Medicare Marketing Guidelines for 2027: What Health Plan Call Centers Must Get Right

The Medicare Open Enrollment Period, commonly called AEP, runs from October 15 through December 7. During this window, scripts, disclosures, and escalation paths must follow the CMS rules for each type of call. A misplaced disclaimer, an unrecorded sales call, or an unconsented outbound call can trigger a CMS finding. This year the stakes come with a twist. Several Medicare marketing guidelines changed on October 1, 2026. As a result, scripts written last year may now be out of date.

This guide is for the leaders who own that risk: member services, compliance, and vendor management. It explains what the rules cover and what changed for contract year 2027. It also shows where call centers most often slip and how to build compliance into daily operations. Throughout, it separates what CMS requires from the controls we recommend, and each rule cited links to its source.

What the Medicare Marketing Guidelines Cover

For Medicare Advantage, the Medicare marketing guidelines are the rules in 42 CFR Part 422, Subpart V. Part D plans follow parallel rules in 42 CFR Part 423, Subpart V, and CMS guidance sits alongside both. They govern how plans, and anyone acting for them, communicate with beneficiaries. That includes plan call centers, outsourced member services teams, and third-party marketing organizations (TPMOs).

The rules turn on one distinction. Under 42 CFR 422.2260, a communication becomes marketing when it meets two tests. First, it aims to draw attention to a plan or influence enrollment, including retention. Second, it addresses benefits, premiums, cost sharing, or rankings such as Star Ratings. Marketing carries far stricter rules than ordinary communications.

That distinction matters on the phone. A member services agent who answers a claims question is communicating. However, the same agent who compares benefits to keep a member from switching plans may be marketing. So leaders need call flows that keep agents on the right side of that line. Otherwise, the flow should hand the call to a licensed agent.

What Changed in the Medicare Marketing Guidelines for 2027

CMS published the contract year 2027 final rule in the Federal Register on April 6, 2026. Its marketing changes apply from October 1, 2026, according to a CMS partner tip sheet. Most changes reduce burden. Still, several require script and system updates before AEP calls peak.

The timing change for the disclaimer deserves attention. Agents trained to read it in the first minute may now read it too late. That happens whenever a caller raises benefits early. Update scripts so the disclaimer comes before any benefit question gets an answer. The current wording sits in 42 CFR 422.2267(e)(41), with a parallel Part D provision.

What Medicare Call Center Leaders Should Update Before and During AEP

The actions below are our operational recommendations, not additional CMS requirements. Each one also ties back to a rule covered in this guide. Together, they give compliance teams a short brief for internal teams and outsourced partners.

Test these controls against recorded calls, not only against written scripts. After all, live calls show whether agents follow the new order under real volume.

Medicare Marketing Rules That Did Not Change

Deregulation headlines can create false comfort. In fact, many core controls stay in place. Under 42 CFR 422.2264, plans still may not make unsolicited contact by cold call, robocall, text message, or voicemail. Contact is not unsolicited when the beneficiary consents to it or initiates it. That is the main route for permitted prospecting, though the regulation sets out further detail. Calls to current members about plan business follow a separate set of rules. Plans may make those calls, but they must give members an annual written notice explaining how to opt out.

The scope of appointment requirement also survives. Plans must still agree on and record a scope of appointment before any personal marketing appointment. In-person appointments need it in writing. What changed is timing alone: the 48-hour wait between completing the scope and holding the appointment is gone. Once completed, a scope of appointment stays valid for 12 months after the beneficiary signs it.

TPMO oversight rules remain strict as well. Under 42 CFR 422.2274, TPMO contracts must require recording of all marketing and sales calls. That includes the audio portion of web-based calls. TPMOs must report staff disciplinary actions and violations to the plan monthly. They must also tell a beneficiary when a transfer to a licensed agent happens. Agents and brokers still face annual training and testing, with a passing score of 85% or higher.

Note the scope of that recording rule. It applies to marketing and sales calls under TPMO arrangements. It does not, on its own, cover routine member service calls about claims or ID cards. Plans set policies for those calls under their broader record retention obligations.

CMS Call Center Standards Still Apply During AEP

Removing two Star Ratings measures does not repeal the underlying standards. For Medicare Advantage, 42 CFR 422.111(h) still sets performance floors for plan customer call centers. Part D plans face matching standards under 42 CFR 423.128(d). As a result, these floors matter most during AEP, when call volume peaks and hiring lags.

Interpreter access is where many plans feel pressure. Spanish is usually the largest need, so language coverage drives this metric. A team of native bilingual agents removes the interpreter step for those calls entirely. Our article on the Spanish-language service gap explains why that demand keeps growing.

Where Call Centers Most Often Break the Medicare Marketing Guidelines

Compliance failures rarely come from bad intent. They come from scripts, transfers, and systems that drift away from the rules under volume pressure. The table shows the patterns compliance teams find most often. The controls are our recommendations, not methods CMS prescribes.

