Short-Term Medical at Insurance Agencies: 2026 Compliance Map

The 2026 STM Compliance Landscape

The Federal Floor: HHS and 45 CFR 144.103

Every STM compliance program starts with the federal definition. Under 45 CFR 144.103, short-term limited-duration insurance is defined as health coverage with an initial contract term of less than four months and a maximum total duration — including renewals or extensions — of no more than four months. That is the federal ceiling agencies have to operate under in any state that has not adopted its own (more restrictive or, in a handful of cases, less restrictive) framework. The companion regulation at 45 CFR 146.145 exempts STM from the major individual-market group health plan requirements precisely because of those duration limits.

The federal framework also requires a specific consumer disclosure — in 14-point font, displayed prominently on the application and any marketing material — explaining that the coverage is not minimum essential coverage, does not satisfy the individual mandate (in states that have one), and may exclude pre-existing conditions. This is non-negotiable. Every STM application your agency processes, in every state, must carry the federal disclosure.

The State Patchwork: Three Tiers

From a compliance-officer standpoint, the cleanest way to manage STM is to bucket states into three tiers. The exact list shifts as DOIs adopt or relax rules — your compliance program should refresh the bucket assignments at least quarterly — but the structure stays stable.

The mistake most agency compliance officers make is treating Tier 1 states as "we just won't sell there." That is correct in principle but operationally insufficient. Lead-vendor data does not respect state lines, dialer lists drift, and agents in adjacent states pick up cross-border calls. The Tier 1 list has to be enforced in the routing layer, not in the agent's head. The same goes for Tier 2 — agents who routinely write Tier 3 applications will default to the Tier 3 disclosure script unless the system catches the state and forces a different script.

The NAIC Model and What It Tells State DOIs to Do

The NAIC Short-Term Limited-Duration Insurance Model Act is the source most state DOIs draw from when they layer additional STM rules. Common state-level overlays you will see — and the disclosure language varies by state — include: stricter duration caps (some states allow only 90 days or even 30 days initial term), prohibitions on automatic renewal, mandatory state-specific disclosure language above and beyond the federal disclosure, and producer-licensing surcharges or specific endorsements.

Several state DOIs also require carriers (and by extension, contracting agencies) to file STM marketing materials for prior approval. That includes telesales scripts in some states. If your agency is running an STM telesales floor, the script must match what the carrier filed. Do not improvise.

Building the Compliance Framework

Marketing-Side Compliance Pitfalls

STM compliance is not just an in-call problem. The marketing funnel that drives STM leads creates its own exposure. The two most common findings in DOI investigations of STM agencies: misleading lead-form copy that suggests STM is "ACA coverage" or "comprehensive coverage," and lead-source funnels that target ACA shoppers without distinguishing the product. Both are unfair-trade-practice issues independent of the federal disclosure on the application.

The agency-side fix is to require lead-vendor agreements that audit landing pages and lead forms used to generate STM leads, and to maintain copies of the lead-source disclosures used at the time of acquisition. As we discussed in our coverage of multi-state CMS compliance for health agencies, the marketing surface area is now where most compliance findings originate — not the call itself.

The Specific Disclosure Language That Has To Land on Every Call

The disclosure has to be read on the recorded portion of the call, not embedded in a follow-up email. State DOIs that have brought enforcement against STM agencies in the last three years have consistently treated email-only disclosure as inadequate. The standard is "before the consumer authorized payment, the disclosure was delivered audibly and the consumer affirmed understanding." That is a three-part verification: delivery, audibility, affirmation. Build it into the script as a non-skippable workflow step.

Replacement and ACA Coordination

When STM is sold to a prospect who currently has ACA coverage, the agent has crossed into replacement-conversation territory. This is the area state DOIs scrutinize most aggressively, because moving an enrollee from ACA into STM is rarely in the consumer's economic interest and the regulatory presumption is unfavorable. The compliance posture is: the agent does not initiate the replacement conversation, does not characterize STM as "better than" or "equivalent to" ACA, and documents in the call that the consumer was made aware of ACA options including premium tax credit eligibility.

For agencies that also write ACA, this is where compliance and revenue can be aligned. An ACA-eligible prospect who calls about STM is, in most cases, better served by a same-call ACA quote first — and the compliance file is cleaner if the agent can document the ACA quote was offered and declined. As with our broader take on AEP preparation and call-center compliance, the agencies that handle these conversations cleanly are the ones that built the workflow before the call started, not the ones that hoped the agent would handle it correctly.

Audit Readiness

Key Takeaways for Agency Operators

STM is profitable for agencies that treat it as a compliance discipline first and a sales product second. The agencies that fail STM audits are not the agencies that sold a single bad policy — they are the agencies that ran a national script across 40 states and assumed federal compliance covered them. It does not. Build the state framework, enforce it in the workflow, refresh it quarterly, and STM remains a viable product line. Skip those steps and the regulatory exposure exceeds any margin the product produces.