What the CRA Requires for a Valid PHSP
Third-party administration and proper documentation are non-negotiable to survive CRA scrutiny.
I've spent enough years untangling PHSP reassessments to tell you the pattern before I even open the file: someone built a nice-looking plan, skipped one structural piece, and got hit with a bill three years later covering every dollar they thought was tax-free. Get the structure right and it's one of the best tools in the compensation toolkit, but get it wrong and CRA converts the entire thing into taxable income, retroactively, with interest.
Quick definition, since the acronym gets thrown around loosely by people who've never actually read the Interpretation Bulletin. A Private Health Services Plan lets a business reimburse employees for eligible medical expenses, tax-free to the employee and deductible to the business. It sits in Section 248(1) of the Income Tax Act, and the tax-free treatment comes from s.6(1)(a)(i). Call it a Health Spending Account, a Cost Plus plan, or a Health Care Expense Account; underneath the branding, it's the same CRA-recognized structure.
The appeal is obvious: pay for what employees actually use instead of a flat premium nobody asked for. But CRA has hard conditions attached, and falling short of any one of them means reassessment. The employer loses the deduction, the employee owes tax on money already spent, and nobody's happy in the meeting that follows. These conditions all have to hold at once, and this isn't a checklist you skim once during setup and forget about.
The insurance-nature test that every PHSP must pass first
Everything starts here, since Interpretation Bulletin IT-339R2, paragraph 3, says a PHSP has to be "in the nature of insurance." Fail this and nothing else in the plan matters, no matter how clean the paperwork looks.
CRA checks for five things:
An undertaking by one person
To indemnify another person
For an agreed consideration
From a loss or liability in respect of an event
The happening of which is uncertain
All five have to hold, every time, and dropping even one gives CRA grounds to recharacterize the whole arrangement, usually as taxable income wearing a PHSP costume.
Here's where I see people trip. A sole proprietor reimbursing their own medical bills isn't transferring risk to anyone, and there's no second person being indemnified, and no real uncertainty since they already know what they spent. The test collapses immediately, and that's the actual reason self-administered, self-directed plans get rejected. Third-party administration shows up again and again in this piece for the same underlying reason: without it, there's no insurance argument left standing.
How the 90% rule defines what a PHSP can cover
CRA's current position, retroactive to January 1, 2015, requires that all or substantially all of a plan's premiums or benefits relate to expenses eligible under s.118.2(2). "All or substantially all" means 90% or more, and that number isn't arbitrary; it came out of years of CRA fielding plans that were 100% compliant except for one stray gym membership reimbursement.
Before 2015 the bar was absolute, with no exceptions allowed. CRA eased it to 90% because otherwise legitimate plans kept getting derailed by small, incidental non-eligible claims. The relief made the rule livable.
Measurement depends on plan type. Insured plans need 90% of premiums tied to METC-eligible expenses, while self-insured plans, the ones running without a traditional insurer, need 90% of benefits actually paid out to hit that same bar.
For plan design, this settles the question fast: you can't fold a gym membership or a wellness stipend into the PHSP and call it a day. Those items drag the ratio down, and enough of them puts the whole plan at risk. Most businesses that want to offer those extras run them through a separate Personal Spending Account instead, taxable and kept deliberately apart from the PHSP.
Which expenses actually qualify under s.118.2(2)
Eligible expenses come from s.118.2(2), with the fine print in Income Tax Folio S1-F1-C1.
Usually fine: dental work (cleanings, fillings, orthodontics), prescription drugs, vision care (glasses, contacts, laser eye surgery), physiotherapy and registered massage therapy, mental health services from a licensed practitioner, medical devices, and certain travel costs tied to getting care.
Usually not fine: cosmetic procedures without medical necessity, hair removal or regrowth treatments, over-the-counter drugs without a prescription, non-prescription lenses, gym memberships, general wellness products.
