Skip to main content

Compliance Agency Monitoring Program (CAMP)

Updated over a week ago

Updated: January 2026

1. Our Commitment to Compliance

Spark is committed to partnering with agencies and agents to market Medicare products in a compliant, ethical, and beneficiary-focused manner. Our compliance program is designed to begin before onboarding and continue throughout the lifecycle of our partnership, supporting agencies at every stage—from readiness and launch through ongoing growth.

As a Third-Party Marketing Organization (TPMO), Spark maintains oversight of downstream partners to ensure compliance with CMS and insurance carrier requirements. At the same time, Spark views compliance as a shared responsibility and works collaboratively with agencies to establish strong practices, identify risk early, and address issues before they escalate.

This guide outlines the framework Spark uses to support compliant distribution, monitor for risk, and engage with agency partners on remediation when needed. Our shared goals are to protect beneficiaries, support sustainable growth, and maintain a high-quality distribution channel.

Monitoring under this program is corrective and preventative. Its purpose is to identify and manage risk early, not to assign blame. Placement into a monitoring tier reflects a determination that risk exists and must be actively managed in partnership with the agency.

Continuous Oversight

Compliance oversight is continuous and does not begin or end at a single point in time. Neither low complaint volume, favorable metrics, nor prior monitoring outcomes create a safe harbor.

Spark may initiate monitoring, require corrective action, or escalate oversight at any time based on factors including, but not limited to:

  • CMS or insurance carrier inquiries or referrals

  • Identified or potential beneficiary harm

  • Repeated complaint or allegation themes

  • Material compliance issues identified through investigation or review

  • Prior compliance history at the agent or agency level

Spark’s oversight approach is risk-based and holistic, considering performance, trends, and engagement over time.

2. How We Evaluate Compliance Risk

Spark evaluates compliance risk using a rolling twelve-month view of founded case activity combined with a qualitative assessment of behavior, trends, and controls.

Risk evaluation considers, among other factors:

  • Volume and nature of founded cases

  • Whether issues are isolated or represent repeat patterns

  • Severity and beneficiary impact

  • Effectiveness of prior remediation

  • Responsiveness and engagement from agencies and agents

  • Indicators that agency supervision or controls may be insufficient

3. Pre-Onboarding Compliance Evaluation

Prior to contracting, Spark conducts a pre-onboarding readiness review for certain prospective agency partners. The purpose of this review is to ensure agencies are positioned for compliant onboarding and long-term success on the Spark platform.

The review applies to:

  • New call center and hybrid agencies (direct or sub-agency)

  • Field agencies (direct or sub-agency) exceeding a certain size

Agencies may be asked to complete a brief questionnaire and provide supporting materials to support onboarding.

Based on the review, Spark will determine onboarding requirements and next steps.

In some cases, additional onboarding support, or enhanced monitoring may be required.

This process is designed to identify potential compliance risks early and support a smooth, compliant start with Spark.

4. Agency Eligibility for Monitoring

An agency becomes eligible for agency-level monitoring when:

  • The agency has five (5) or more founded cases within the rolling 12-month period, and

  • Spark determines the activity reflects elevated or sustained compliance risk.

There are no minimum enrollment or production thresholds for monitoring. Eligibility is based on risk, not size.

5. Monitoring Tiers (Agency Level)

Spark applies a three-tier framework to reflect increasing levels of agency compliance risk. Tier status is evaluated at the beginning of each month using a rolling 12-month case rate, along with qualitative risk factors.

Spark may conduct off-cycle tier evaluations when material changes occur, including but not limited to:

  • A significant or sudden increase in case volume

  • Carrier-driven requirements or escalations

  • Identified compliance events or emerging risk trends

Tier

Risk Level

Founded Case Rate (12-Month Rolling)

Description

Tier 1

Compliant / Low Risk

Below 3.0

Risk within acceptable range

Tier 2

Enhanced Monitoring / Moderate Risk

3.0 or above

Elevated risk requiring structured oversight

Tier 3

Corrective Action / High Risk

5.0 or above

Sustained or significant risk requiring intensive remediation

Case rate thresholds establish baseline tier placement; however, severity, trend analysis, beneficiary impact, and external requirements may influence tier assignment, regardless of numeric thresholds or evaluation timing.

5.1 Tier Reassessment and Meaningful Improvement

For purposes of tier reassessment and Corrective Action Plan (CAP) evaluation, Spark evaluates Meaningful Improvement based on whether corrective actions have resulted in a sustained and measurable reduction in compliance risk over time. Assessment is outcome-based and considers both quantitative and qualitative indicators, including changes in applicable case rates, error frequency, issue severity, and trend stability.

