The Renewal Checkpoint on Your TPA Just Disappeared
On 28 July 2026, at its 137th Authority Meeting, IRDAI approved the IRDAI (Third Party Administrators - Health Services) (Amendment) Regulations, 2026. The headline change: third-party administrators move from periodic certificate renewal to perpetual registration, held indefinitely subject to payment of an annual fee and continued regulatory compliance. A second change matters just as much for anyone buying TPA services: eligible TPAs are now permitted to pursue equity listing, subject to prescribed conditions.
For an HR head or CFO running a group mediclaim programme, the first-order reading is that nothing changed. Your TPA is still registered, still regulated under the 2016 TPA framework, still answerable to IRDAI. The second-order reading is the one that should reshape your vendor file. Until now, every TPA had to return to the regulator periodically and demonstrate that it still deserved its certificate. That renewal was a free, external fitness check that corporate buyers quietly relied on: a TPA that held a current certificate had recently been re-examined. Under perpetual registration, that recurring examination is replaced by an annual fee and ongoing compliance obligations. The regulator has not stopped supervising TPAs, but the rhythm of supervision has changed, and the periodic re-approval event a buyer could anchor its diligence to no longer exists.
This post rewrites the TPA due-diligence checklist for the 2027 renewal cycle: what the amendment actually provides, how to verify registration and fee compliance yourself, what a listed TPA means as a counterparty, and the contract clauses that now carry the weight the renewal checkpoint used to carry.
What the Amendment Actually Provides
The amendment did not arrive suddenly. IRDAI issued the exposure draft for public comment on 19 June 2026, published its general response to stakeholder feedback in July 2026, and approved the final regulations at the 137th Authority Meeting on 28 July 2026. The change also sits inside a wider move: the same Authority meeting replaced periodic renewal with perpetual registration backed by an annual fee across insurance intermediaries, TPAs and surveyors, following the enactment of the Sabka Bima Sabki Raksha (Amendment of Insurance Laws) Act, 2025. Perpetual registration is now the default architecture for regulated service entities in Indian insurance, not a TPA-specific experiment. Contract drafting should follow the notified text once it publishes, since the operative dates and the fee schedule sit there rather than in the meeting summary.
For TPAs specifically, the amendment provides:
- Perpetual registration in place of periodic renewal, conditional on payment of annual fees and continued compliance with the regulatory framework.
- Transitional provisions for TPAs currently holding valid certificates of registration, so existing administrators move onto the new footing rather than re-applying from scratch.
- Procedures for continuation of registration, including how a TPA maintains its registered status year to year.
- Provisions for delayed application and delayed fee payment, and, critically for buyers, defined consequences of non-payment.
- Permission for eligible TPAs to pursue equity listing, subject to prescribed conditions.
- Housekeeping changes: references to the "Authority" replaced with "IRDAI" or "Competent Authority" in specified provisions, and updated references to the National Medical Commission.
Two of these deserve a buyer's close attention. The consequences-of-non-payment provisions mean a TPA's registration is no longer a static fact you check once; it is a status maintained by an annual payment that can lapse. And the listing permission means the ownership and capital structure of your claims administrator can now change in ways the 2016 framework never contemplated.
Why Perpetual Registration Changes Who Does the Checking
Under the renewal regime, the burden of periodically re-establishing a TPA's fitness sat with the regulator. A buyer could reasonably treat a valid certificate as evidence of a recent, substantive review. Under perpetual registration, the certificate proves the TPA was found fit at some point and has kept paying its fees and staying compliant since. That is a weaker signal, and the gap between the two is now the buyer's problem.
This is the same shift banks went through with vendors whose licences moved from renewable to evergreen: the diligence that a licence renewal used to perform migrates into the counterparty's own vendor-management cycle. For a group health programme, the natural home for that migrated diligence is the annual policy renewal. Your programme still renews every year even though the TPA's registration no longer does, so the policy renewal becomes the checkpoint at which you re-verify the administrator, in the way the regulator's renewal calendar used to do it for you.
Concretely, the annual TPA review that many buyers ran as a light satisfaction check needs to become a compliance verification plus a performance audit. The TPA governance disciplines that well-run programmes already apply, service-level tracking, MIS review, escalation testing, now need a regulatory-status layer on top. The sections below set out what that layer contains.
Verifying Registration Status and Annual-Fee Compliance
The first rewritten checklist item is direct verification of registration status, done annually, not assumed from the original empanelment file.
- Confirm current registration on the IRDAI record. Check the TPA against IRDAI's published list of registered TPAs at each policy renewal, and keep a dated copy in the vendor file. Do not rely on the certificate copy collected at onboarding; under perpetual registration that document has no expiry date to prompt a re-check, which is precisely why you must schedule one.
- Ask for evidence of annual-fee payment. The amendment makes continued registration conditional on annual fees, and it contains express provisions on delayed payment and consequences of non-payment. A written confirmation from the TPA that its annual fee is paid and its registration is in good standing, renewed each year, is a reasonable and cheap ask. A TPA that resists providing it is telling you something.
- Ask about any pending regulatory action. Continued compliance is the other leg of perpetual registration. Add a standing question to the annual review: any IRDAI directions, show-cause notices, or penalties in the last twelve months.
- Put a registration warranty in the service agreement. The agreement should warrant that the TPA holds valid registration under the amended regulations, will maintain it including timely fee payment, and will notify the policyholder and insurer promptly of any lapse, suspension, or regulatory action affecting it.
A Listed TPA Is a Different Counterparty
The amendment's permission for eligible TPAs to pursue equity listing, subject to prescribed conditions, changes the character of the entity on the other side of your service agreement. None of this makes a listed TPA better or worse than a privately held one, but it makes it different, and the differences run through the three things a buyer cares about.
