"Sponsors of retirement plans operating in Puerto Rico, particularly in the wake of an Infosys security breach last November ... have undertaken to evaluate the cybersecurity practices of local service providers that have access to sensitive information of plan participants. Pursuant to their fiduciary duties under [ERISA], plan sponsors can and have negotiated to pay lower fees to those providers, such as Puerto Rico trustees, recordkeepers, and, to a lesser extent, paying agents.  MORE >>