CRA's list isn't exhaustive, and plenty of claims land in the gray, which is where documentation carries the whole weight: itemized receipts, a prescription, practitioner credentials, written certification, proof of payment. A borderline claim gets decided by what's on paper, not by what the employee meant when they submitted it. Spell out the eligibility rules for employees before launch, since nothing tanks confidence in a plan faster than a wave of rejected claims nobody warned them about.
Why the employment relationship is a hard threshold condition
A PHSP exists because of employment, and nothing else substitutes for that. The income exclusion under s.6(1)(a)(i) only applies because the benefit comes from being employed, not from some other relationship dressed up to look like one.
When an employer pays premiums or reimburses an expense, the exclusion only holds if that payment is a reimbursement under a valid plan. Paying someone's medical bill directly, with no plan behind it, doesn't clear that bar on its own.
There's no minimum headcount, and CRA has confirmed a corporation with exactly one employee can run a PHSP. But the employment has to be real: paid, documented, functioning like actual employment rather than a label someone slapped on to access a tax benefit while operating as effectively self-employed.
That distinction, real employment versus a label of convenience, is exactly where incorporated and unincorporated businesses split, and where CRA starts treating employees very differently from shareholders.
What incorporated businesses must show when the owner is also an employee
Both incorporated and unincorporated businesses can run PHSPs, but the rules diverge hard once ownership enters the picture. Incorporated structures have more flexibility, though they face a specific test that unincorporated ones don't.
CRA's starting assumption: a shareholder who can meaningfully influence business decisions is getting the benefit because they own the place, not because they work there. That makes it a shareholder benefit under s.15(1), taxable to the person and non-deductible to the corporation, which is not a great outcome for anyone involved.
Rebutting that assumption takes three things, laid out in 2022 CALU Q10 (CRA document 2022-0928901C6). The shareholder needs to be actively working in the business, the benefits need to look reasonable next to what an arm's-length employee doing similar work would get, and there needs to be an actual, documented employment contract between the shareholder and the corporation.
Clear those three and you get what's sometimes called the "Class of One" setup: a corporation with a single incorporated owner drawing T4 income can run a PHSP for themselves and their dependants, as long as it's properly documented and the benefit level makes sense.
Here's a setup that doesn't survive, because CRA already ruled on it. Document 2014-0521301E5: a cost-plus arrangement where the sole employee-shareholder, spouse, and household members all get reimbursed, and the "administrator" just tacks a fee on top with no real review. CRA found it missing the insurance elements entirely. There's no dollar ceiling written into the rules for incorporated businesses, but CRA absolutely will challenge a benefit that looks disproportionate to the salary attached to it. The benefit has to track the role and the pay.
The tighter constraints facing sole proprietors and partnerships
Unincorporated businesses get a narrower lane. A sole proprietor can't pay medical bills out of pocket, call it a plan, and move on; it has to run through an actual insurance plan or a cost-plus arrangement with a genuine third-party administrator behind it.
No arm's-length employees means no qualifying plan, period. CRA's view: a sole proprietor with nobody but themselves on payroll isn't transferring any risk. They're paying their own bills through a slightly fancier channel, and the insurance-nature test fails exactly the way it does for self-administered plans.
Once a sole proprietor has arm's-length employees, a PHSP for those employees works, and the owner can potentially claim their own premium deduction under s.20.01. That comes with an income test: self-employment net income has to top 50% of total income, either this year or last, per CRA's T4002 guide.
If arm's-length employees make up less than half the workforce, caps kick in under s.20.01(2): $1,500 a year for the proprietor, their spouse, and each dependant 18 or older, and $750 for each dependant under 18. Run the numbers for a proprietor with a spouse and two kids under 18, and you land at $4,500 a year, max. Once arm's-length employees hit 50% or more of the workforce, the cap disappears and the deduction tracks whatever coverage those employees actually receive.
Two definitions worth pinning down. An arm's-length employee is unrelated to the owner and not a partner in the business, while a qualified employee is arm's-length, full-time, and has put in at least three months on the job; seasonal and temporary workers don't count toward either test. And the deduction only works through an actual PHSP, pay-as-you-claim, inside those family-based caps, since there's no clever workaround that skips the structure and keeps the deduction.
