HSA Annual Reporting Requirements for Canadian Employers

The main annual reporting job for a Canadian employer running a Health Spending Account is to make sure something does not happen on the T4. When an HSA is structured properly and classified as a Private Health Services Plan under CRA guidance, the employer does not have to report reimbursements made through the account as taxable employment income. No entry appears on the employee's T4 for those payments. That blank space is the goal. It takes year-round discipline to earn, and it can disappear the moment the plan drifts off the conditions that produced it.

The Income Tax Act does not define "Health Spending Account" as a term. CRA cares about whether the plan qualifies as a PHSP, and that classification carries every bit of the favorable tax treatment that makes an HSA worth running. Qualification has to hold up for twelve straight months, not just at setup, measured by whether the conditions that let the employer skip reporting a taxable benefit have stayed in place. Everything else in HSA compliance, from how claims get paid to what gets reimbursed, flows from the answer to that one question.

PHSP qualification requirements

PHSP status rests on a specific set of conditions, and a compliance review at year-end needs to check all of them, not just the ones that seem obvious. Every expense the plan reimburses has to be a medical or hospital expense, or an expense connected to one and incurred within a reasonable stretch of time after it. That's the backbone test, and it feeds directly into a second one: the expenses reimbursed need to qualify under Section 118.2(2) of the Income Tax Act, the same section that governs the medical expense tax credit.

For a self-insured HSA, CRA applies what's known as the "all or substantially all" test, and it looks at the benefits actually paid out to all employees over the calendar year, not the dollar amount allocated to any one person's account. Insured plans get measured differently: the same threshold applies to premiums. These two versions of the test are not interchangeable, and an employer cannot blend a self-insured HSA with an insured plan to hit the threshold on a combined basis. Each plan has to clear its own bar on its own terms.

The employer has to fund the account. Employees cannot top it up with their own after-tax dollars and expect the plan to keep its PHSP status. Coverage also has to apply to a defined class of employees rather than amounts negotiated person by person, because individually negotiated benefits start to look less like an insurance arrangement and more like disguised salary.

The most common way plans slip is by reimbursing things that were never medical expenses in the first place: gym memberships, personal development courses, and wellness perks that belong in a separate, clearly taxable account. Mixing them in can pull the whole plan below the "all or substantially all" threshold for every employee covered, not just the one who submitted the questionable claim.

Rollover rules matter here too, and they are not just a design choice an employer picks for convenience. A plan can allow unused credits or unused eligible expenses to carry forward, but only for up to one year, and anything left after that has to be forfeited. Letting balances pile up indefinitely strips away the insurance character the Income Tax Act requires of a PHSP, and it's one of the clearest signals CRA looks for when deciding whether to reclassify a plan.

The one new annual filing HSA employers cannot skip: T4 Box 45 dental coverage reporting

None of that changes the fact that one new reporting duty now applies to every employer in Canada, full stop, regardless of PHSP status. The Dental Care Measures Act, passed in 2023 to support the Canadian Dental Care Plan, requires every employer to report dental coverage information on the T4, whether or not they offer anything resembling traditional dental insurance. HSA plans fall squarely inside this requirement.

Box 45 reports whether, as of December 31 of the tax year, the employer offered any form of dental coverage to the employee or to the employee's family members, and it specifies the level of that coverage using one of five codes. Access to HSA funds that can be used toward dental expenses counts as coverage for this purpose, so an employer cannot treat Box 45 as something that only applies to companies with a formal dental insurance plan.

For 2023 and 2024, CRA allowed some breathing room, but that relief is gone. Starting with the 2025 tax year, every employer has to determine and report the correct Box 45 code for every employee, with no exceptions and no administrative grace period to fall back on.

T4 slips still have to reach employees by the last day of February following the calendar year they cover. Missing that deadline brings a CRA penalty calculated per day for each slip not delivered, within a set minimum and maximum. Getting Box 45 wrong carries its own separate risk: CRA can reject the T4 outright, and Health Canada can impose penalties under the Dental Care Measures Act itself, which runs on a different enforcement track from ordinary income tax penalties. Failing to report, or knowingly reporting false information, is what triggers that second layer of exposure.

What breaks PHSP status and forces taxable-benefit reporting mid-stream

Losing PHSP status changes everything about how an HSA gets reported. The moment a plan slips outside the boundaries CRA sets for a PHSP, reimbursements that once sat off the T4 get reclassified as taxable employment income. That triggers T4 amendments, possible payroll tax remittances that should have happened earlier, and interest charged on amounts never withheld. A non-compliant reimbursement does not become a problem at the moment it is paid; it becomes one later, during an audit, which makes a mistake made two or three years ago just as expensive to fix as one made last month.

