets.

The scope can vary.

A trustee with discretion over investments has different responsibility from a trustee required to follow proper directions from another authorized fiduciary.

Do not infer the trustee's full role from the word trustee alone.

Read:

• trust agreement
• plan document
• investment-management arrangements

Investment Committee Members

A committee deciding:

• which funds enter the plan
• which funds remain
• which funds are removed
• which investment manager is hired
• how investment policy is implemented

is exercising fiduciary discretion.

Committee members should know that before they attend the first meeting.

DOL specifically recommends educating internal committee members on their roles and documenting the selection and monitoring process.^[2]

Prudence Is About Process

This is the fiduciary rule most often misunderstood.

Prudence does not mean:

every decision must make money.

A prudent investment can lose money.

An imprudent investment can make money.

ERISA's prudence standard asks whether the fiduciary used the care, skill, prudence and diligence expected of a prudent person familiar with such matters under the circumstances.^[4]

DOL emphasizes the process:

• gather relevant information
• compare alternatives
• understand costs
• identify conflicts
• use appropriate expertise
• document the basis for decisions
• monitor after selection.^[2][4][6]

Good Outcome, Bad Process

Suppose an investment committee adds a high-cost sector fund because one executive likes the manager.

No documented review.

No fee comparison.

No risk analysis.

No benchmark work.

The fund then gains 35%.

The return does not retroactively create a prudent process.

A favorable outcome can hide a weak decision.

Bad Outcome, Defensible Process

Reverse the facts.

The committee:

• reviews several diversified options
• compares fees
• analyzes risk
• documents the decision
• checks manager qualifications
• monitors the investment

The selected fund later loses money during a broad market decline.

Loss alone does not establish fiduciary breach.

Investment risk cannot be regulated out of a retirement plan.

Loyalty Is Different From Prudence

A decision can be technically sophisticated and still fail the loyalty test.

ERISA requires fiduciaries to act solely in the interest of participants and beneficiaries for the exclusive purpose of providing benefits and paying reasonable plan expenses.^[1][4]

Suppose two funds are economically similar.

Fund A

• lower fee
• no financial relationship with employer affiliate

Fund B

• higher fee
• pays revenue to an affiliate connected with a decision-maker

The conflict does not automatically decide every legal question.

It makes the loyalty analysis much more serious.

The fiduciary cannot subordinate participant interests to its own financial interest.

Reasonable Does Not Mean Cheapest

ERISA does not impose a universal lowest-fee rule.

DOL says fiduciaries should consider:

• cost
• quality
• services
• investment risk and return
• provider capability.^[2][6]

A $50 service can be worse value than a $100 service.

The fiduciary question is:

Is the compensation reasonable for what the plan receives?

INV-073 covers participant fee disclosure from the employee side.

Hiring a Provider Is a Fiduciary Decision

An employer cannot say:

"We outsourced the 401(k), so fiduciary responsibility belongs to the vendor."

DOL is explicit: hiring a service provider is itself a fiduciary function.^[2]

A prudent hiring process can include reviewing:

• experience with similar plans
• personnel qualifications
• service quality
• fees
• indirect compensation
• conflicts
• litigation or enforcement history
• cybersecurity practices
• insurance
• contract terms.^[2][6]

The provider's brochure is not due diligence.

Monitoring Is Not Optional After Hiring

The fiduciary duty does not stop at contract signature.

DOL recommends a formal review process at reasonable intervals.^[2][6]

Useful checks include:

• actual fees charged
• service performance
• reports
• compensation changes
• participant complaints
• investment performance
• security incidents
• operational errors
• contract compliance

A provider can be a prudent choice in 2023 and an imprudent choice to retain indefinitely without review.

Example: Recordkeeper Fees Drift Up

Assume a 401(k) hires a recordkeeper at:

$65 per participant

Five years later:

• plan assets doubled
• participant count increased materially
• service model barely changed
• effective fees rose to $135 per participant
• no benchmarking was performed

The problem is not simply that $135 is "too high."

The stronger issue is:

What process did the fiduciaries use to determine that the arrangement remained reasonable?

That is the ERISA question.

Participant Complaints Are Monitoring Data

DOL specifically tells fiduciaries to follow up on participant complaints when monitoring providers.^[2]

One complaint can be wrong.

Twenty similar complaints about:

• delayed distributions
• login failures
• missing contributions
• erroneous vesting
• unresponsive service

are information.

Ignoring operational evidence because the provider's quarterly scorecard is green is not a strong monitoring process.

Cybersecurity Is Now Part of Provider Due Diligence

DOL's current fiduciary guidance tells employers to examine cybersecurity practices when selecting and monitoring providers that maintain participant data and plan accounts.^[2]

Relevant questions include:

• information security standards
• independent audit results
• breach history
• incident response
• cyber insurance
• contract protections

A retirement account is not only an investment portfolio.

It is also a high-value data and transaction system.

