Medicare marketing is subject to stringent compliance regulations that go beyond standard insurance sales rules, and these have only tightened in recent years.
Successful agencies know that "compliance-first" isn't just a legal duty but a strategic advantage – adhering meticulously to the rules builds consumer trust and avoids disruptions (fines, suspended enrollments) during the crucial AEP season.
Standardized TPMO Disclaimer
As of late 2023, CMS requires a specific disclaimer for Third-Party Marketing Organizations (TPMOs) that must be prominently given in all marketing interactions.
The disclaimer states:
> *"We do not offer every plan available in your area. Currently, we represent [X] organizations which offer [Y] plans in your area. Please contact Medicare.gov, 1-800-MEDICARE, or your local State Health Insurance Assistance Program (SHIP) to get information on all of your options."*
This notice must be conveyed verbally within the first 60 seconds of a call and included on websites, emails, and other materials.
Agents cannot imply they represent all plans if they don't, and even if they do represent all, a variant of the disclaimer is required.
This rule was a response to complaints about misleading marketing (e.g. mailers or TV ads looking like official Medicare communications). Top agencies have updated all scripts and collateral to include this language, and they train agents to always lead with transparency about plan offerings.
Call Recording Requirements
Since 2022, CMS has mandated that all sales, marketing, and enrollment calls with beneficiaries be recorded and retained for 10 years.
In 2024, CMS refined the rule to clarify:
- It applies to video calls as well (e.g. Zoom)
- Only marketing/sales/enrollment calls must be recorded (service calls can be exempt)
Agencies have had to invest in recording systems and data storage to comply. This is unique to Medicare – most insurance lines don't require recording every call.
Compliance-focused agencies use recording not just to satisfy CMS, but as a quality assurance tool – reviewing calls for adherence to scripts and for coaching opportunities. The presence of recordings also deters rogue agents from saying anything misleading, since there's an audit trail.
Importantly, beneficiaries must be notified of the recording, so agents typically say "This call is being recorded for quality and compliance" at the outset.
Scope of Appointment (SOA) Rules
Medicare regulations require that prior to any personal marketing appointment (in person or telephonic), the beneficiary sign an SOA form indicating what products may be discussed (e.g. MA, Medigap, Part D).
In 2023, CMS reinstated a 48-hour cooling-off rule: the SOA should be obtained 48 hours before the appointment (if possible), to prevent high-pressure same-day sales.
There are exceptions for walk-ins and near-deadline situations, but in general agencies had to adjust workflows to send SOA forms well ahead of meetings.
Additionally, SOAs cannot be collected at educational events – meaning if you hold a "Medicare 101" seminar, you can't sneak in SOA forms to prospect attendees; you must wait and get them later.
These rules preserve a consumer's right not to be ambushed by sales pitches beyond what they agreed to. Compliant agencies scrupulously follow SOA procedure, as secret shoppers and audits do check for timestamps on those forms.
No Unsolicited Contact / "Scope" of Marketing
Medicare Marketing Guidelines prohibit cold-calling consumers about MA or Part D. Leads must come from the consumer's request or permission.
Even door-to-door contact is prohibited, even if a prospect returned a business reply card (that only permits a call, not a pop-in visit).
Agents also may only call a given lead for up to 12 months from the time the consumer provided their info – you can't keep calling a lead from 3 years ago.
These restrictions are stricter than ordinary telemarketing and require agencies to maintain tight do-not-contact lists and consent records.
The best agencies have embraced permission-based marketing (e.g. digital leads with explicit opt-ins, community events where attendees voluntarily give info) to stay on the right side of these rules.
Violations can result in hefty civil monetary penalties (exceeding $100,000 per violation) for plans or agencies, so the stakes are high.
Marketing Material Oversight
CMS requires any marketing materials (brochures, websites, ads) related to Medicare Advantage or Part D to either be approved by CMS or use standardized language.
Recent rule changes clarified that agents must submit any self-created marketing pieces to the CMS Health Plan Management System (HPMS), after getting carrier approval.
Furthermore:
- Use of "Medicare" in agency names, logos, or URLs is tightly controlled
- Superlatives are banned – an agent cannot say their service is "the best" or "highest rated" unless they have data to substantiate it for the current year
Successful agencies err on the side of caution: they avoid flashy claims and stick to factual comparisons. They also coordinate closely with their carrier partners or FMOs to ensure all pieces (even a social media post) meet guidelines.
For example, even a Facebook ad must include the new TPMO disclaimer and avoid words like "Medicare endorsed" or any implication of government affiliation.
Enrollment and Verification Compliance
When it comes to actually enrolling clients, Medicare has unique steps like required pre-enrollment disclaimers (e.g. the client must acknowledge understanding of plan rules), and for telephonic enrollments, a mandatory verification script.
Agencies that enroll by phone often use Third-Party Verification (TPV) services or recording of the uniform script to ensure the enrollment is valid.
Compliance-oriented firms train agents to explain plan effects on existing coverage (e.g. "this MA plan will disenroll your current Part D") as mandated. They also must send required documents like the Summary of Benefits and Star Ratings.
These aren't typical concerns in other insurance sales, but in Medicare, failing to provide a required disclosure can lead to retroactive penalties or even rescission of enrollments.
The Strategic Value of Compliance
In essence, Medicare marketing compliance is about protecting seniors from confusion and high-pressure tactics.
Agencies that embrace this – by being transparent, documenting everything, and training their teams on the rules – often earn consumer trust.
A "compliance-first approach" builds credibility: seniors have been bombarded with deceptive mailers and calls, so an agent who plainly states disclaimers and patiently follows procedures can stand out as trustworthy. This pays off in referrals and retention.
As evidence, a KFF study found that older adults' understanding of Medicare is low and misleading marketing has caused real harm, leading CMS to step up oversight.
The best agencies welcome this oversight as it elevates industry standards. They implement robust compliance programs – monitoring calls, having managers review a sample of enrollments, and keeping meticulous records (calls, SOAs, etc.) for the required 10-year period.
By doing so, they avoid the nightmare scenario of a CMS audit during AEP that could shut down their operation. Instead, they sail through AEP with confidence that all interactions are above-board, and they use "we do things the right way" as a selling point to consumers.