CRA Rules for a Valid Employee HSA Plan

That is the legal skeleton underneath the everyday name, and it determines how the arrangement is taxed regardless of what it's called.

The mechanic is simple enough on paper. The employer reimburses an employee for eligible medical expenses, deducts that cost as a business expense, and the employee doesn't pay tax on the reimbursement, a result that flows from subparagraph 6(1)(a)(i) of the Act. In 1986, the CRA issued IT-85R2, covering Health and Welfare Trusts for Employees, the earliest formal guidance on the concept.

It helps to be clear on what an HSA is not. It isn't a registered savings vehicle like an RRSP or TFSA, it isn't a disability or salary-replacement plan, and it isn't something an employer can improvise outside a documented plan structure. Compare it to traditional group insurance, which pays a percentage of costs within fixed categories. An HSA instead gives an employee a dollar credit that can be spent across any CRA-eligible medical expense, trading the predictability of group coverage for flexibility.

That flexibility is why the label gets misused. Calling an arrangement an HSA doesn't make it one under the Act. The tax benefits attach to the PHSP structure itself, not to whatever a business decides to name its reimbursement policy. In 1989, CRA issued IT-339R2 (Meaning of Private Health Services Plan), which extended the concept to non-incorporated businesses and remains the core regulatory reference.

The five-part "insurance in nature" test that every HSA must pass

Paragraph 3 of IT-339R2 spells out the actual test, and it's worth reading closely because most compliance failures trace back to it. To qualify as a plan "in the nature of insurance," an arrangement needs five things present at once: an undertaking by one person, to indemnify another person, for an agreed consideration, against a loss or liability tied to a specific event, where the happening of that event is uncertain.

The uncertainty piece is the one businesses trip over most. The plan has to cover future, unknown medical needs, not reimburse a cost that was already known and just needed paperwork stapled to it after the fact. A plan built around a predetermined expense, dressed up as a claim, doesn't pass the test no matter how it's labeled.

There's also an obligation requirement that gets missed constantly. Paragraph 7 of IT-339R2 requires the employer to be contractually obligated, through the employment relationship, to reimburse eligible expenses. A generous, one-off gesture from a business owner, however well-intentioned, doesn't meet that bar. It has to be a standing commitment tied to employment.

Then there's the non-reversion rule, and this one has teeth. Funds sitting in a PHSP can't flow back to the employer. The plan needs to function as a genuine indemnity arrangement rather than a retained asset the business can reclaim. The CRA carved out a narrow exception in 1998 for notional credit programs operating inside flex or cafeteria-style plans, but that exception is tight and specific, not a general escape hatch.

Once those pieces are put together, the design requirement becomes clear: the plan has to exist in writing before expenses happen, and it has to run as an arm's-length arrangement rather than something reconstructed after the fact in a bookkeeper's spreadsheet. Once that structural test is clear, the next question follows naturally: who's actually allowed to use one of these plans.

Businesses and individuals who can participate, and the rules that differ by structure

Incorporated businesses have the most room here. Size doesn't matter, a corporation with exactly one employee, who also happens to own it, can still qualify. Shareholder-employees are allowed to participate, but the plan can't exist purely for shareholders; the benefit has to flow from the employment relationship, not from share ownership. In practice, that means the owner needs to be genuinely working in the business day to day, and the T4 income that results is the evidence CRA looks for to confirm the employment connection, though there's no minimum income threshold attached to it.

Sole proprietors and unincorporated businesses face a harder line. Without at least one arm's-length employee, there's no valid HSA at all, and CRA treats any reimbursements made under such an arrangement as taxable. Bring on a single arm's-length employee, though, and the door opens for both that employee and the owner. Until that happens, if the business runs with fewer than two arm's-length employees, benefits for the owner and related family members are capped at $1,500 per adult and $750 per child per benefit year.

A family member on payroll doesn't automatically count as arm's-length. The employee has to be genuinely independent of the owner for the purposes of this rule. Structure isn't a cosmetic detail on a plan document, it decides whether the plan is valid in the first place, and for owners, it decides which cap applies. Providers running pay-as-you-go models, charging something like an 8% administration fee on approved claims with no setup or annual cost, work across both incorporated and eligible unincorporated employers, adapting the plan to the business rather than forcing the business into a fixed template.

Contribution Limits in Practice, Including the Meaning of "Reasonable"

Unlike an RRSP or TFSA, there's no CRA-defined ceiling on annual HSA contributions. The governing standard is reasonableness, a word that shows up directly in IT-339R2 and carries real weight. That absence of a hard number is freeing, but it's also where a lot of plans get into trouble, because "reasonable" has to be defended against something concrete: the employee's role, their compensation, and their actual health needs.

Industry guidelines have filled the gap the CRA left open, and they vary. One common benchmark keeps contributions under 25% of an employee's gross annual salary. A more recent guideline tightens that to 20% of T4 income, capped at $25,000 per year, illustrated with an employee earning $60,000 topping out at a $12,000 credit. Other providers report contributions clustering around $10,000 to $15,000 annually per employee as a workable benchmark, while broader survey data shows typical allocations running lower in practice, around $500 at the entry level, $1,000 to $1,500 for mid-tier roles, and $2,000 to $3,000 for senior staff or those with family coverage.

None of those percentages or dollar figures are statutory. A shareholder's HSA credit needs to be reasonable and roughly consistent with what a comparable arm's-length employee doing similar work would receive. Shareholders can't be treated meaningfully better just because they own equity.

Pushing past what's defensible brings exposure in the form of reassessment and tax consequences, not just a theoretical risk. Amounts that can't be justified as reasonable risk reclassification by CRA as taxable income, or, for an owner, as a shareholder benefit, which comes with its own tax consequences. There's no single figure that guarantees safety and no ceiling that guarantees risk. The number has to make sense next to the job. WealthNorth notes common annual credits of $500–$3,000/year across a broad range of employers. The 25% and 20% figures are industry guidelines adopted by providers, not statutory rules, and the writer should be clear on this distinction.

