--- title: "Insurance Compliance Checklist 2026: Every Regulation Agents Must Follow" description: "The definitive compliance checklist for insurance agents in 2026 — covering TCPA, CMS, HIPAA, state DOI requirements, and E&O best practices." url: https://unlockedcrm.ai/blog/insurance-compliance-checklist-2026 canonical: https://unlockedcrm.ai/blog/insurance-compliance-checklist-2026 category: "Compliance" published: 2026-04-26 author: "Jacob Lock" source: unLocked CRM — AI CRM for insurance agents --- # Insurance Compliance Checklist 2026: Every Regulation Agents Must Follow ## TL;DR 2026 compliance priorities: TCPA one-to-one consent (fines $500–$1,500/violation), HIPAA BAA with all vendors, CMS SOA 48 hours before Medicare meetings, CE hours current in all states, E&O insurance active. CMS issued $47M in marketing violations in 2025. ## Key data points - CMS issued $47M in Medicare marketing violations in 2025 - TCPA fines: $500–$1,500 per violation under 2025 one-to-one consent rule Non-compliance is the fastest way to lose your insurance license. In 2026, regulatory enforcement is at an all-time high — CMS alone issued $47M in marketing violations in 2025. ## Federal Compliance Requirements ### TCPA (Telephone Consumer Protection Act) The January 2025 FCC one-to-one consent rule changed everything: - **Written consent required** for each specific seller - **No more lead aggregator consent** — must be direct - **Prior express written consent** for autodialed/prerecorded calls - **$500–$1,500 per violation** — individual lawsuits, not just FCC fines - **DNC list scrubbing** required every 30 days ### HIPAA (Health Insurance Portability and Accountability Act) - **PHI protection** for all client health information - **Encrypted communications** required for email and text - **BAA required** with any vendor handling PHI (CRM, email, texting) - **Breach notification** within 60 days of discovery - **Fines**: $100–$50,000 per violation, up to $1.5M annually ### CMS Medicare Marketing Guidelines - **No unsolicited contact** during non-enrollment periods - **Scope of Appointment (SOA)** required 48 hours before meeting - **No misleading plan comparisons** or superlatives - **Sales events vs educational events** — different rules - **Call recording required** for telephonic enrollments - **48-hour waiting period** after educational events ## State-Level Requirements ### License Maintenance - **CE requirements**: 24–30 hours per renewal period (varies by state) - **Renewal deadlines**: Track for every state of licensure - **Appointment status**: Verify with each carrier annually - **Resident vs non-resident**: Different requirements ### State DOI Marketing Rules - **Advertising pre-approval** required in some states (NY, FL) - **Disclosure requirements** vary by product and state - **Premium comparison rules** — some states prohibit side-by-side ## Compliance Checklist - [ ] TCPA one-to-one consent documented for every lead - [ ] DNC list scrubbed within last 30 days - [ ] HIPAA BAA in place with CRM vendor - [ ] All client emails and texts encrypted - [ ] SOA collected 48 hours before Medicare meetings - [ ] CE hours current in all licensed states - [ ] E&O insurance active and adequate - [ ] Call recordings stored for required retention period - [ ] Advertising materials comply with state DOI rules - [ ] Annual compliance training completed ## FAQ ### What is the biggest compliance risk for insurance agents in 2026? TCPA violations. The one-to-one consent rule means every call/text to a lead requires documented, seller-specific consent. Fines of $500–$1,500 per violation add up fast. ### Do insurance agents need a HIPAA BAA with their CRM? Yes. Any CRM that stores client health information (medications, conditions, plan details) must have a Business Associate Agreement in place. Using a non-compliant CRM creates personal liability. ## FAQ ### undefined ### undefined ## Related - https://unlockedcrm.ai/blog/tcpa-compliance-insurance-agents-2026 - https://unlockedcrm.ai/blog/eo-risk-management-insurance-agents --- Source: [Insurance Compliance Checklist 2026: Every Regulation Agents Must Follow](https://unlockedcrm.ai/blog/insurance-compliance-checklist-2026) — unLocked CRM, the AI CRM built for insurance agents. Citation permitted with attribution and a link to https://unlockedcrm.ai/blog/insurance-compliance-checklist-2026.