Service economics. A listed company answers to public shareholders on quarterly numbers. Fee pressure on corporate accounts, margin discipline on servicing costs, and appetite for loss-leading service commitments all shift when the administrator has a share price. A TPA raising public capital may also invest harder in technology and network than a privately held rival can, which can cut in the buyer's favour. Either way, the fee quote and the service commitment should be read against the economics of the entity making them.
Reporting and disclosure incentives. A listed TPA publishes audited financials, and material developments become disclosable events. That gives buyers visibility into administrator solvency that has never existed before: you will be able to read your TPA's balance sheet. The mirror image is that your programme's data sits inside a company whose growth story is told to markets, so data-use boundaries in the service agreement deserve a harder look.
Continuity risk. Listing brings the possibility of ownership change through the market: stake sales, activist pressure, acquisition. A privately held TPA changes hands rarely and visibly; a listed one can change control in ways that are outside anyone's bilateral relationship. Your contract's change-of-control and assignment clauses, often boilerplate in TPA agreements, become live provisions.
For a TPA that has filed for listing or announced the intention, add these questions to the diligence file: what conditions has IRDAI prescribed for the listing and has the TPA met them; will the corporate servicing team and account structure survive the listing unchanged; what happens to the service agreement on a change of control; and how will client data be described and used in any offer document or investor disclosure.
Performance Diligence Still Decides the Employee Experience
Regulatory-status diligence is necessary, but it verifies the licence, not the service. The rest of the checklist remains what it has always been: the operational tests that predict whether employees will be served well, which the registration change makes more important because there is no longer a periodic regulatory review reinforcing them.
- Cashless turnaround, measured. Ask for the TPA's actual pre-authorisation turnaround times and cashless ratio on comparable corporate accounts, against IRDAI's cashless timelines, not the brochure promise. The framework for testing this is set out in our TPA selection guide for corporate health programmes.
- NHCX readiness, evidenced. The National Health Claims Exchange is the digital rail that group health claims are moving onto, and a TPA's real integration status is a strong signal of operational maturity. Ask what share of the TPA's claims currently flow through NHCX and what the integration roadmap is; the NHCX claims-desk workflow shows what good looks like from the buyer's side.
- Network stability, not network size. Hospital-by-hospital cashless coverage in the postcodes where employees live, plus the record on mid-year de-empanelment and hospital payment disputes.
- MIS quality. Clean, timely claims MIS is what lets you manage the programme and negotiate the renewal from evidence. Demand a sample before empanelment.
- Escalation accountability. A named corporate account owner and a tested escalation path, not a retail queue.
Under perpetual registration, a TPA's performance history with corporate clients becomes the primary fitness evidence available to a buyer. Reference checks with other HR and benefits teams, which used to supplement the regulator's renewal review, now substitute for it.
Contract Clauses That Now Carry the Weight
The service agreement absorbs the risk that the renewal checkpoint used to police, so four clauses deserve renegotiation attention in the 2027 cycle.
- Registration and compliance warranty. As above: valid registration under the amended regulations, timely annual-fee payment, prompt notification of any lapse or regulatory action, with a termination right if the warranty breaks.
- Data portability on exit. If you leave the TPA, or the TPA loses its registration, or control changes and you exercise an exit right, your programme's data must move with you: member records, claims history, cashless authorisation records, hospital empanelment status for your account, and open-claim files, in a usable format and within a defined number of days. Vague "reasonable cooperation on transition" language is not enough when the exit scenario now includes a registration lapse with statutory consequences.
- Exit and transition assistance. A defined transition period during which the outgoing TPA continues to process in-flight claims, or hands them over in a controlled way, so employees mid-hospitalisation are not stranded between administrators.
- Change-of-control and assignment. Notice of any change of control, and an exit right without penalty if control changes in a way the buyer reasonably objects to. For a TPA on a listing path, this clause is the buyer's protection against waking up with a materially different counterparty.
These clauses cost little to negotiate at empanelment and are nearly impossible to add mid-crisis. The disciplines in our TPA management guide for group insurance programmes cover how to operationalise them once agreed.
The 2027 Renewal-Cycle Checklist
Pulling the threads together, here is the rewritten TPA due-diligence checklist for the 2027 group health renewal cycle:
- Verify the TPA's current registration on the IRDAI record and file a dated copy.
- Obtain written confirmation of annual-fee payment and good standing under the IRDAI (Third Party Administrators - Health Services) (Amendment) Regulations, 2026.
- Ask about regulatory actions, notices, or penalties in the past twelve months.
- Confirm the service agreement carries a registration warranty, data-portability obligations, transition assistance, and a change-of-control exit right.
- Test cashless pre-authorisation turnaround and the cashless ratio against delivered performance on comparable accounts.
- Verify NHCX integration status with numbers, not adjectives.
- Check network stability in your employee postcodes, including the hospital-payment-dispute record.
- Review a live MIS sample and confirm the corporate escalation path with a named owner.
- If the TPA has filed for or announced a listing: confirm the prescribed conditions are met, the corporate servicing structure survives, and investor disclosures respect your data boundaries.
The amendment is, on balance, good for the TPA sector: perpetual registration removes a recurring administrative burden, and listing access opens a capital route that can fund better claims technology. But the regulator has deliberately traded a periodic gate for continuous obligations, and the party with the strongest interest in verifying those obligations are being met is the buyer whose employees depend on the administrator every day. From the 2027 cycle onward, TPA fitness is checked at your renewal, or it is not checked at all.
