Two Insurers on Your Group Health Panel Just Got Sanctioned: A Diligence Checklist, Not a Panic Button

On 20 August 2026, IRDAI published orders against Acko General Insurance Limited and Niva Bupa Health Insurance Co. Limited for non-compliance with Expenses of Management limits for FY2024-25. Business Today reported that Niva Bupa is barred from opening any new place of business for six months, with effect from 19 August 2026. The Acko order was announced in the same 20 August press release; the reporting on it identified the enforcement provision invoked rather than the restriction imposed, so read that order directly before assuming it mirrors the Niva Bupa one.

The numbers behind the orders are specific. Moneylife reported that Acko General's allowable EoM for FY25 was Rs 650.37 crore against actual expenses of Rs 985.15 crore, an excess of Rs 334.78 crore, and that the direction was issued under Regulation 22(1)(b) and (c) of the IRDAI (Expenses of Management, including Commission of Insurers) Regulations, 2024. Asia Insurance Post put Niva Bupa's FY25 EoM excess at Rs 248.37 crore, noting that a health insurer's expenses should not exceed 35% of gross written premium.

Why this matters to a corporate buyer rather than only to the insurers' shareholders: both companies are active quoters on SME and mid-market group mediclaim. If your organisation runs a three-to-five insurer panel for group health, there is a fair chance at least one of these two names sits on it, either holding a live policy or quoting at the next renewal. The orders do not require you to do anything. They do give you a reason to run a structured review rather than either ignoring the news or reacting to the headline.

Precision matters here, because the gap between what the orders say and what a worried HR head assumes they say is where bad panel decisions get made.

What the orders do:

• Bars Niva Bupa from opening any new place of business for six months. That means no new branches or offices during the restriction period.
• Puts each insurer's expense structure under explicit regulatory scrutiny, with the FY25 breach quantified on the record.

What the orders do not do, on either insurer:

• They do not suspend or restrict either insurer's certificate of registration. Both remain licensed to underwrite.
• They do not stop either insurer from quoting on, issuing, or renewing group mediclaim or any other line of business.
• They do not touch existing policies. Cover continues on the terms already bound.
• They do not direct anything about claims. Claim admissibility, cashless authorisation, and settlement obligations are unchanged.
• They are not a solvency finding. An EoM breach is about the ratio of expenses to premium, not about whether the insurer holds adequate capital against its liabilities.

It is also worth recording what the insurers have said. Business Today reported that Niva Bupa stated it was compliant with the EoM regulations for the full year ended 31 March 2026 and for the quarter ended 30 June 2026. In other words, the sanction punishes a FY2024-25 breach, and the company's position is that the breach has already been cured in subsequent periods. That claim is checkable, and the checklist below tells you how to use it.

Expenses of Management covers an insurer's operating costs and commission as a share of gross written premium. The 2024 regulations cap that share, and the EoM framework and its caps exist because an insurer that spends too much acquiring and running business must eventually recover the overspend from policyholders, through pricing, through servicing cuts, or through both.

An insurer under an EoM order is an insurer whose expense line is being compressed, either voluntarily as part of its remediation plan or under regulatory direction. That compression has to land somewhere, and three of the places it can land sit directly in the group health buyer's field of view:

1. Distribution and servicing spend. Commission and distribution costs are the largest controllable component of EoM. An insurer cutting there has less to spend on intermediary support, on dedicated account servicing teams, and on the branch and relationship infrastructure that resolves escalations. Where a six-month bar on new places of business applies, the point sharpens: whatever servicing footprint the insurer has today is the footprint you get for the restriction period.
2. TPA economics. For group health, servicing quality runs substantially through the TPA. An insurer squeezing expenses will negotiate TPA fees harder, and a TPA squeezed on fees has its own margin pressure on call-centre staffing, cashless turnaround, and member grievance handling. This is a second-order effect, not a certainty, but it is the mechanism through which an expense sanction can eventually show up as slower pre-authorisation on your employees' hospitalisations.
3. Renewal pricing. An insurer that cannot fix its combined ratio through expense growth has more reason to fix it through price. Expect firmer renewal terms and less appetite for the discounting that wins competitive group health business. If your account has run a high claims ratio, expect the loading conversation to be less negotiable than last year.

None of these effects is automatic, and none is visible on day one. That is exactly why the right response is a review with evidence, not a decision from the headline.

Run this within the next few weeks, before renewal season compresses your options. It applies to any insurer under an EoM or similar conduct sanction, not just the two named in the August 2026 orders.

