CMS Medicare Marketing Rules for Agents: A Plain-English Walkthrough

Most agents do not get in trouble for selling the wrong plan. They get in trouble for how they marketed it: a missing disclaimer, an unrecorded call, a Scope of Appointment collected at the kitchen table instead of beforehand. The mechanics are where the secret-shopper complaints come from.

This is a plain-English map of the CMS Medicare marketing rules for agents. It is a marketing-operations summary, not legal advice. You are the licensed party; we run marketing. And the single most important thing to internalize: these rules change almost every plan year. Anything below is a starting point to verify against current CMS guidance, not a permanent answer.

Are you a “TPMO”? Probably yes

CMS regulates Medicare marketing largely through a category called the Third-Party Marketing Organization (TPMO). The definition is broad. If you generate leads, market, sell, or enroll beneficiaries into Medicare Advantage or Part D plans — and you are not the plan carrier itself — you are almost certainly a TPMO. That includes solo agents, agencies, FMOs, and the vendors who sell you leads.

Why it matters: TPMO status is what triggers the disclaimer, the recording rule, and the documentation obligations below. You do not get to opt out by calling yourself “just an agent.”

The 4 Rules Agents Break Most

Here is the short list, in plain language, before we go deeper.

1. TPMO disclaimer — say (and display) that you do not offer every plan.
2. Call recording — record marketing and enrollment calls in full, and keep them.
3. Scope of Appointment (SOA) — document what the beneficiary agreed to discuss, before you meet.
4. Permission to Contact + records — only contact people who consented, and retain proof.

1. TPMO disclaimer

The disclaimer is standardized content prescribed at 42 CFR §422.2267(e)(41). If you do not sell for every MA organization in the service area, the regulation gives you the exact sentence: “We do not offer every plan available in your area. Currently we represent [insert number of organizations] organizations which offer [insert number of plans] products in your area. Please contact Medicare.gov or 1-800-MEDICARE to get information on all of your options.” The same paragraph specifies where it has to appear:

• Verbal: “conveyed during sales calls prior to the discussion of any benefits” — not merely somewhere in the first minute (§422.2267(e)(41)(ii)).
• Web: “prominently displayed on TPMO websites” (§422.2267(e)(41)(iv)).
• Print/electronic: included in any marketing materials, and conveyed electronically over email, online chat, or other electronic means (§422.2267(e)(41)(iii), (v)).

The wording has been revised between plan years, so confirm the current text against the regulation itself and CMS’s Managed Care Marketing guidance rather than reusing last season’s script. When we build Medicare landing pages, the disclaimer placement is a checklist item, not an afterthought. See how we handle Medicare agent marketing end to end, including compliant page structure.

2. Call recording

42 CFR §422.2274(g)(2)(ii) is explicit: “All marketing and sales calls, including the audio portion of calls conducted via web-based technology, must be recorded and retained in their entirety for a minimum period of 6 years. For the first 3 years of the retention period, records must be maintained in audio format. For years 4, 5, and 6, records may be maintained in either audio format or as complete and accurate transcript recordings.” Six years is the floor, not ten — a number that circulates widely in agent forums and is not what the regulation says. The frequent error is recording only the application; the marketing portion has to be captured too — the part where you describe plans, qualify the person, and steer the decision.

If your telesales setup cannot record and archive full calls, that is a compliance gap and a sales-coaching gap at the same time. You cannot improve a script you never hear.

3. Scope of Appointment

Before an individual sales or marketing meeting, you document which product categories the beneficiary agreed to discuss (for example, MA-PD vs. PDP vs. supplements). 42 CFR §422.2264(c)(3)(i) states that “prior to the personal marketing appointment, the MA plan (or agent or broker, as applicable) must agree upon and record the Scope of Appointment with the beneficiary(ies),” and that it “must be in writing for in-person personal marketing appointments.” Agents and brokers carry the same duty directly under §422.2274(b)(3), which requires them to “secure and document a Scope of Appointment prior to a personal marketing appointment.” Two details agents get wrong: the current regulation text contains no 48-hour advance requirement — the rule is simply before the appointment — and an SOA (or business reply card, or request for information) is valid for 12 months from the beneficiary’s signature date under §422.2264(c)(3)(iii)(A). The classic violation is still collecting the SOA at the start of the appointment to check a box, which is not “prior to” anything. For the operational deep dive on both the SOA and TPMO rules, see our focused guide to Scope of Appointment and TPMO compliance for Medicare agents.