Delegation Changes the Map of Responsibility

ERISA permits plans to hire experts.

That is often the prudent thing to do when internal fiduciaries lack expertise.^[2][4]

But delegation has layers.

Before delegation

The appointing fiduciary decides whom to hire.

After delegation

The delegate performs the assigned role.

Ongoing

The appointing fiduciary monitors whether retaining the delegate remains prudent.

Delegation can move decision-making authority.

It does not erase the appointment and monitoring function.

3(21) Fiduciary: The Broad Functional Category

ERISA Section 3(21) contains the core functional fiduciary definition.

In industry usage, a provider called a:

3(21) investment fiduciary

often provides fiduciary advice while the plan sponsor or committee retains final investment decision-making authority.

The exact contract matters more than the marketing label.

Ask:

• Who recommends?
• Who decides?
• Who can trade?
• Who can remove a fund?
• Who acknowledges fiduciary status?
• What decisions remain with the committee?

3(38) Investment Manager: Discretion Moves

An ERISA Section 3(38) investment manager is a more specific role with authority to manage, acquire or dispose of plan assets under the statutory framework.

In a typical delegated arrangement, the investment manager can make specified investment decisions without waiting for the plan committee to approve each trade or menu change.

DOL guidance recognizes that a properly appointed 3(38) manager can assume responsibility for prudent management of the assets within the delegated scope.^[8]

The appointing fiduciary still must:

• prudently select the manager
• monitor the appointment at reasonable intervals.^[8]

3(21) vs. 3(38)

The shorthand is useful.

The written allocation of authority is more useful.

A 3(38) Manager Is Not a Fiduciary Eraser

Suppose a sponsor hires a discretionary investment manager and then never looks at:

• performance
• fees
• personnel changes
• regulatory problems
• process
• whether the manager is still suitable

Calling the manager "3(38)" does not make that monitoring failure disappear.

DOL guidance says the appointing fiduciary retains the selection and monitoring duty.^[8]

The better way to describe 3(38) delegation is:

less direct investment discretion for the sponsor, not zero fiduciary responsibility.

Participant-Directed Investing Does Not Remove Menu Responsibility

Most 401(k) participants select investments from a menu.

ERISA Section 404(c) can protect fiduciaries from certain losses caused by participant investment decisions when the applicable conditions are satisfied.^[5]

That does not convert every plan investment into a participant-created fiduciary decision.

The fiduciary still has plan-level responsibilities such as:

• selecting prudent investment alternatives
• monitoring those alternatives
• providing required investment and fee information.^[5]

INV-074 explains the parallel concept for QDIA defaults.

Example: Participant Picks the Worst Fund on the Menu

Assume the plan offers a prudently selected, monitored menu.

A participant puts 100% of the account in the most volatile option despite having access to diversified alternatives.

If the applicable participant-control requirements are satisfied, the participant's allocation choice can limit fiduciary liability for the resulting loss.^[5]

Now change the facts.

Suppose the plan menu contains an imprudent, wildly overpriced option that remained only because the committee never reviewed it.

Participant direction does not answer the separate question of why that option remained on the menu.

Prohibited Transactions Are a Separate Guardrail

ERISA does more than impose broad prudence and loyalty duties.

It restricts specified transactions involving:

• plan fiduciaries
• employer
• service providers
• other parties in interest

and restricts fiduciary self-dealing and conflicted conduct.^[1][2]

Some otherwise prohibited transactions are allowed under statutory or administrative exemptions when the conditions are met.

That structure matters because many ordinary plan operations involve service providers that are parties in interest.

The question is often not:

"Is a service provider involved?"

It is:

"Does the arrangement satisfy the applicable exemption conditions, including reasonable services and compensation?"

Conflicts Cannot Be Waved Away With Disclosure Alone

Disclosure is important.

It does not automatically convert a conflicted decision into a loyal one.

A fiduciary who benefits personally from a plan decision faces ERISA's conflict and prohibited-transaction rules.

Participants should be skeptical of any explanation that reduces fiduciary duty to:

"We disclosed the relationship."

Disclosure can be part of compliance.

It is not a universal cure.

Fidelity Bond vs. Fiduciary Liability Insurance

These are often confused.

ERISA fidelity bond

Protects the plan against specified losses from fraud or dishonesty by people who handle plan funds or property.^[9]

Fiduciary liability insurance

Can insure against losses involving breaches of fiduciary responsibility, subject to policy terms.^[9]

DOL states that fiduciary liability insurance is not the same as the ERISA fidelity bond and is not required by ERISA Section 412.^[9]

A bonded fiduciary is not automatically insured against fiduciary-breach claims.

Investment Advice: Watch the Date on the Article

This area changed materially in 2026.

DOL's 2024 Retirement Security Rule expanded the federal definition of an investment-advice fiduciary.

Courts later vacated the rule and related amendments.