1. Map your exposure. List every live group policy (GMC, GPA, GTL) and every pending quote that sits with a sanctioned insurer, with sums insured, member counts, and renewal dates. You cannot assess impact without knowing what is at stake and when the next decision point falls.
2. Read the order itself. Work from the IRDAI press release of 20 August 2026 and the underlying orders, not from secondary summaries, and note the exact restriction, its duration, and the regulation invoked for each insurer separately. Our companion note on what an EoM place-of-business freeze restricts walks through the same August 2026 orders. The distance between "barred from new places of business" and "barred from new business" is the whole review.
3. Ask for a written current-period compliance statement. Niva Bupa has publicly stated compliance for the year ended 31 March 2026 and the quarter ended 30 June 2026. Ask each sanctioned insurer on your panel for the equivalent statement in writing, through your broker. An insurer that has already cured the breach should have no difficulty saying so on paper.
4. Check solvency separately. Pull the insurer's latest disclosed solvency ratio and its trend over the past few periods. The EoM order says nothing about solvency either way, so verify it independently rather than inferring weakness or strength from the sanction. The approach in our note on vetting insurer financial security and counterparty risk applies here unchanged.
5. Test your servicing dependence on the restricted activity. Where the order bars new places of business, the restricted activity is branch expansion, not underwriting. If your locations are already served by existing branches and your servicing runs through a named account team and TPA, the restriction may not touch you at all. If you were promised servicing presence in a city where the insurer has no office yet, that promise is now suspended for six months, and you should ask how the insurer will cover it.
6. Pull your own claims-service data. Cashless authorisation turnaround, reimbursement settlement time, repudiation rate, and escalation volume on your own book for the past two to three years. This is your baseline. The question over the next two quarters is whether these numbers deteriorate, and you cannot detect deterioration without a baseline measured now.
7. Start the renewal conversation early. If a sanctioned insurer holds a policy renewing in the next six months, begin the market exercise 90 to 120 days out instead of 60. Get alternative quotes so that any hardening of renewal terms meets competitive pressure rather than a captive buyer.
8. Document the review. A one-page record of what was checked, what the insurer stated, and why the panel decision was taken protects whoever made it. If service later deteriorates, the record shows diligence; if the insurer performs, it shows the decision not to move was considered rather than inert.

The honest answer is that this order, by itself, is not a reason to move a group policy. It is a reason to watch one.

A single EoM sanction, with the insurer stating current-period compliance and with no restriction on underwriting or claims, sits at the low end of the severity scale for regulatory action. Moving a group health policy has real costs: re-underwriting of the group, migration of enrolment data, a new cashless network for members to learn, loss of the escalation relationships that get difficult claims resolved, and continuity questions for members mid-treatment. Those costs are certain; the servicing deterioration the sanction hints at is only possible.

Move, or start planning to move, when the evidence stacks:

• Repeat or escalating enforcement. A second order, a penalty, or a restriction that touches underwriting or claims changes the picture materially. IRDAI's enforcement posture on EoM has been tightening, as we covered in the note on the EoM glide path and its enforcement mechanics, so a repeat breach after this public a warning would say something about management control.
• Measured service deterioration on your book. Cashless TAT lengthening, reimbursement backlogs growing, repudiation rate rising against your own baseline. This is the direct evidence the checklist is designed to capture.
• Solvency pressure appearing alongside expense pressure. Either alone is manageable; together they describe an insurer with narrowing options.
• Claims conduct worsening. Repudiations on grounds that do not survive scrutiny are a leading indicator worth more than any regulatory headline. Our review of health claim repudiation patterns and what they reveal about insurer selection sets out what to look for.

Do not move because the name appeared in the press, because a competing insurer's sales team is circulating the order, or because someone senior asked "are we safe with them?" and moving felt like the demonstrably cautious answer. A panel decision made to look decisive, against an insurer whose claims performance on your book is fine, trades a hypothetical risk for a certain disruption to every insured employee.

If a sanctioned insurer is quoting on your renewal, the sanction changes the negotiation in both directions, and it pays to know which effects favour you.

Working against you: an insurer compressing expenses has less room to buy business. Aggressive first-year pricing to build group health share is exactly the behaviour an EoM remediation plan curtails, because underpriced business worsens the expense ratio's denominator problem. Expect renewal terms closer to technical pricing, firmer claims-experience loadings, and less flexibility on value-adds that carry servicing cost, such as on-site help desks or wellness programmes.

Working for you: the insurer needs to demonstrate that it can grow within the expense caps, and profitable, low-acquisition-cost renewals of existing group business are the cheapest premium it can retain. Your renewal costs the insurer far less to keep than a new logo costs to win. A buyer with clean claims data, an early start, and live alternative quotes is negotiating from strength.

Two practical points for the paperwork. First, get any servicing commitments (dedicated account manager, TPA service levels, cashless TAT targets) written into the service-level annexure rather than left in the pitch deck, because commitments that cost money are the ones expense compression tests. Second, if the quote depends on servicing presence the insurer does not yet have in your locations, remember that new offices are exactly what a place-of-business bar suspends for six months, and ask for the interim servicing plan in writing.

The Niva Bupa restriction runs to early 2027. Between now and then, three signals tell you whether this stays a footnote or becomes a panel decision.

First, the regulatory record. Watch for any further IRDAI action against either insurer, for the restriction being lifted or extended, and for the insurers' public disclosures on EoM compliance in FY2026-27. Niva Bupa's stated compliance for the year ended 31 March 2026 and the June 2026 quarter is the benchmark it has set for itself; subsequent disclosures either confirm it or do not.

Second, your own book's service metrics against the baseline you captured in the checklist. Quarterly is frequent enough; the deterioration mechanisms described above take months, not weeks, to surface.

Third, renewal behaviour across the market. If sanctioned insurers start declining to quote on loss-making group accounts or loading them heavily, that is the expense discipline working as the regulator intended, and it tells you what your own renewal will look like before the quote arrives.

A sanction like this one is, in the end, a prompt to do the diligence that a group health panel deserves every year: know your insurers' regulatory standing, measure their service on your own book, and make panel decisions on evidence. Sarvada gives commercial insurance brokers structured, searchable access to insurer policy wordings, so a broker running a panel review can compare what each carrier actually grants and excludes alongside its regulatory and service profile, and advise the client on evidence rather than headlines. Request Access to see how structured wording comparison supports a defensible panel decision.