CMS 2027 Final Rule for Medicare Agents: SOA, TPMO Disclaimer, Call Recording, and Event Rules

If you are a Medicare agent trying to figure out what the CMS 2027 final rule actually changes in day-to-day selling, here is the practical answer: CMS removed some workflow friction, but it did not remove the need for solid documentation, controlled scripts, and retrievable records. The rule is effective June 1, 2026, applies to coverage beginning January 1, 2027, and CMS says the new marketing and communications policies apply to contract year 2027 marketing and communications beginning October 1, 2026.

For agents, the biggest takeaways are these: the 48-hour SOA waiting period is gone; TPMO disclaimer timing moved from the first minute of the call to before any benefits discussion; marketing and sales call retention drops to six years with a transcript option in years four through six; the 12-hour gap between educational and marketing events is gone; SOAs can again be collected at educational events; and CMS removed its own Notice of Availability requirement while loosening the superlative rule for marketing materials.

That sounds simple. It is not. The helpful way to read this rule is not "what disappeared," but "what still has to be true before I talk benefits, hold an appointment, store a recording, or publish a marketing piece."

The 48-Hour SOA Rule Is Gone, but the SOA Requirement Is Not

CMS removed the 48-hour waiting period between completing a Scope of Appointment and holding a personal marketing appointment. For CY 2027 marketing, that means same-day appointments are back. But CMS also finalized several clarifications that matter even more in practice: an SOA still must be agreed upon and recorded before the personal marketing appointment, and if the appointment is in person, the SOA must be in writing.

This is where many agents will get tripped up. CMS clarified that SOAs are required not just for scheduled appointments, but for all personal marketing appointments, including beneficiary-initiated inbound contacts such as walk-ins, unscheduled calls, web chats, and web forms when the conversation is tailored to an individual or small group for marketing topics. CMS also finalized that agents and brokers must have a system confirming SOAs are appropriately completed for all personal marketing appointments, including telephonic and walk-in interactions.

CMS also said these SOA clarifications supersede existing SOA guidance. It further clarified that a "small group" generally means people who are related or live in the same household. If you are speaking with unrelated beneficiaries in a home or public space, each person needs a separate SOA. CMS also reminds plans and agents that personal marketing appointments are not defined by location, which means they can be in person, by phone, or virtual.

CMS also used the preamble to clarify what can count as an SOA. If a business reply card, voicemail, online form, or similar request includes the type of product to be discussed, CMS says it is effectively an SOA. The SOA must include at least the product type or types to be discussed, such as MA plans, MA-PD plans, or standalone PDPs. CMS says there is currently no model SOA document or standardized CMS SOA script, so agents and agencies need to make sure their own form and workflow capture the required scope.

One more detail agents will care about: SOAs, business reply cards, and other requests for information remain valid for 12 months for the agreed scope, but they do not authorize new product discussions outside that scope. CMS specifically says a new contract year requires a new SOA. In other words, do not assume a 2026 SOA automatically covers a 2027 plan discussion.

Operationally, the safest update is this: speed up the appointment, not the paperwork. For same-day in-person meetings, collect and store the written SOA before plan-specific discussion starts. For phone and virtual meetings, keep an audio, audio-video, or electronic record tied to the contact record. And train anyone who handles walk-ins or inbound requests that "same day" does not mean "skip the SOA."

For a deeper walkthrough of how this change affects walk-ins, same-day appointments, and inbound calls, see our companion guide: CMS Eliminated the 48-Hour SOA Rule: What Medicare Agents Need to Know About Walk-Ins.

For a high-level summary straight from the source, you can also review the official CMS Contract Year 2027 Final Rule Fact Sheet.

The TPMO Disclaimer Is Still Here. The Timing Is Different, and the Text Is Shorter.

CMS did not remove the TPMO disclaimer. It changed when it must be delivered on sales calls and removed SHIPs from the standardized language. The verbal disclaimer no longer has to be read in the first minute of the call. Instead, it must be conveyed before any discussion of benefits. CMS also kept the separate requirements to display or convey the disclaimer on websites, in email, in online chat, through other electronic communications, and in marketing materials.

