Social Media Compliance Checklist for Medicare Agents
What counts as marketing versus communications on social media, where the TPMO disclaimer and Medicare-endorsement rules apply, and a pre-post checklist for Medicare agents.
What a Medicare agent can post on social media without carrier review A general post about Medicare rules, enrollment deadlines, or your own services is usually fine to publish on your own. A post that mentions a specific plan's benefits, premium, or cost sharing, compares plans, or references Star Ratings has to go through your carrier's compliance review first, and the same TPMO disclaimer rule that applies to your calls and texts applies to that post too. The line between the two is not a style choice; it is defined in federal regulation, and getting it wrong is what turns a routine Instagram caption into a compliance finding. The line CMS actually draws: "communications" vs. "marketing" The Centers for Medicare & Medicaid Services regulates Medicare Advantage and Part D marketing under 42 CFR Part 422, Subpart V and Part 423, Subpart V. The definitions section of that subpart draws a specific line between two categories, and it applies to a Facebook post or a TikTok caption exactly the way it applies to a postcard: Communications are "activities and use of materials created or administered by the MA organization or any downstream entity to provide information to current and prospective enrollees." This is the broad category — and under the rule, "marketing is a subset of communications." Marketing is any communication that both (1) is intended to draw attention to a plan, influence a plan selection, or influence someone to stay enrolled, and (2) addresses the plan's benefits, benefit structure, premiums or cost sharing; Star Ratings or plan comparisons; or rewards and incentives. Both prongs have to be true for something to count as marketing. A post that says "Open Enrollment runs October 15 to December 7 — call me with questions" is a communication: it's informational and doesn't touch plan benefits or cost. A post that says "This plan now covers dental at $0 copay" is marketing, full stop, because it hits both the intent and content tests at once ( 42 CFR § 422.2260 ). Marketing materials and "certain designated communications materials" generally have to be submitted through a carrier's Health Plan Management System (HPMS) marketing module and either approved by CMS or filed and allowed to run, before an MA organization — or a third-party marketing organization (TPMO) working on its behalf — may distribute them ( 42 CFR § 422.2261 ). If you are an independent agent paid to generate leads, market, sell, or enroll Medicare Advantage or Part D business, you meet the regulation's definition of a TPMO, and that filing requirement runs through you. The TPMO disclaimer belongs on social media too CMS's standardized TPMO disclaimer — the same one you're required to read on a sales call before discussing benefits — is also required wherever you communicate electronically with a beneficiary. The regulation lists the channels by name: verbally on sales calls before any benefits are discussed, electronically "when communicating with a beneficiary through email, online chat, or other electronic means of communication," prominently on TPMO websites, and in any marketing materials, including print and television ads ( 42 CFR § 422.2267(a)(41) ). A direct message that turns into a benefits conversation is "online chat" under that language. The same section separately lists social media by name as a channel covered by two other required disclaimers in the same rule — the Star Ratings disclaimer and the Special Supplemental Benefits for the Chronically Ill (SSBCI) disclaimer both call out social media specifically when those topics come up in a post or ad. Practically: if a comment thread or DM moves from "thanks for the info" into a discussion of what a specific plan covers or costs, that's the moment the disclaimer requirement attaches, the same way it attaches the moment a phone call turns into a benefits discussion. Don't let CMS or "Medicare" imply an endorsement you don't have Separate from the marketing rules, Section 1140 of the Social Security Act (42 U.S.C. § 1320b-10) prohibits using the words "Medicare," "Centers for Medicare & Medicaid Services," "Department of Health and Human Services," the letters "CMS" or "HHS," or SSA/CMS symbols and emblems, in any advertisement or solicitation — and the statute explicitly includes "any Internet or other electronic communication" — in a way that could convey approval, endorsement, or authorization by those agencies, or a connection with them that doesn't exist. The Social Security Administration's Office of the Inspector General, which enforces this provision, states directly that it covers "telephone solicitations, social media, websites, email, postal mail, text messages, YouTube, television, and radio broadcasts." In practice, that rule is less about your post copy and more about how you describe yourself. A bio or caption that reads "Medicare Expert" or "I work with Medicare" can read as implying a government affiliation you don't have. "Licensed Medicare insurance agent" or "licensed health insurance agent" describes the same credential without crossing that line. Social media compliance checklist for Medicare agents Run through this before you hit publish on anything that mentions Medicare, a plan, or your services: Check the content test first. Does the post mention a plan's benefits, premium, cost sharing, Star Ratings, a plan comparison, or a reward/incentive? If yes, treat it as marketing and route it to your carrier's compliance review before it goes live. Check the intent test. Even general-sounding content can be marketing if its real purpose is to draw attention to a specific plan or talk someone into staying enrolled. When in doubt, ask your carrier's marketing team rather than guessing. Add the TPMO disclaimer to anything that crosses into plan specifics — the caption, the post itself, or the first DM reply that discusses benefits. Use the exact standardized language your carrier requires, not a paraphrase. Drop the word "Medicare" from your title, handle, or bio if it could be read as implying you're affiliated with the government program. "Licensed Medicare insurance agent" is safe; "Medicare Expert" or "Medicare Advisor" tied to your name as a title is not. Never use the CMS logo, the Medicare card design, or any HHS/SSA emblem in a graphic, even a reasonable facsimile. Route DMs that turn into benefits conversations off the public thread and into a documented channel — a recorded call or a compliant text thread — where you can read the required disclaimer and keep a record of what was said. Keep a dated copy of what you posted and when it was approved , separate from the platform itself. Posts get edited or disappear; your compliance file shouldn't depend on a screenshot you forgot to take. Re-check paid posts and boosted content the same way as organic posts. A paid ad with the same plan-specific language is still marketing and still needs filing. Where this actually breaks down for small agencies The failure mode isn't usually a deliberate violation — it's a comment thread. An agent posts a general AEP reminder (a communication, no filing needed), someone comments "does my plan cover dental," and the agent replies in the thread with specific benefit numbers. That reply just became marketing content, in public, without the disclaimer and without carrier review. The fix is procedural: treat every public reply that names a benefit or a cost the same way you'd treat a new piece of marketing copy, and move the actual benefits conversation into a recorded call or a logged text thread instead of finishing it in the comments. FAQ Does CMS require me to submit my social media posts for approval? Only when the post meets the regulatory definition of marketing — intended to draw attention to a plan, influence selection, or influence retention, and addressing benefits, premiums, cost sharing, Star…
Where AgencyView fits
Keep reading
Share: Facebook · LinkedIn · X · Email
All articles · AgencyView