How a PHSP must be structured and documented to survive scrutiny
The paperwork is the plan, in a real sense. Written terms need to cover the annual benefit amount, who's covered, which expense categories qualify, and how claims get submitted and processed. Skip this and the arrangement is just a habit, not a plan.
Incorporated businesses should have a board resolution or corporate minutes formally establishing the PHSP as an employee benefit. It backs up the employment-relationship argument if CRA ever comes knocking.
The benefit amount gets fixed at the start of the plan year and stays there. Adjusting it mid-year to match what someone's already spent defeats the entire structure; once the limit bends to fit a known claim, there's no uncertainty left, and uncertainty is one of the five elements the insurance test demands.
Timing matters too. Reimbursements only happen after the expense occurs, never before, and advance funding or pay-on-demand arrangements undercut the indemnification structure the whole plan rests on.
Employees can't cash out unused credits, and they can't transfer them for value, aside from buying premiums under another PHSP. Let cash come out the other end and the arrangement turns into taxable employment income.
Benefits need to apply consistently within a defined class of employees, and that class has to rest on real employment criteria: full-time versus part-time, management versus non-management, that kind of line. Shareholding status is not a legitimate class distinction, no matter how the plan document tries to dress it up. And keep records for the full CRA audit window: claim receipts, practitioner information, proof of payment, written certifications for anything borderline.
Why third-party administration is not optional
CRA wants claims adjudicated by a real, qualified third-party administrator, not by the business owner reviewing their own submissions. In practice, "wants" means "requires," because plans without it get reassessed at a much higher rate.
The logic isn't bureaucratic box-checking. Arm's-length review is what gives the plan its insurance character in the first place, and when the person running the business also approves their own claims, the risk-transfer and indemnification elements the entire test depends on simply aren't there. I've seen CRA reassess plans specifically because the "administrator" turned out to be the owner's bookkeeper rubber-stamping whatever came in.
A real third-party administrator reviews claims against METC eligibility, approves or declines on a documented basis, processes reimbursement (usually by EFT), and produces annual reporting for employer and employee both. Fees typically run a small percentage of approved claims. That fee buys the arm's-length structure that makes the plan defensible, and it's cheap insurance against a reassessment that could cost far more than the fee ever would.
The provider's process matters as much as their price. Whatever audit trail they keep is exactly what you'll need to hand CRA if the plan ever gets a second look.
One jurisdiction where the CRA rules are not the whole picture
Québec runs its own script here, and it catches people off guard constantly. Employer-paid private health and dental coverage is generally taxable to employees for Québec provincial income tax purposes, even when that same plan qualifies as a PHSP federally.
That's not a footnote you can skip. It changes the real, after-tax value of the benefit for anyone based in Québec, and it needs to get built into plan design and payroll from day one, not discovered during a T4 reconciliation two years later.
Any business with Québec-based employees should check provincial treatment with a tax adviser before assuming the federal framework covers the whole picture, since no other province has a comparable carve-out and outside Québec, CRA's rules are the whole story.
What a plan that meets all these requirements actually looks like in practice
I've walked through a lot of conditions here, so let me tell you what actually passes, in the room, when CRA asks for the file. Genuine employment, with a documented contract if the covered person is a shareholder, and a fixed annual benefit that doesn't move based on what gets claimed. At least 90% of payouts tied to expenses clearly eligible under s.118.2(2), with receipts backing up the borderline ones.
Claims run through a third-party administrator, never the owner's own desk, and unused amounts stay unused; they don't convert to cash. Employee classes rest on job function, not ownership stakes. And if there's anyone in Québec, the provincial tax hit gets worked out ahead of time instead of showing up as a surprise on someone's pay stub.
A plan that nails the 90% rule but skips third-party administration still fails, and a plan with a great administrator but no fixed annual limit still fails too. CRA is asking whether the whole arrangement, taken together, actually looks like insurance. Get that right, and a PHSP does what it's built to do: real coverage, tax-free to the employee, deductible to the business, and standing up to scrutiny because you built it that way from the start rather than patching it after the fact.
