A safe harbor 401(k) plan helps small businesses automatically pass annual nondiscrimination tests—avoiding costly issues like ADP/ACP test refunds or top heavy contributions. But not all safe harbor plans are created equal.
Safe harbor 401(k) plans come in two basic types today - traditional and Qualified Automatic Contribution Arrangement (QACA). Both can automatically satisfy IRS nondiscrimination testing but differ in how they approach employee participation, employer contributions, and administrative requirements.
Let’s break down how traditional and QACA safe harbor plans compare—and how recent retirement plan legislation like SECURE 1.0 and SECURE 2.0 might impact your decision when choosing the best safe harbor plan for your business.
A traditional safe harbor 401(k) plan requires employers to make one of the following contributions to eligible employees:
These contributions must be 100% immediately vested—no vesting schedule is allowed.
An annual safe harbor notice is required when matching contributions are used. There’s no notice required for plans using the nonelective contribution.
A QACA, or Qualified Automatic Contribution Arrangement, is a safe harbor 401(k) plan that includes automatic enrollment—meaning employees are enrolled at a preset deferral rate unless they opt out.
Employers must make one of the following contributions:
QACAs differ from traditional plans in a few key ways:
A QACA’s automatic enrollment feature must meet the following requirements:
Like QACAs, traditional plans can include automatic enrollment. However, this combination is uncommon due to the more flexible contribution and vesting requirements of a QACA.
Key differences between a non-automatic enrollment traditional plan and a QACA include:
Feature |
Traditional safe harbor |
QACA safe harbor |
Employee enrollment |
Voluntary |
Automatic, with opt-out |
Default deferral rate |
N/A |
Starts at 3%, increases 1% annually |
Maximum default deferral rate |
N/A |
10% initial year, up to 15% thereafter |
Minimum matching contribution (if used) |
Up to 4% |
Up to 3.5% |
Minimum nonelective contribution (if used) |
3% |
3% |
Annual notice requirement |
Yes (unless nonelective after SECURE) |
Yes |
Vesting for employer contributions |
Immediate |
Up to 2-year cliff vesting allowed |
Recent retirement legislation introduced several changes that affect safe harbor plans. Here's how SECURE 1.0 and SECURE 2.0 come into play:
Starting in 2025, new 401(k) plans must include automatic enrollment unless an exemption applies. QACAs already meet this requirement by design, which makes them a future-proof option for new plans.
Plans using a nonelective contribution no longer need to issue an annual safe harbor notice—reducing administrative burden. This applies to both traditional safe harbor and QACA plans.
SECURE 1.0 gave employers more time to convert their plan to nonelective-based safe harbor plan. The applicable deadline depends upon the amount employees will receive:
This flexibility can help employers respond to changing business conditions without losing safe harbor status.
The best safe harbor 401(k) plan for your business depends on your goals, budget, and workforce. Thanks to SECURE Act updates, employers have more flexibility than ever to tailor a plan design that fits their needs—whether that means reducing administrative requirements, encouraging employee savings, or planning for future compliance.
If you're still not sure which safe harbor plan is best for your company, reach out to us. We’ll help you design a 401(k) plan that’s compliant, cost-effective, and built for your team.