Insurance Marketing Compliance for Agents: What Actually Trips People Up

Compliance is not the part of marketing agents enjoy. But it is the part that decides whether your lead flow survives an audit, a carrier review, or a plaintiff’s attorney pulling your consent records. Most penalties do not come from bad intent. They come from sloppy documentation and a vague claim nobody checked.

This is a plain-English overview, not legal advice. We run marketing, not a law firm. You are the licensed party, and a compliance attorney in your states is worth the retainer. What follows is how the rules show up in day-to-day lead generation, written by people who place ads and buy leads for a living.

The three layers you actually have to track

Insurance marketing compliance for agents stacks into three layers. Most agents only think about one and get surprised by the other two.

You need all three handled at once. A campaign can be TCPA-clean and still violate a state’s prohibition on implying government affiliation, or be perfectly worded and still miss the CMS TPMO disclaimer.

TCPA: the layer with the lawyers

The Telephone Consumer Protection Act is where the real financial exposure lives, because it carries a private right of action and statutory damages per violation — “$500 in damages for each such violation,” trebled to $1,500 where a court finds the violation willful or knowing (47 U.S.C. §227(b)(3)). That is what makes it a magnet for litigation.

The headline 2025 change: the FCC’s one-to-one consent rule was vacated before it took effect. The Eleventh Circuit granted the petition for review and vacated Part III.D of the FCC’s 2023 order on January 24, 2025 in Insurance Marketing Coalition Ltd. v. FCC, No. 24-10277. That rule would have required separate consent for each individual seller. With it gone, a single clear consent can still cover multiple sellers. That is good news for the shared-lead model, but it does not remove the core requirement.

What still holds, straight from 47 CFR §64.1200:

• You need prior express written consent — “an agreement, in writing, bearing the signature of the person called” that names the seller and the number, per §64.1200(f)(9). Electronic and digital signatures count.
• The disclosure has to be clear and conspicuous, and must tell the consumer they are “not required to sign the agreement… as a condition of purchasing any property, goods, or services.”
• The national Do Not Call registry still applies (§64.1200(c)(2)), and your scrub must use a registry version pulled no more than 31 days before the call.
• Revocation is easy on purpose: “stop,” “quit,” “end,” “revoke,” “opt out,” “cancel,” or “unsubscribe” in a reply text is a per se reasonable revocation under §64.1200(a)(10).
• You should keep the proof: the form copy the consumer saw, the source URL, IP address, and timestamp, tied to each lead.

If you buy leads, that documentation is the vendor’s job to provide and your job to verify. A lead you cannot prove consent on is a liability, not an asset. We cover the buyer side in depth in our guide to TCPA-compliant lead buying for agents, and the economics of vetting vendors in the true cost per sale of cheap leads.

A practical rule we apply to our own book: if a lead source cannot hand over the consent record per lead on request, we do not run it. That single filter removes most of the risk before a call is ever dialed.

State advertising rules: boring until they aren’t

Every state department of insurance has its own advertising rules, and they are not uniform. The common threads:

1. No misleading claims. “Free coverage,” “government-approved,” or “guaranteed acceptance” language gets scrutinized fast, especially in final expense and Medicare.
2. Display your license. Many states require your name and license number on advertising, and prohibit implying you are a government agency or affiliated with Medicare/Social Security.
3. Accurate carrier use. Using a carrier’s name or logo without authorization, or implying an endorsement you do not have, is a frequent violation.
4. Some states require ad filing or specific disclosures for certain lines.

For any specific numeric penalty or filing threshold, check your state directly; the figures vary widely. The honest move is to treat every ad as if a regulator in your strictest state will read it. We build that standard into our insurance landing page work so the same creative holds up across the states you write in.

CMS Medicare rules: the most specific layer

If you market Medicare Advantage or Part D, CMS adds a detailed rulebook on top of everything above. As a paid agent or broker, you are a Third-Party Marketing Organization (TPMO) in CMS’s eyes, and that triggers obligations.

The pieces that catch agents most often:

• The TPMO disclaimer. 42 CFR §422.2267(e)(41) prescribes the exact sentence for a TPMO that does not sell for all MA organizations in the area: “We do not offer every plan available in your area. Currently we represent [insert number of organizations] organizations which offer [insert number of plans] products in your area. Please contact Medicare.gov or 1-800-MEDICARE to get information on all of your options.” It must be “verbally conveyed during sales calls prior to the discussion of any benefits,” displayed prominently on your website, and included in marketing materials.
• Consent to share data. Under §422.2274(g)(4), beneficiary data collected by a TPMO “may only be shared with another TPMO when prior express written consent is given by the beneficiary,” through a clear and conspicuous disclosure that lists each receiving entity individually.
• Call recording. §422.2274(g)(2)(ii): all marketing and sales calls “must be recorded and retained in their entirety for a minimum period of 6 years.”
• No unsolicited contact. §422.2264(a) permits unsolicited mail, print, and opt-out-bearing email, and prohibits unsolicited cold calls, robocalls, texts, voicemails, social-media DMs, and door-to-door contact.

These rules tighten and shift each contract year, so AEP creative has to be re-checked annually rather than reused on autopilot. If Medicare is your line, the disclaimer and consent mechanics should be wired into your funnel from the start, which is the backbone of how we approach Medicare marketing for agents. For the rule detail itself, our breakdown of CMS Medicare marketing rules and AEP marketing strategy goes deeper than this overview can.

Platform rules are a compliance layer too

The ad platforms enforce their own version of fairness law. Meta classifies insurance under its Special Ad Category, which strips out age, gender, ZIP, and detailed targeting to prevent discrimination. You can still run insurance ads; you just qualify with creative and offer instead of granular targeting. Knowing this up front changes how you build a Facebook campaign for insurance so you do not waste budget fighting the system.

A short pre-launch checklist

Before any campaign goes live, run it past this:

• Is consent captured, disclosed clearly, and documented per lead?
• Does every claim tie to something true and provable?
• Is your license number present where the state requires it?
• For Medicare: is the TPMO disclaimer on the page and in the script?
• Does the targeting comply with the platform’s special-category rules?

Treat compliance as a trust signal, not a tax. Agents who can show clean consent and honest creative close better, because skeptical seniors and their families can smell a corner-cutter.

If you want a second set of eyes on whether your current funnel holds up, that is exactly what a free marketing audit is for. We will look at your consent flow, ad claims, and disclaimers and tell you where the gaps are before a regulator or a lawyer does.

This article is general information for marketing purposes and is not legal or compliance advice. Verify all requirements with counsel and the departments of insurance in the states where you are licensed.