Steve Bitsko

Ohio insurance agent (life/health/Medicare). 28 yrs military before this. Writing The Working Agent on the unglamorous side of the work.

[Steve Bitsko @theworkingagent]

Your TPMO disclaimer script is probably wrong as of June 1, 2026.

So is the one your FMO sent you.

The CY 2027 CMS Final Rule changed more for agents than most people realize. Here's what actually moved.

A thread 🧵

[Steve Bitsko @theworkingagent]

The pattern: agents optimize CRMs for selling, not for surviving an audit.

Pick the tool that keeps you compliant first. The pipeline features mean nothing if you lose your license.

If this was useful, follow me — I break down the compliance side of the business most agents ignore.

[Steve Bitsko @theworkingagent]

Most insurance agents pick a CRM based on price and pipeline features.

Then CMS or a HIPAA audit shows up and the "cheap" CRM becomes the most expensive mistake they ever made.

7 CRM compliance pitfalls that can cost you your book of business 🧵

[Steve Bitsko @theworkingagent]

Pitfall #7: No data retention or deletion policy.

CMS and state regs dictate how long you keep records — and when you must purge them. A CRM that keeps everything forever isn't "thorough." It's a growing pile of risk every year you don't have a deletion workflow.

[Steve Bitsko @theworkingagent]

https://t.co/Zan1DM2SGo

[Steve Bitsko @theworkingagent]

@hedgequote The L&H/Medicare version of this is agents buying CRM seats and lead lists before they've solved call recording, SOA capture, or a HIPAA BAA. Plenty of cash, no foundation, then AEP hits and the wheels come off.

[Steve Bitsko @theworkingagent]

CMS just gave agents back time. But only for the ones who actually adjust their workflow.

Full breakdown of what changed, what stayed, and what to update before AEP:

https://t.co/fOHxhQoWNo

[Steve Bitsko @theworkingagent]

Your TPMO disclaimer script is probably wrong as of June 1, 2026.

So is the one your FMO sent you.

The CY 2027 CMS Final Rule changed more for agents than most people realize. Here's what actually moved.

A thread 🧵

[Steve Bitsko @theworkingagent]

What did NOT change:

- The SOA itself. Still required before any plan-specific discussion.
- Call recording. Still in entirety, still 10 years.
- HIPAA. Still applies. BAA still required.

A deregulatory rule is not a no-rules rule.

[Steve Bitsko @theworkingagent]

AEP prep season is when you find out which agents read the actual rule and which ones read the FMO summary of the rule.