Meaningful Improvement requires evidence that corrective measures are effectively implemented, consistently applied, and embedded into ongoing agency operations such that recurrence of the identified compliance issues is prevented. Improvement must be demonstrated across multiple evaluation periods and may not be established by short-term performance gains, isolated corrective actions, or administrative completion of CAP requirements alone.

The presence of continued adverse beneficiary impact, the emergence of new high-risk findings related to the original compliance concern, or failure to sustain improvements may preclude a finding of Meaningful Improvement and result in continued or escalated monitoring.

6. Agent-Level Oversight

Agencies are responsible for the direct supervision and performance of their agents. Spark supports this responsibility through a separate agent-level compliance monitoring framework designed to proactively identify and address individual risk.

When an agent's performance indicates elevated compliance risk, they may be flagged for additional oversight or other corrective pathway in coordination with agency leadership. This applies to all agencies, not just those within an enhanced monitoring tier.

This process is designed to:

  • Identify and correct individual risk early

  • Support agencies in their supervision and coaching efforts

  • Reduce downstream risk to agencies, carriers, and beneficiaries

Agents who do not demonstrate improvement, or who present significant risk, may be subject to further enforcement actions, up to and including termination.

7. Tier 2 – Enhanced Monitoring

Tier 2 is intended to address elevated agency-level risk through a collaborative and structured process.

When an agency enters Tier 2, Spark Compliance will issue a Corrective Action Plan (CAP) based on trend and root cause analysis. The CAP will define required actions, milestones, and evidence expectations. Agencies are responsible for executing the CAP and documenting their progress.

Examples of CAP requirements may include, but are not limited to:

  • Targeted Training: Mandatory completion of specific training modules related to the identified compliance deficiencies.

  • Script Revisions: Required updates to sales scripts to address misleading or non-compliant language.

  • Enhanced Call Monitoring: A temporary increase in the percentage of calls monitored for the agency or specific agents.

  • Compliance Check-in Meetings: Mandatory check-in meetings between the agency’s leadership and the Spark Compliance team.

Progress is evaluated based on meaningful improvement. If such improvement is not demonstrated, the agency’s status will be reviewed for potential escalation.

8. Tier 3 – Corrective Action / High Risk

Tier 3 applies when compliance risk is sustained, significant, or unresolved through Tier 2 monitoring.

In this tier, Spark will issue an Enhanced Corrective Action Plan (CAP) with heightened requirements, and executive-level engagement from the agency is required. The Enhanced CAP is designed to immediately mitigate risk, prevent further beneficiary harm, and drive rapid, sustainable compliance improvements.

Spark will evaluate progress toward Meaningful Improvement on an ongoing basis. If Meaningful Improvement is not demonstrated within sixty (60) days, Spark may impose additional actions, which may include:

  • Co-op Accrual Pausing: Temporary suspension of Co-op accruals during the Tier 3 monitoring period

  • Contracting Restrictions: Suspension of new agent onboarding, sub-agency contracting, or expansion of existing contracting relationships

9. Investigations and Response Expectations

Compliance investigations may be initiated by Spark, an insurance carrier, and/or CMS, and may include (but are not limited to) cases, CTMs, grievances, allegations, call monitoring findings, marketing concerns, or enrollment-related issues.

  • Responses are required within five (5) business days, unless otherwise stated

  • Agencies are responsible for ensuring full agent cooperation.

10. Telephonic Enrollment Call Access & Quality Requirements

For all telephonic enrollments, Spark requires a minimum call quality score of 80%. Call recordings must be available for review and quality assessment.

Where Spark lacks direct system access to monitor telephonic enrollment calls, agencies must meet all reporting and call submission requirements. This includes timely submission of call recordings and supporting documentation as requested.

Failure to comply with telephonic enrollment call access and submission requirements may result in agent termination recommendations and agency escalation.

11. Marketing Materials and Script Approval Requirements

All marketing materials, sales scripts, and agent-facing materials used to promote Medicare products must be submitted to Spark Compliance for written approval prior to use. This includes, but is not limited to, sales scripts, marketing presentations, printed materials, digital content, advertisements, and promotional items.

Materials may not be used until they have been approved by Spark and the applicable insurance carriers, and where required, approved by CMS and formally opted into by the carrier.

All approved materials must be resubmitted for review and re-approval at least annually. Any changes to previously approved materials—regardless of how minor—require resubmission and approval before use.

Use of unapproved, modified, or expired materials is considered a material compliance violation and may result in immediate corrective action, including agent suspension and agency escalation.

