Most brokers know they are supposed to disclose compensation. Fewer have a documentation system that would survive a CMS audit. The regulation has been on the books since the ACA's early implementation years, but enforcement activity has increased as CMS has expanded its marketplace oversight infrastructure, and the gap between knowing the rule and actually following it in every enrollment is where broker risk accumulates.
Key Takeaways
- CMS compensation disclosure is required under 45 CFR 155.260 before or at the time of enrollment, not after
- The disclosure must state the dollar amount or percentage of commission plus the source, covering all compensation tiers
- A verbal disclosure does not satisfy the written-record requirement for CMS compliance audits
- Platforms like Quotit route enrollment through their own agent-of-record systems, but compensation disclosure remains the individual broker's obligation
- Renewal enrollments require a fresh disclosure if the compensation arrangement changed since the prior year
What 45 CFR 155.260 Actually Requires
The relevant provision lives at 45 CFR 155.260, which governs privacy and security of personally identifiable information collected by the marketplace but also cross-references broker conduct standards. The compensation disclosure requirement specifically mandates that brokers, before or at the time of enrollment, provide the consumer with written notice of:
- The amount or percentage of compensation the broker will receive
- The identity of the entity paying that compensation
- Any additional or indirect compensation tied to enrollment volume, plan type, or carrier tier
"Before or at the time" is doing real work in that sentence. A disclosure sent after the enrollment is submitted does not satisfy the requirement. Neither does a disclosure the broker makes verbally and then fails to document. CMS auditors look for a timestamped record showing the consumer received the disclosure before their application was finalized.
Where the Platform Ends and Your Obligation Begins
Platforms like Quotit manage agent-of-record assignment and route enrollment data to CMS, but they do not generate a compensation disclosure on the broker's behalf. This distinction matters because some brokers assume that if their enrollment platform is FFM-certified or EDE-capable, the compliance burden shifts to the platform. It does not.
The broker is the disclosed entity. The broker's compensation is the fact being disclosed. The broker's documentation system is what CMS will examine in an audit. Platform certifications cover the enrollment transaction, not the broker's independent disclosure obligation.
Some platforms do include a disclosure acknowledgment step in their enrollment flow. Check whether yours does and, more importantly, whether the acknowledgment record is exportable to a format you can retain and produce during an audit. Platform access is not a reliable long-term archive for compliance records.
Renewal Year Disclosures
Renewal enrollments are a recurring source of compliance gaps. The common assumption is that a disclosure made at initial enrollment covers the relationship going forward. CMS guidance does not support that reading when the compensation arrangement changes, when the consumer is moved to a new plan ID through a crosswalk, or when the plan year transitions.
For auto-renewals, where the consumer takes no active step and the marketplace re-enrolls them in a similar plan, the broker still has a disclosure obligation at the point the AOR relationship is active for the new plan year. The safest approach is to include the disclosure in every annual outreach cycle, not just at the initial onboarding step.
What Auditable Documentation Looks Like
CMS does not prescribe a specific form, but disclosure records that survive audits tend to share a few characteristics:
| Element | What Auditors Look For | Common Gap |
|---|---|---|
| Broker identification | Full name and NPN on the document | Generic agency name without individual NPN |
| Compensation amount | Dollar amount or percentage; not a range | Vague 'commission applies' language |
| Paying entity | Carrier name or FMO name, not just 'the market' | Omitting the FMO when compensation routes through one |
| Consumer acknowledgment | Signature, checkbox, or electronic timestamp | Verbal-only disclosure with no written record |
| Date | Date of disclosure, not date of enrollment | Using enrollment confirmation date as proxy |
Illustrative elements based on CMS marketplace conduct guidance. Requirements may vary by state exchange. Verify with current CMS broker standards before the applicable plan year.
The Volume Problem
A broker who enrolls 800 consumers in a single AEP season and skips the disclosure step on half of them does not have a minor compliance gap. They have 400 undocumented transactions that could each carry individual corrective action exposure. CMS audits often start from a sample and scale findings across the enrollment book. The math on volume violations is unforgiving.
Building the disclosure into the close step of every enrollment workflow, rather than treating it as a separate administrative task, is the practical fix. If the step is inside the enrollment sequence, it is harder to skip and easier to document. If it lives outside the sequence as a manual reminder, it will get missed during high-volume AEP days.
State Exchange Variations
The federal 45 CFR 155.260 requirement applies to brokers operating on the federal marketplace (HealthCare.gov) and in states using the federal platform. State-based exchanges (SBEs) often layer additional requirements on top. California Covered, for example, has its own broker disclosure standards under state insurance code that differ from the federal minimum. Brokers operating across multiple states need to track both the federal floor and the applicable state rules.
For multi-state agencies, the documentation system has to accommodate at least two disclosure templates: one for FFM states and one per SBE state where the agency is active. Running everything off a single form risks using a template that satisfies federal requirements but misses a state-specific element.
Compensation Disclosure FAQ
Common questions brokers have about the CMS compensation disclosure requirement and how it works in practice.
What does CMS require brokers to disclose about their compensation?
Under 45 CFR 155.260, brokers must disclose to consumers the amount or percentage of compensation they receive, the identity of the entity paying it, and any additional compensation tied to enrollment volume or plan type. The disclosure must happen in writing at or before the point of enrollment. CMS audits look for a dated, signed, or electronically acknowledged record. A disclosure buried in the fine print of a quoting PDF does not satisfy the timing requirement.
Does using a quoting platform like Quotit satisfy the disclosure requirement?
No. Quoting platforms manage the enrollment transaction and agent-of-record assignment, but they do not generate a CMS-compliant compensation disclosure on behalf of the broker. The broker must separately document that the consumer received and acknowledged the compensation information before the enrollment was submitted. Some platforms include a disclosure step in their enrollment flow; verify whether yours does and whether the record is exportable for audits.
What happens if a broker enrolls a consumer without making the required disclosure?
CMS can take corrective action under the same framework that governs other marketplace conduct standards. In practice, this has meant warning letters, mandatory retraining, suspension of marketplace access, and, in egregious patterns, referral to state regulators. The risk scales with volume: a broker who enrolls thousands of consumers without documented disclosures has a much larger audit exposure than one who missed a single renewal.
Are renewal enrollments subject to the same disclosure rules?
Yes, with one important nuance. If the compensation structure has not changed since the prior year, some state interpretations permit the broker to rely on the prior-year disclosure. CMS guidance, however, treats renewal as a new enrollment trigger, particularly for plan year crosswalks where the consumer is moved to a new plan ID. The safest practice is to re-disclose at every annual enrollment, especially when the consumer is enrolled through a marketplace auto-renewal or a crosswalk.
What format should the compensation disclosure take?
CMS does not prescribe a single form, but the disclosure must be in writing, must identify the broker by name, must state the compensation amount or percentage, and must be dated. Electronic acknowledgment through a secure portal satisfies the written requirement. Many agencies use a one-page disclosure attachment to their engagement letter or a checkbox acknowledgment embedded in their quoting workflow. The key requirement is that the consumer's acknowledgment is retrievable during a CMS audit.
