What consent and TPMO checks belong in Medicare lead buying?

This guide addresses Medicare Advantage and Part D marketing and lead distribution. Do not automatically apply the same TPMO framework to every final expense, ACA, or Medicare supplement transaction. Other products and channels have their own legal and contractual requirements. Your compliance team should classify the actual activity, parties, and product before approving a source.

Create a flow diagram showing the advertiser, collection site, lead generator, distributors, call screeners, agency, and receiving agent. Include affiliates rather than collapsing them into one brand. The commercial name on an invoice may differ from the entity collecting or receiving beneficiary information, so identify legal entities and their roles explicitly.

For applicable sharing of personal beneficiary data by a TPMO with another TPMO for Medicare Advantage or Part D marketing or enrollment, review the requirement for prior express written consent. The CMS rule addresses clear identification of each receiving TPMO and the beneficiary’s ability to consent or reject sharing with each individual TPMO. Verify each intended recipient against the actual consent evidence.

Do not assume an open-ended reference to marketing partners authorizes distribution to your agency. Have compliance review the current rule, its applicability, and the exact presentation before launch. If a recipient changes, stop and assess whether the existing consent covers that entity rather than quietly substituting the new buyer in routing software.

Determine whether the TPMO disclaimer applies to the organization and communication, then use current approved wording and placement. Applicability and required content should be checked against current CMS requirements and relevant plan instructions. Do not improvise a shortened statement merely because a vendor’s page has limited space or a call script feels too long.

A disclaimer and data-sharing consent perform different functions. Displaying a disclaimer does not itself authorize distribution of beneficiary data or satisfy every requirement for later contact. Inspect collection pages, advertisements, and scripts as separate artifacts. Keep version history so reviewers can identify what the consumer actually saw or heard at the relevant time.

Request the consent record text, timestamp with time-zone context, page URL, and IP address when applicable. Preserve the rendered page or reliable version record, relevant checkbox state, named recipients, and the source identifier linking the event to the delivered lead. An isolated timestamp or generic certificate is not an adequate explanation of the complete consent experience.

These fields are procurement evidence, not a claim that every field is independently mandated by one CMS provision. Review electronic-signature mechanics, disclosure prominence, and storage controls with qualified compliance support. Missing evidence should trigger quarantine and investigation, not a request for agents to obtain a convenient verbal substitute after the data has already been shared.

Require call recordings for review and confirm compliance with applicable CMS call-recording rules, recording-consent law, and plan requirements. Preserve relevant upstream screening and handoff segments as well as the receiving conversation. Agree on access, retention, security, and retrieval responsibilities before buying; a recording that cannot be located is of limited operational use.

Use state-licensed, verified buyers and appropriately authorized agents. Check the receiving entity, relevant license status, state footprint, and product authority before routing. Licensing does not cure defective permission, and permission does not cure a licensing gap. Maintain both checks as independent controls, with an owner responsible for responding to changes.

Pause the affected source or recipient while compliance investigates. Preserve the original records, note what is missing, and avoid editing historical consent text to match current terms. Ask the vendor for an explanation tied to the specific event. Where evidence cannot support the proposed use, do not treat a commercial credit as permission to proceed.

This is not legal advice. Confirm current federal and state requirements and plan instructions before launch or material changes. Nothing here implies government affiliation or endorsement. The practical objective is a traceable decision: who approved the source, which evidence they reviewed, what use they authorized, and what change requires renewed review.