Appendix A: Key Definitions

Term

Definition

Founded Case

A substantiated compliance issue, including substantiated Medicare complaints (CTMs) and substantiated non-CTM compliance allegations identified through Spark, carrier, or internal review.

Case Rate

A standardized measure of compliance risk calculated as (Total Founded Cases ÷ Total Production Policies) × 1,000, using a rolling 12-month period.

Rolling 12-Month Period

The most recent twelve (12) months of activity, measured continuously to identify sustained trends.

Active Policies

Currently active Medicare enrollments as of the measurement date, excluding canceled, voided, or retroactively terminated enrollments.

Corrective Action Plan (CAP)

A structured remediation plan issued by Spark Compliance defining required actions, milestones, timelines, evidence expectations, and success criteria.

Meaningful Improvement

Demonstrated, sustained reduction in compliance risk based on outcomes measured against the Spark-issued CAP, not activity alone.

Appendix B: Regulatory Authority and Oversight Rationale

Overview

Spark maintains the Compliance Monitoring Program described in this guide to fulfill its obligations as a Third-Party Marketing Organization (TPMO) under the Medicare Advantage (Part C) and Prescription Drug (Part D) programs.

CMS requires organizations that market Medicare products through downstream entities to maintain active, risk-based oversight, to identify non-compliance early, and to take timely corrective action when issues are identified. Spark's monitoring, escalation, and enforcement framework is designed to meet these expectations in a consistent and defensible manner.

This appendix summarizes the regulatory basis for Spark's program and explains how Spark's operating model aligns with CMS oversight principles.

TPMO Oversight Obligations

CMS regulations require organizations that delegate marketing and enrollment activities to downstream entities to ensure those entities comply with all applicable Medicare requirements.

Under 42 CFR §422.504 (Medicare Advantage) and 42 CFR §423.505 (Part D):

  • Sponsors are responsible for the actions of First Tier, Downstream, and Related Entities (FDRs)

  • Oversight responsibilities cannot be delegated away

  • Sponsors and TPMOs must monitor compliance, investigate potential violations, and take corrective action when necessary

As a TPMO, Spark is expected to function as an extension of the sponsor's compliance program with respect to marketing and enrollment activities. This includes maintaining documented oversight processes and demonstrating that identified risks are actively managed.

Risk-Based Monitoring Expectation

CMS does not prescribe a single monitoring model. Instead, CMS expects TPMOs to implement risk-based oversight that is proportionate to:

  • Complaint volume and trends

  • Severity of allegations

  • Beneficiary impact

  • Prior compliance history

  • Effectiveness of corrective actions

Spark's program reflects this expectation by:

  • Evaluating trends over a rolling twelve-month period

  • Applying tiered oversight based on relative risk

  • Monitoring both agency-level and agent-level activity

  • Escalating oversight when meaningful improvement is not demonstrated

This approach aligns with CMS guidance emphasizing early detection, trend analysis, and sustained remediation, rather than reactive enforcement alone.

Corrective Action and Enforcement Expectations

CMS expects TPMOs to take timely and effective corrective action when non-compliance is identified. Corrective action must be more than advisory; it must be structured, documented, and outcome-focused.

Spark's use of Corrective Action Plans (CAPs):

  • Ensures consistency in remediation expectations

  • Addresses root causes rather than symptoms

  • Establishes clear milestones and evidence requirements

  • Creates a documented record of oversight activity

When corrective actions do not result in meaningful improvement, CMS expects escalation, which may include operational restrictions or termination of downstream relationships. Spark's tier progression framework is designed to meet this expectation.

Agent-Level Oversight

CMS oversight expectations apply not only at the organizational level, but also at the individual agent level, particularly where agent behavior presents direct risk to beneficiaries.

Spark's agent-level monitoring framework supports CMS expectations by:

  • Identifying individual risk early

  • Addressing agent-specific issues before they become systemic

  • Coordinating with agency leadership on supervision and remediation

  • Escalating or terminating agents when risk cannot be adequately mitigated

Agent-level monitoring is a critical component of Spark's overall compliance posture and supports both beneficiary protection and agency-level stability.

Investigations and Timely Response Requirements

CMS and Medicare sponsors impose strict timelines for responding to complaints, allegations, and audit inquiries. Failure to respond promptly or completely may result in regulatory findings or enforcement action.

Spark's investigation response requirements are designed to ensure that:

  • Requests initiated by Spark, insurance carriers, or CMS are handled consistently

  • Required information is obtained within regulatory timeframes

  • Investigations are documented and defensible

  • Access restrictions are used where necessary to prevent continued risk during investigations

Timely cooperation from agencies and agents is essential for Spark to meet these obligations.

Did this answer your question?