The nuance here matters. CMS says the mere mention of a benefit does not necessarily equal a "discussion of benefits." For example, a broad comment that many MA plans include routine dental care is not, by itself, the triggering event. But once the conversation moves into plan-specific benefit detail, Evidence of Coverage content, or cost-sharing structure, the disclaimer needs to have already been delivered. If the call never gets to a benefits discussion, CMS says it would not expect the disclaimer to be provided.

The updated disclaimer framework also removes SHIPs from the standardized text and directs beneficiaries to Medicare.gov and 1-800-MEDICARE instead. So if you have SHIP language hard-coded into your website, lead nurture emails, sales scripts, online chat flows, or printed materials, that content needs to be reviewed before CY 2027 marketing goes live.

A practical rule for agents is simple: get through greeting, identity, permission, and basic triage if needed, but do not cross into plan-specific benefits until the disclaimer is done. This makes calls feel more natural without creating a compliance blind spot.

Marketing and Sales Recording Retention Drops to Six Years, but Enrollment Retention Does Not

CMS finalized a shorter retention period for marketing and sales calls. Those calls must now be retained for at least six years. For the first three years, records must be maintained in audio format. For years four, five, and six, you can keep either audio or complete and accurate transcripts. CMS says a transcript is "complete and accurate" if it reflects the full recording and all statements as they originally occurred. The new six-year rule also applies to currently retained marketing and sales recordings, so marketing and sales portions older than six years no longer need to be retained for that purpose.

But agents should not confuse that with enrollment retention. CMS expressly says the rule did not change the 10-year retention requirement for enrollment records. For telephonic enrollments, the recording of the enrollment portion of the call serves as the enrollment form and proof of the beneficiary's attested intent to enroll. CMS also clarifies that the enrollment portion begins when the beneficiary is advised that they are completing an enrollment request and then provides the required information and attestation. Federal law separately requires plans to retain enrollment and disenrollment records for the current contract period and 10 prior periods.

That is the storage issue many agents actually care about. If your vendor stores a combined call that includes marketing, sales, and enrollment in one recording, you should not assume the whole file drops to a six-year rule. A conservative workflow is to separate or tag the enrollment segment when the enrollment request begins. If your system cannot split the file cleanly, treat the enrollment portion as driving the longer retention schedule.

This is also a good time to audit retrieval, not just storage. The useful compliance question is not whether the file exists somewhere in the cloud. It is whether you can find the SOA, the call, the transcript, the enrollment attestation, and the timestamp quickly if a complaint or audit lands months later.

Educational Events Just Became Easier to Use, but They Still Are Not Sales Events

CMS eliminated the 12-hour separation rule that had prevented a marketing event from taking place directly after an educational event in the same location. Under the finalized rule, a marketing event can immediately follow an educational event if beneficiaries are clearly notified that the educational event is ending and the marketing event is about to begin, and they are given a sufficient opportunity to leave. CMS specifically says a brief restroom or snack break can qualify as that opportunity.

CMS also finalized another major change agents have wanted: SOA forms may once again be made available and collected at educational events. CMS explicitly says the collection of an SOA is not itself a sales or marketing activity because it is only an agreement about what products will be discussed later. That said, CMS also makes clear that the educational-event rules still remain. In plain English, you can collect the SOA at the educational event, but you still cannot turn the educational presentation into a disguised sales seminar.

This is probably one of the most useful changes for community-based agents. It allows you to educate, capture legitimate interest, and schedule follow-up appointments without creating extra travel or extra friction for the beneficiary. Just be disciplined about the transition. Use a clear verbal announcement. Put the change of event type on the printed agenda if you have one. Give people a real chance to leave. And keep the educational portion free from plan-specific sales content.

