Compliance & trust
CMS Medicare Marketing Rules for Agents: A Plain-English Walkthrough
The CMS Medicare marketing rules for agents cover four things that trip people up: the TPMO disclaimer, recording every marketing and enrollment call, capturing a Scope of Appointment before a sales meeting, and keeping records. The rules change every plan year, so verify against current CMS guidance.
Most agents do not get in trouble for selling the wrong plan. They get in trouble for how they marketed it: a missing disclaimer, an unrecorded call, a Scope of Appointment collected at the kitchen table instead of beforehand. The mechanics are where the secret-shopper complaints come from.
This is a plain-English map of the CMS Medicare marketing rules for agents. It is a marketing-operations summary, not legal advice. You are the licensed party; we run marketing. And the single most important thing to internalize: these rules change almost every plan year. Anything below is a starting point to verify against current CMS guidance, not a permanent answer.
Are you a “TPMO”? Probably yes
CMS regulates Medicare marketing largely through a category called the Third-Party Marketing Organization (TPMO). The definition is broad. If you generate leads, market, sell, or enroll beneficiaries into Medicare Advantage or Part D plans — and you are not the plan carrier itself — you are almost certainly a TPMO. That includes solo agents, agencies, FMOs, and the vendors who sell you leads.
Why it matters: TPMO status is what triggers the disclaimer, the recording rule, and the documentation obligations below. You do not get to opt out by calling yourself “just an agent.”
The four rules agents break most
Here is the short list, in plain language, before we go deeper.
- TPMO disclaimer — say (and display) that you do not offer every plan.
- Call recording — record marketing and enrollment calls in full, and keep them.
- Scope of Appointment (SOA) — document what the beneficiary agreed to discuss, before you meet.
- Permission to Contact + records — only contact people who consented, and retain proof.
| Rule | What it covers | Common mistake |
|---|---|---|
| TPMO disclaimer | Telling beneficiaries you represent a limited set of plans | Reading it late in the call, or omitting it on the website |
| Call recording | Recording sales/marketing/enrollment calls in entirety | Only recording the application, not the pitch |
| Scope of Appointment | Documenting agreed product types before a meeting | Signing the SOA at the start of the same appointment |
| Permission to Contact | Contacting only beneficiaries who opted in | Cold-calling aged leads with no consent trail |
TPMO disclaimer
CMS prescribes a standardized disclaimer that tells the beneficiary you do not offer every plan available in their area, and how many organizations or plans you represent. The general expectations:
- Verbal: read it within the first minute of an inbound or outbound call.
- Web: display it prominently on any landing page or site that markets Medicare plans.
- Print/electronic: include it in marketing materials.
The exact wording has been revised between plan years, so treat the script as something to confirm — against the latest CMS Medicare Communications and Marketing Guidelines (MCMG). When we build Medicare landing pages, the disclaimer placement is a checklist item, not an afterthought. See how we handle Medicare agent marketing end to end, including compliant page structure.
Call recording
Calls with beneficiaries related to the sale, marketing, or enrollment of MA and Part D plans must be recorded in their entirety and retained — generally for 10 years. The frequent error is recording only the application. CMS expects the marketing portion captured too: the part where you describe plans, qualify the person, and steer the decision.
If your telesales setup cannot record and archive full calls, that is a compliance gap and a sales-coaching gap at the same time. You cannot improve a script you never hear.
Scope of Appointment
Before an individual sales or marketing meeting, you document which product categories the beneficiary agreed to discuss (for example, MA-PD vs. PDP vs. supplements). The form is CMS-10260, the standard SOA. CMS has reinstated a rule requiring the SOA to be obtained at least 48 hours before the appointment, with narrow exceptions (such as walk-ins or the end of a valid election period). The classic violation is collecting the SOA at the start of the appointment to check a box — that defeats the purpose. For the operational deep dive on both the SOA and TPMO rules, see our focused guide to Scope of Appointment and TPMO compliance for Medicare agents.
Permission to Contact and records
You may only reach out to beneficiaries who gave Permission to Contact (PTC), and the permission is specific — consent to be called about Medicare Advantage is not blanket consent to call about everything, forever. Keep the proof. This sits next to federal telemarketing law: the TCPA still governs how you dial and text consumers regardless of CMS. We cover that overlap in our guide to TCPA compliance when buying insurance leads, and note that the FCC’s one-to-one consent rule was vacated in January 2025 — another example of why “verify the current rule” is not boilerplate.
What changes every plan year (and why it matters)
CMS updates the MCMG most years, and carriers layer their own stricter requirements on top through the oversight they are required to perform on TPMOs. Recent plan years have brought changes to disclaimer language, SOA timing, and the data agents must report up to carriers.
The practical takeaway:
- Re-read the current MCMG before each Annual Enrollment Period (AEP).
- Confirm your carrier/FMO’s interpretation — they often go beyond the CMS floor.
- Re-approve marketing materials annually; last year’s compliant flyer may not be this year’s.
If you want the marketing-strategy side of AEP rather than the rulebook, our Medicare AEP marketing playbook walks through campaign timing inside these constraints.
Compliance as a marketing asset, not a tax
Here is the operator’s view. Agents who treat CMS rules as friction tend to cut corners and end up in secret-shopper reports. Agents who build the rules into their process — recorded calls, clean SOAs, disclaimers in the right place — generate something valuable: a paper trail that protects commissions and a call library that makes coaching real.
Our own book runs around $7.40 cost per lead with roughly a 1-in-6 agent close rate across 17 live campaigns and 48,210 leads trailing twelve months — and a chunk of that close rate exists because full-call recording lets us tune scripts. Compliance and conversion are not enemies.
A few ways the rules shape good marketing:
- Landing pages carry the disclaimer above the fold and capture PTC explicitly, not buried in fine print.
- Lead sources are documented so consent is provable when a carrier audits.
- Scripts open with the disclaimer and the SOA logic baked in.
If you are not sure whether your current funnel would survive a carrier audit, that is exactly what a free marketing audit is for — we look at your pages, consent flow, and recording setup with fresh eyes. You can also compare how we approach broader insurance marketing compliance across lines, or read the full breakdown of our Medicare lead and marketing services if you want help implementing this. For the seasonal rules that trip agents up most, see Medicare OEP marketing rules for agents.
The one-line summary
Record your calls in full, read and display the TPMO disclaimer, capture the Scope of Appointment before you meet, only contact people who opted in, keep your records — and re-verify all of it against current CMS guidance every plan year, because the rules move and your license is the one on the line.
This article is marketing guidance, not legal or compliance advice. CMS rules and the MCMG are updated frequently; confirm specifics with official CMS sources, your carrier, and your upline before acting.