CMS-Compliant Marketing for Health Insurance Brokers: What You Need to Know in 2026

If you are a health insurance broker involved in Medicare Advantage, Medicare Supplement, Part D, or ACA marketplace plans, the regulatory landscape for marketing has shifted dramatically over the past two years. The Centers for Medicare and Medicaid Services has tightened rules around agent and broker marketing practices, and the consequences for non-compliance range from corrective action plans to termination from carrier contracts.

This is not optional knowledge. Every broker marketing health insurance products in 2026 needs to understand these rules and build them into their daily operations.

The TPMO Framework

One of the most significant regulatory changes has been the expansion of Third-Party Marketing Organization (TPMO) requirements. If you are an independent agent or broker who is not directly employed by a carrier, you likely fall under the TPMO designation when marketing Medicare products.

Under current rules, TPMOs must ensure that all marketing materials are compliant with CMS guidelines, that beneficiaries provide explicit consent before being contacted, and that scope-of-appointment documentation is collected prior to any sales presentation. These are not suggestions — they are contractual and regulatory requirements.

For brokers, this means every email, text message, social media post, and direct mail piece related to Medicare products must meet CMS standards. You cannot use superlatives like “best plan” or “lowest cost” without qualification. You cannot use the Medicare name or logo improperly. And you cannot contact a beneficiary about Medicare products without their prior documented consent.

Call Recording and Documentation Requirements

CMS now requires that all marketing and enrollment calls related to Medicare be recorded. This applies to inbound and outbound calls, including calls where a beneficiary initiates contact after receiving your marketing materials.

Recordings must be retained for a minimum of 10 years, and they must be made available to CMS, carriers, or state regulators upon request. Brokers must also inform the beneficiary at the start of the call that the conversation is being recorded.

Beyond call recording, documentation requirements extend to every client interaction. Scope-of-appointment forms must be signed (physically or electronically) at least 48 hours before a planned appointment, with exceptions for walk-ins and certain inbound contacts. Every plan presentation must be documented, and every enrollment must include proper disclaimers and disclosures.

Prohibited Marketing Practices

CMS has explicitly prohibited several marketing practices that were once common in the industry. Brokers should be aware of the following restrictions:

Unsolicited door-to-door contact for Medicare products is prohibited. You cannot show up at a beneficiary’s home without a prior appointment and signed scope of appointment.

Cross-selling during Medicare enrollment is restricted. If a beneficiary contacts you about Medicare Advantage, you cannot use that interaction to market ancillary products like dental, vision, or hospital indemnity unless the beneficiary explicitly requests information about those products and a separate scope of appointment is obtained.

Misleading plan comparisons are prohibited. You cannot present plan information in a way that steers beneficiaries toward a specific plan unless the comparison is based on the beneficiary’s stated needs and preferences, using accurate and current plan data.

Nominal gift limits apply. You cannot offer gifts, meals, or other incentives above the CMS-defined nominal value to attract beneficiaries to marketing events or appointments.

How a CRM Helps With Compliance

A properly configured CRM does not guarantee compliance, but it provides the infrastructure that makes compliance significantly easier to maintain. Here is how:

Consent tracking. Your CRM should document when and how each contact provided consent to be contacted. This creates an audit trail that protects you if a complaint is filed. Automated opt-in workflows ensure no one enters your marketing sequences without documented permission.

Template management. Pre-approved email and SMS templates with proper disclaimers reduce the risk of an agent sending non-compliant messages. When templates are centrally managed, you can update compliance language once and have it propagate across all communications.

Scope-of-appointment automation. Automated workflows can send SOA documents to beneficiaries 48 hours before a scheduled appointment, collect electronic signatures, and store the completed documents in the contact record — all without manual intervention.

Audit trails. Every communication, status change, and workflow action logged in your CRM creates a documentation trail that demonstrates compliant behavior. If a carrier or regulator audits your marketing practices, you have records showing exactly what was sent, when, and with what consent.

Campaign timing controls. CMS restricts when certain Medicare marketing activities can occur relative to enrollment periods. A CRM with date-based automation ensures campaigns launch and stop at the correct times, preventing inadvertent violations.

Staying Current

CMS rules are not static. New guidance is issued regularly, and carriers often add their own requirements on top of CMS regulations. Brokers need a reliable process for staying current with regulatory changes and updating their marketing practices accordingly.

Subscribe to CMS communications, participate in carrier compliance webinars, and connect with compliance-focused industry groups. When rules change, update your CRM templates and workflows before your next campaign launches.

HIBCopilot includes a regularly updated template library designed with current CMS guidelines in mind. When regulatory changes affect marketing templates or workflow timing, we update the library and notify users so they can adjust their active campaigns.

Compliance is not optional, and it should not be an afterthought. The brokers who build compliance into their systems from the start spend less time worrying about audits and more time serving their clients. Start your 14-day free trial and see how a compliance-aware CRM platform can protect your business while you grow it.