Three patterns account for most of the drift. The first is reimbursing non-medical expenses through the HSA, which pulls the plan below the "all or substantially all" threshold for every employee in that calendar year, not only the one who filed the claim. The second is letting the plan's allocation structure slide into individually negotiated amounts rather than applying consistent terms across a defined class of employees, a pattern CRA reads as a salary substitute dressed up as a benefit plan. The third is allowing unused balances to accumulate past the one-year rollover limit, which erases the risk-sharing feature that separates genuine insurance from deferred compensation.

Documentation is what protects an employer when any of this gets questioned. Both employers and employees should keep every claim and every piece of supporting paperwork for at least six years, matching CRA's audit window. The year that draws scrutiny is rarely the current one. It is usually an earlier year that nobody thought to double-check once the claims were paid and the books were closed.

The shareholder-employee reporting edge case

Owner-managers running their HSA through their own corporation face a sharper version of all of this. When the person receiving a benefit is also a shareholder who can meaningfully influence company policy, CRA presumes the benefit was received because of share ownership. Shareholder benefits get taxed as income to the individual, and the corporation does not get to deduct them. That combination, a benefit that's taxable on one side and non-deductible on the other, is the worst outcome a small business owner can land in with a benefits plan.

CRA has laid out a path around it. When a PHSP extends the same coverage to every employee, including any employees who happen to be shareholders, the benefit those shareholder-employees receive is normally treated as an employment benefit. Even in a company where every employee is a shareholder, CRA will still treat the coverage as an employment benefit if it's reasonable to conclude the plan was part of a sensible overall compensation package rather than a way to funnel personal expenses through the corporation tax-free.

For an owner-managed business, the annual compliance check has to confirm more than whether eligible expenses got reimbursed correctly. It has to confirm that the plan's structure, who's covered, on what terms, and with what paperwork behind it, still supports calling the benefit an employment benefit. That's a documentation exercise as much as a tax one, and it's worth revisiting every single year rather than assuming the answer from year one still holds.

Quebec and the provincial reporting layer that applies regardless of federal PHSP status

Federal PHSP treatment does not automatically apply at the provincial level, and that gap is clearest in Quebec. Revenu Québec generally treats employer-paid PHSP coverage as a taxable benefit for Quebec income tax purposes, even when the same plan produces no taxable benefit federally. That means the benefit gets reported on the employee's RL-1 slip, separate from and in addition to whatever appears, or doesn't appear, on the federal T4.

Ontario runs the opposite direction. HSA contributions there are exempt from Employer Health Tax, treated differently from regular salary payments for that specific purpose.

The practical point for any employer with staff in Quebec: a federal compliance review that confirms PHSP status and clears the T4 does not settle provincial reporting obligations. RL-1 obligations need to get checked separately, ideally with a benefits administrator or tax advisor who knows Quebec's rules well. An employer operating across provinces cannot treat the federal answer as the whole answer.

What the annual compliance review looks like in practice

The year-end HSA compliance review is a recurring job, not a task that gets handled once when the plan is first set up and then forgotten. Every year, the employer has to confirm the plan's qualifying conditions are still true and that the one mandatory reporting duty, Box 45, gets filled out correctly.

That starts with checking whether benefits paid across all employees for the calendar year still meet the "all or substantially all" threshold, confirming that non-medical reimbursements haven't quietly eroded the plan's qualifying status over the course of the year. It also means checking that no unused balances have carried forward past the one-year limit, and that anything forfeited was handled the right way. Every employee needs a correctly determined Box 45 code, and that includes figuring out whether HSA access to dental-eligible expenses triggers a reporting obligation even if the employee never actually used the funds for dental care. For any shareholder-employees in the plan, the review needs to confirm the documentation still supports calling the benefit an employment benefit: consistent terms applied across a defined class, no individually negotiated side deals. Employers with staff in Quebec need to separately confirm their RL-1 obligations, since the federal review doesn't cover that ground. And all of it depends on claims and supporting records being kept organized and accessible for the full six-year window CRA can reach back into during an audit.

Many employers handle the administrative load of this review through a benefits administrator who tracks claims, rollover deadlines, and documentation on their behalf, turning what could be a scramble every December into a routine check.

The cost of skipping any of this is going up. Budget 2024 proposed new CRA compliance orders and notices of non-compliance carrying penalties as high as $25,000. Compulsory interview and oath powers that were part of the original proposal got dropped from the relevant bill in 2026, and Royal Assent is still pending. Even with those powers scaled back, the direction is clear: CRA enforcement around benefit plans is getting more exacting, not less, and treating the annual HSA review as optional is a harder bet to make with each passing year.