DOL now states that the rule was vacated by court order, with the notice of vacatur published in March 2026.^[10]

That means an article saying:

"The 2024 Retirement Security Rule is now the governing fiduciary test"

is stale.

Investment-advice fiduciary status should be checked against current post-vacatur law and DOL guidance rather than relying on summaries written during the rule's implementation period.

Role-by-Role: What to Ask

This is more accurate than assigning legal responsibility from titles alone.

Five Questions That Reveal the Responsibility Map

Who can decide?

Not who can recommend.

Who has final authority?

Who controls plan assets?

Authority over assets can create fiduciary status even without a discretionary-administration title.^[1]

Who hired the provider?

That appointment is itself a fiduciary decision.^[2]

Who monitors the provider?

If the answer is "nobody," delegation was incomplete.

What does the governing document say?

Authority should be traceable through:

• plan document
• trust agreement
• committee charter
• investment-management agreement
• service-provider contract

Frequently Asked Questions

What is an ERISA fiduciary?

A person or entity is an ERISA fiduciary to the extent it performs functions such as exercising discretionary authority over plan management or administration, controlling plan assets or performing other fiduciary functions under ERISA's statutory definition.^[1][3]

Does someone have to agree to be a fiduciary?

Not necessarily. ERISA uses a functional test. A person can become a fiduciary because of the authority or control actually exercised even if the person's title does not say fiduciary.^[3]

Is the employer always the 401(k) fiduciary?

An employer can act in both fiduciary and nonfiduciary capacities. Decisions to establish, amend or terminate a plan are generally business decisions; implementing and administering the plan can involve fiduciary acts.^[2][3]

Is the recordkeeper a fiduciary?

Not automatically. A recordkeeper performing ministerial tasks under preset instructions may not be a fiduciary for those functions. Discretion or control can change the analysis.^[3]

Is the plan administrator a fiduciary?

Plan administrators commonly perform fiduciary functions, but the specific authority and duties matter.^[1]

Is choosing 401(k) funds a fiduciary act?

Yes. Selecting and monitoring plan investments are fiduciary functions.^[5]

Is hiring a recordkeeper a fiduciary act?

Yes. DOL states that hiring a plan service provider is itself a fiduciary function.^[2]

Does hiring a 3(38) investment manager eliminate the sponsor's fiduciary duty?

No. The sponsor or appointing fiduciary still must prudently select and monitor the investment manager.^[8]

Does a fiduciary have to choose the cheapest fund?

No. Fees must be reasonable in relation to the services and investment characteristics. Cost is important, but ERISA does not impose a universal cheapest-option rule.^[2][6]

Can a fiduciary be liable when the market falls?

A market loss alone does not establish breach. Prudence focuses heavily on the process used to make and monitor the decision.^[2][4]

Does participant-directed investing protect the plan fiduciary?

It can limit liability for losses resulting from participants' own investment choices when applicable ERISA requirements are satisfied. It does not eliminate the fiduciary's plan-level duties.^[5]

Is the DOL's 2024 Retirement Security Rule currently in force?

No. DOL states that the rule and related exemption amendments were vacated by court order, with a notice of vacatur published in March 2026.^[10]

What Matters When Something Goes Wrong

When a retirement-plan problem appears, start with authority.

Do not begin with the company logo on the statement.

Ask:

• Who made the decision?
• Who had discretion?
• Who controlled the asset?
• Who selected the provider?
• Who was supposed to monitor?
• What did the plan documents assign?
• What process was actually followed?

That usually identifies the real fiduciary question faster than debating titles.

Sources & References

1. U.S. Department of Labor: Fiduciary Responsibilities
2. U.S. Department of Labor: Meeting Your Fiduciary Responsibilities
3. U.S. Department of Labor: ERISA Fiduciary Advisor — Who Are the Plan's Fiduciaries?
4. U.S. Department of Labor: ERISA Fiduciary Advisor — What Are Fiduciary Responsibilities?
5. U.S. Department of Labor: What You Should Know About Your Retirement Plan
6. U.S. Department of Labor: Understanding Retirement Plan Fees and Expenses
7. U.S. Department of Labor: Advisory Opinion 2023-01A
8. U.S. Department of Labor: Information Letter 10-23-2014
9. U.S. Department of Labor: Field Assistance Bulletin 2008-04 — ERISA Fidelity Bonds
10. U.S. Department of Labor: Retirement Security Rule — Notice of Court Vacatur

Educational Disclaimer

ROIStreet publishes educational content about retirement-plan governance and ERISA. This article is not legal, fiduciary, tax, investment or compliance advice. Fiduciary status is fact-specific and can depend on plan documents, contracts, actual authority, conduct and current law.

The ROIStreet Reader Promise

We strive to explain before we evaluate, present evidence before opinions, discuss risks alongside potential benefits, distinguish facts from analysis, and correct material errors transparently.

Our purpose is to help readers better understand investing—not to tell them what to do.