Notice that most controls sit in systems and scripts, not in agent memory. Agents forget rules under pressure, especially in their first AEP. Therefore, the safest programs make the compliant path the default path.

How to Build Medicare Compliance Into Call Center Operations

Start with scripts and call flows. Review every flow against the 2027 changes before AEP traffic peaks. Then put the rules into quality assurance. Our guide to call center quality assurance shows how to make missed disclaimers and silent transfers auto-fail items. Auto-fail scoring is a recommended safeguard, not a CMS-mandated method. Also score a higher share of sales and retention calls than routine service calls, because their risk is higher.

Next, revisit recording and storage. The shorter retention period lowers storage cost, and transcripts can replace audio in years four to six. However, a transcript must be complete and accurate to qualify. Confirm that your platform can produce one before you delete any audio.

Finally, plan for oversight of every partner. Plans remain accountable for their first tier, downstream, and related entities. Partners outside the United States add a separate obligation. Since 2008, CMS has required sponsors to report offshore subcontractors that use beneficiary PHI. Sponsors also attest to how they protect that information. The 2008 memo does not define offshore. Even so, a nearshore center in Latin America sits outside the United States, so plans should confirm with their compliance team whether reporting applies.

Responsibilities here split three ways. The plan files any required report and attestation with CMS. The partner supplies accurate facts and cooperates with audits. A business associate agreement is a separate HIPAA requirement, and it does not satisfy the CMS reporting duty by itself. Our article on HIPAA and PCI compliance questions for nearshore BPOs covers the security side.

What to Require From a Medicare Call Center Partner

Evaluate a partner on evidence, not promises. Ask to see scripts already updated for the 2027 disclaimer timing. Ask how the partner records web-based calls and how it produces transcripts for later retention years. Request a sample of the monthly violation report it would send you.

Next, test capacity. AEP demands a fast ramp, and the call center standards apply on the first day. Ask how the partner will hit 80% of calls within 30 seconds while new agents learn. Also ask how many native Spanish speakers it can staff, and how it covers TTY calls. Finally, confirm that the partner will supply the information your offshore reporting needs. Separately, put a business associate agreement in place wherever HIPAA requires one.

A partner should also know where its role ends. Licensed sales belong with licensed, appointed agents. Member services, grievance intake, and outreach to current members can sit with a trained partner team. Our Medicare outsourcing services follow that division, and our health plan outsourcing page covers the wider member journey.

Conclusion

The 2027 Medicare marketing guidelines ease several burdens, but they do not ease accountability. Disclaimer timing changed, retention shortened, and the 48-hour wait disappeared. Meanwhile, the bans on unsolicited contact, the recording mandate, and the call center standards all remain. Plans that update scripts, systems, and partner contracts now will enter AEP with fewer surprises.

The broader market raises the stakes further. Our analysis of the Medicare Advantage enrollment shift shows members switching plans more actively. Every retention call is therefore both an opportunity and a compliance test. You can review the standards we hold on our certifications page.

Frequently Asked Questions

What are the Medicare marketing guidelines?

They are the CMS rules for how Medicare Advantage and Part D plans communicate with beneficiaries. They also govern marketing to them. Medicare Advantage rules sit in 42 CFR Part 422, Subpart V, and Part D rules in Part 423, Subpart V. They apply to plans, their call centers, and third-party marketing organizations acting for them.

When must the TPMO disclaimer be read on a call?

From October 1, 2026, the disclaimer must be read during sales calls before any discussion of benefits. The earlier rule required it within the first minute. The wording now refers callers to Medicare.gov or 1-800-MEDICARE and no longer mentions SHIPs.

How long must Medicare sales calls be recorded and kept?

TPMOs must record all marketing and sales calls, including the audio of web-based calls. Recordings must be kept for six years. The first three years must be audio. After that, a complete, accurate transcript may replace audio in years four to six. This rule covers marketing and sales calls, not routine member service calls.

Is the 48-hour scope of appointment rule still in effect?

No. The contract year 2027 rule removed the 48-hour waiting period. A personal marketing appointment can now follow a completed scope of appointment at any time. However, the plan must still complete a scope of appointment before the appointment. Once completed, it stays valid for 12 months.

Can a health plan call center make outbound calls to prospects?

Generally, only when the beneficiary has consented or initiated contact. Cold calls, robocalls, unsolicited texts, and voicemails remain prohibited. Calls to current members about plan business follow separate rules, including an annual written opt-out notice.

Do member services calls count as marketing?

Not usually. A call becomes marketing when it aims to influence enrollment or retention. It must also address benefits, premiums, cost sharing, or rankings. Service calls about claims or ID cards are communications. Retention conversations that compare benefits can cross into marketing.