4. Permission to Contact and records

You may only reach out to beneficiaries who gave Permission to Contact (PTC), and the permission is specific — consent to be called about Medicare Advantage is not blanket consent to call about everything, forever. The channel list is not a matter of interpretation: 42 CFR §422.2264(a) permits unsolicited contact “by conventional mail and other print media (for example, advertisements and direct mail) or email (provided every email contains an opt-out option),” and prohibits unsolicited door-to-door solicitation, approaching people in common areas, social-media direct messages, and “telephone solicitation (that is, cold calling), robocalls, text messages, or voicemail messages” — including calls based on referrals. Calls are not unsolicited if the beneficiary consented or initiated contact, such as returning a completed business reply card. Keep the proof.

This sits next to federal telemarketing law: the TCPA still governs how you dial and text consumers regardless of CMS. We cover that overlap in our guide to TCPA compliance when buying insurance leads. Note too that the FCC’s one-to-one consent rule never took effect — the Eleventh Circuit granted the petition for review and vacated it on January 24, 2025 in Insurance Marketing Coalition Ltd. v. FCC, No. 24-10277 — another example of why “verify the current rule” is not boilerplate.

What changes every plan year (and why it matters)

CMS updates the MCMG most years, and carriers layer their own stricter requirements on top through the oversight they are required to perform on TPMOs. Recent plan years have brought changes to disclaimer language, SOA timing, and the data agents must report up to carriers.

The practical takeaway:

• Re-read the current MCMG before each Annual Enrollment Period (AEP).
• Confirm your carrier/FMO’s interpretation — they often go beyond the CMS floor.
• Re-approve marketing materials annually; last year’s compliant flyer may not be this year’s.

If you want the marketing-strategy side of AEP rather than the rulebook, our Medicare AEP marketing playbook walks through campaign timing inside these constraints, and the cross-line open enrollment marketing calendar covers the same October-to-December run for agents who also write ACA or group business.

3 Ways Compliance Becomes a Marketing Asset

Here is the operator’s view. Agents who treat CMS rules as friction tend to cut corners and end up in secret-shopper reports. Agents who build the rules into their process — recorded calls, clean SOAs, disclaimers in the right place — generate something valuable: a paper trail that protects commissions and a call library that makes coaching real.

We run our own final-expense and senior-market lead operation, and a chunk of our close rate exists because full-call recording lets us tune scripts. Compliance and conversion are not enemies — the rules are really a filter on channel choice, which is why we look at the Medicare client acquisition channels ranked by CMS risk before committing budget to any of them.

Three ways the rules shape good marketing:

• Landing pages carry the disclaimer above the fold and capture PTC explicitly, not buried in fine print.
• Lead sources are documented so consent is provable when a carrier audits.
• Scripts open with the disclaimer and the SOA logic baked in.

If you are not sure whether your current funnel would survive a carrier audit, that is exactly what a free marketing audit is for — we look at your pages, consent flow, and recording setup with fresh eyes. You can also compare how we approach broader insurance marketing compliance across lines, or read the full breakdown of our Medicare lead and marketing services if you want help implementing this. For the seasonal rules that trip agents up most, see Medicare OEP marketing rules for agents.

The one-line summary

Record your calls in full, read and display the TPMO disclaimer, capture the Scope of Appointment before you meet, only contact people who opted in, keep your records — and re-verify all of it against current CMS guidance every plan year, because the rules move and your license is the one on the line.

This article is marketing guidance, not legal or compliance advice. CMS rules and the MCMG are updated frequently; confirm specifics with official CMS sources, your carrier, and your upline before acting.