The 90% rule for eligible expenses

Effective January 1, 2015, CRA's position is that a plan qualifies as a PHSP as long as all or substantially all of the premiums paid relate to expenses eligible for the Medical Expense Tax Credit.

But there is no license to drift. It has to be actively designed for and monitored, because a plan that creeps past the threshold loses its status entirely, not just on the expenses that pushed it over.

METC-eligible spending covers familiar ground: prescription drugs, dental services, vision care, paramedical practitioners like physiotherapists and chiropractors, certain assistive devices, and some mental health supports. What falls outside is just as instructive. Cosmetic procedures, over-the-counter products without a prescription behind them, and lifestyle or wellness spending, gym memberships, personal development courses, don't qualify, even when they're loosely health-adjacent.

Compliance errors most commonly occur at the line between medical necessity and lifestyle choice. Wellness Spending Accounts exist for exactly the lifestyle spending an HSA can't touch, and they carry entirely different tax treatment. Funneling ineligible expenses through an HSA can put the tax treatment of the entire plan at risk. Substantially all" is generally interpreted as 90% or more, which replaced the prior (pre-2015) requirement that ALL covered expenses had to be METC-eligible. In practice, the 90% rule means a plan can cover a small proportion of expenses that fall outside strict METC eligibility without losing PHSP status, but the plan must be designed and monitored to stay above the threshold.

Plan design requirements that determine whether the structure holds up

None of this works without a written plan document. Eligibility rules, benefit limits, claim procedures, and covered expense categories all need to be spelled out formally, whether through a third-party administrator or an internal written policy. Verbal understandings and informal habits don't hold up.

Consistency across similar roles matters just as much as the document itself. Employees with comparable responsibilities and tenure should be looking at the same annual credit. And reimbursements need to move through the corporation, not out of an owner's personal account, because that corporate channel is part of what makes the arrangement an employment benefit rather than a personal withdrawal dressed up in paperwork.

CRA is also watching for disguised compensation. The whole point of scrutiny here is making sure reimbursements are genuinely for eligible medical services. There are two structural models CRA recognizes for setting up an HSA, and the choice between them gets locked in at plan inception. It can't be switched partway through.

Rollover design deserves its own thought. A short, documented carry-forward period is common and generally fine, but large, indefinite accumulations undercut the insurance-in-nature character the whole plan depends on. And the benefit has to be offered to employees as employees, never as shareholders exclusively; tie it to ownership instead of employment and the plan becomes taxable and loses its status. The plan can't be cancelled by the employer on a whim, since that arbitrary power would undercut the arm's-length, contractual character the whole arrangement rests on.

Why third-party administration supports compliance

Nothing in CRA guidance explicitly bans a shareholder from reviewing and approving their own claims. But a plan where the owner adjudicates their own reimbursements is fragile under the insurance-in-nature test, because that self-review compromises the arm's-length quality the whole structure depends on.

A third-party administrator solves that problem directly. It brings independent, arm's-length review to every claim, checks that expenses are actually CRA-eligible before money moves, and keeps a clear audit trail ready for CRA if it's ever needed. It also takes on the grind of receipts, documentation, and recordkeeping that businesses running plans internally tend to let slip.

Fee structures should be understood before signing anything. Administrative fees commonly run 8% to 10% of claims processed, and those fees are themselves tax-deductible for the employer. Pay-as-you-go models, charging something like 8% on approved claims only with no setup fee and no annual fee, tie the provider's cost directly to how much the plan actually gets used. The business pays when employees make claims, not on a fixed schedule regardless of activity, which lines up with what CRA expects from a genuine indemnity arrangement rather than something structured like a flat premium.

Digital tools matter more than they might seem to on the surface. Digital claim submission and electronic reimbursement support the documentation trail CRA expects to see, so a platform that timestamps receipts and tracks claim history over time is worth prioritizing. Beyond that, look for a clear fee structure without hidden charges, dependant coverage, annual reporting suitable for both tax filings and audit readiness, and transparent guidance so employees actually know what qualifies before they submit a claim.

Documentation and recordkeeping obligations the CRA expects

Every reimbursement needs a receipt behind it, and that receipt has to show the date, the provider's name, the type of service, and the amount paid. No receipt means no reimbursable claim, full stop.

The written plan document itself needs to be on file at all times, spelling out eligible expenses, annual maximums, eligibility rules, and claim procedures. That document is the first thing CRA asks for in an audit, and records need to survive for the full CRA audit retention period rather than getting cleared out once a tax year closes.

Annual maximums need documentation that goes beyond a number on a page. If a plan sets $2,000 for a given class of employees, the rationale behind that figure should be written down and defensible on its own. Periodic internal review of claims against the plan's own eligibility criteria catches problems before CRA does, which matters more as claim volume grows and drift becomes easier to miss. Anyone handling claims or fielding employee questions needs a working understanding of what qualifies and what doesn't, because a well-meaning approval of an ineligible expense creates exposure for the entire plan, not just that one transaction.

CRA has already identified businesses improperly claiming HSA deductions and has taken steps to warn potential participants about arrangements that don't hold up. Documentation is the first line of defence against getting swept into that category.

The Quebec exception and its effect on the tax value of an HSA

Across most of the country, employer contributions to a valid PHSP aren't taxable and don't show up as employment income on an employee's return. Quebec breaks from that pattern.

The federal tax advantage still applies, but the provincial tax bill erodes part of what makes an HSA attractive in the first place. Quebec diverges, as Revenu Québec treats the employer's annual contribution differently.