45 C.F.R. § 156.340
(a) General requirement. Effective October 1, 2013, notwithstanding any relationship(s) that a QHP issuer may have with delegated and downstream entities, a QHP issuer maintains responsibility for its compliance and the compliance of any of its delegated or downstream entities, as applicable, with all applicable standards, including -
(b) Delegation agreement specifications. If any of the QHP issuer's activities or obligations, in accordance with paragraph (a) of this section, are delegated to other parties, the QHP issuer's agreement with any delegated or downstream entity must -