CMS Loosened the Superlative Rule, but Not the Truth-in-Marketing Rule

CMS removed the specific requirement that marketing materials using superlatives must cite supporting documentation directly in the material. That means you no longer have to place the source data inside the ad, flyer, or webpage just because you use terms like "largest," "highest rated," or similar comparative language.

However, the helpful agent takeaway is not "say anything you want." CMS repeatedly says marketing and communications materials still cannot be misleading, confusing, or materially inaccurate, and the agency may still request supporting data during routine review or in response to a complaint. CMS also says that if a superlative relies on older data, the year should be identified so the statement is not misleading.

So the real workflow change is this: you may not need to print the substantiation into the piece, but you still need a substantiation file behind the piece. Keep the report, survey, carrier data, or network analysis in your compliance folder. And note that this change does not reopen every other advertising term. CMS specifically says the rule on superlatives is separate from the existing rules on using the word "free."

The CMS Notice of Availability Requirement Is Going Away, but Language-Access Obligations Are Not

CMS rescinded its own Notice of Availability requirement, sometimes referred to by agents as the multi-language insert or MLI rule, in the Medicare marketing regulations. CMS's rationale is that its notice duplicated OCR language-assistance notice requirements. But CMS also emphasizes that MA organizations and Part D sponsors still must provide OCR's notice where required, and that other CMS language and accessibility requirements remain in effect, including translation requirements and interpreter services standards. For D-SNPs, Medicaid notice requirements may also still apply.

This is one of the easiest places for agents and agencies to overreact. Do not read this change as "all language-access notices are gone." The right takeaway is narrower: the specific CMS NoA/MLI requirement in the Medicare marketing rules was rescinded, but OCR notice obligations under 45 C.F.R. § 92.11 and other translation/accessibility requirements still exist. If you handle marketing pieces, enrollment communications, or multilingual beneficiary outreach, review those assets with compliance before stripping notices out across the board.

What Agents Should Change Before CY 2027 Marketing Begins

First, rebuild your SOA workflow around product scope, not around a 48-hour waiting timer. Your process should capture the product type to be discussed, the contact method, the appointment format, and whether the interaction is in person. If it is in person, require a written SOA before the personal marketing appointment starts. If it is telephonic or virtual, store a retrievable audio, audio-video, or electronic SOA record.

Second, retrain anyone who answers calls, texts, web forms, or office walk-ins. CMS made clear that walk-ins, unscheduled calls, web chats, and web-based forms can still trigger the SOA rules when the contact becomes a personal marketing appointment. Same-day is allowed. No-SOA is not.

Third, update scripts, not just disclaimers. Your phone flow should make room for basic triage up front, but the TPMO disclaimer needs to come before plan-specific benefit discussion. Review websites, email templates, online chat flows, and marketing pieces for old SHIP references if you use the standardized disclaimer language there.

Fourth, fix retention logic inside your tech stack. Marketing and sales recordings now have one retention path. Enrollment recordings still have another. If your vendor cannot segment or tag recordings reliably, you are creating future cleanup problems for yourself.

Fifth, update event playbooks. Educational events can flow into marketing events again, and SOAs can be collected at educational events, but the separation between education and marketing still needs to be obvious to the beneficiary. Use an announcement, a break, and clean handoff language.

Finally, clean up marketing copy and language-access workflows carefully. You may have more flexibility with superlatives and less duplication around NoA/MLI, but CMS did not relax the ban on misleading materials, and it did not eliminate OCR notice or translation obligations.

Bottom Line

The CMS 2027 final rule is good news for agents who need to move faster. Same-day SOA workflows are back. Educational events are easier to use. The TPMO disclaimer is easier to place naturally in a call. Long-term storage costs for marketing and sales recordings should come down.

But the deeper lesson is not that CMS made compliance lighter. It is that CMS made compliance more operational. Agents who win under this rule will be the ones who can document scope cleanly, trigger the disclaimer at the right moment, separate marketing records from enrollment records, and prove what happened later if a complaint arises.

This article is for educational purposes only and is not legal advice. Agents should also review carrier guidance, agency policies, and any applicable state licensing requirements before updating workflows.