§ 155.220 - Ability of States to permit agents and brokers and web-brokers to assist qualified individuals, qualified employers, or qualified employees enrolling in QHPs.

§ 155.220 Ability of States to permit agents and brokers and web-brokers to assist qualified individuals, qualified employers, or qualified employees enrolling in QHPs.

Cross Reference

Link to an amendment published at 89 FR 37703, May 6, 2024.

(a) General rule. A State may permit agents, brokers, and web-brokers to—

(1) Enroll individuals, employers or employees in any QHP in the individual or small group market as soon as the QHP is offered through an Exchange in the State;

(2) Subject to paragraphs (c), (d), and (e) of this section, enroll qualified individuals in a QHP in a manner that constitutes enrollment through the Exchange; and

(3) Subject to paragraphs (d) and (e) of this section, assist individuals in applying for advance payments of the premium tax credit and cost-sharing reductions for QHPs.

(b)

(1) Web site disclosure. The Exchange or SHOP may elect to provide information regarding licensed agents and brokers on its Web site for the convenience of consumers seeking insurance through that Exchange and may elect to limit the information to information regarding licensed agents and brokers who have completed any required Exchange or SHOP registration and training process.

(2) A Federally-facilitated Exchange or SHOP will limit the information provided on its Web site regarding licensed agents and brokers to information regarding licensed agents and brokers who have completed registration and training.

(c) Enrollment through the Exchange. A qualified individual may be enrolled in a QHP through the Exchange with the assistance of an agent, broker, or web-broker if—

(1) The agent, broker, or web-broker ensures the applicant's completion of an eligibility verification and enrollment application through the Exchange internet website as described in § 155.405, or ensures that the eligibility application information is submitted for an eligibility determination through the Exchange-approved web service subject to meeting the requirements in paragraphs (c)(3)(ii) and (c)(4)(i)(F) of this section;

(2) The Exchange transmits enrollment information to the QHP issuer as provided in § 155.400(a) to allow the issuer to effectuate enrollment of qualified individuals in the QHP.

(3)

(i) When an internet website of a web-broker is used to complete the QHP selection, at a minimum the internet website must:

(A) Disclose and display the following QHP information provided by the Exchange or directly by QHP issuers consistent with the requirements of § 155.205(c), and to the extent that enrollment support for a QHP is not available using the web-broker's website, prominently display a standardized disclaimer provided by HHS stating that enrollment support for the QHP is available on the Exchange website, and provide a Web link to the Exchange website:

(1) Premium and cost-sharing information;

(2) The summary of benefits and coverage established under section 2715 of the PHS Act;

(3) Identification of whether the QHP is a bronze, silver, gold, or platinum level plan as defined by section 1302(d) of the Affordable Care Act, or a catastrophic plan as defined by section 1302(e) of the Affordable Care Act;

(4) The results of the enrollee satisfaction survey, as described in section 1311(c)(4) of the Affordable Care Act;

(5) Quality ratings assigned in accordance with section 1311(c)(3) of the Affordable Care Act; and

(6) The provider directory made available to the Exchange in accordance with § 156.230 of this subchapter.

(B) Provide consumers the ability to view all QHPs offered through the Exchange;

(C) Not provide financial incentives, such as rebates or giveaways;

(D) Display all QHP data provided by the Exchange;

(E) Maintain audit trails and records in an electronic format for a minimum of ten years and cooperate with any audit under this section;

(F) Provide consumers with the ability to withdraw from the process and use the Exchange Web site described in § 155.205(b) instead at any time;

(G) For the Federally-facilitated Exchange, prominently display a standardized disclaimer provided by HHS, and provide a Web link to the Exchange Web site; and

(H) Differentially display all standardized options prominently and in accordance with the requirements under § 155.205(b)(1) in a manner consistent with that adopted by HHS for display on the Federally-facilitated Exchange Web site and with standards defined by HHS, unless HHS approves a deviation;

(I) Prominently display information provided by HHS pertaining to a consumer's eligibility for advance payments of the premium tax credit or cost-sharing reductions;

(J) Allow the consumer to select an amount for advance payments of the premium tax credit, if applicable, and make related attestations in accordance with § 155.310(d)(2);

(K) Comply with the applicable requirements in § 155.221; and

(L) Not display QHP advertisements or recommendations, or otherwise provide favored or preferred placement in the display of QHPs, based on compensation the agent, broker, or web-broker receives from QHP issuers; and

(M) Prominently display a clear explanation of the rationale for QHP recommendations and the methodology for its default display of QHPs.

(ii) When an internet website of a web-broker is used to complete the Exchange eligibility application, at a minimum the internet website must:

(A) Comply with the requirements in paragraph (c)(3)(i) of this section;

(B) Use exactly the same eligibility application language as appears in the FFE Single Streamlined Application required in § 155.405, unless HHS approves a deviation;

(C) Ensure that all necessary information for the consumer's applicable eligibility circumstances are submitted through the Exchange-approved web service; and

(D) Ensure that the process used for consumers to complete the eligibility application complies with all applicable Exchange standards, including §§ 155.230 and 155.260(b).

(4) When an agent or broker, through a contract or other arrangement, uses the internet website of a web-broker to help an applicant or enrollee complete a QHP selection or complete the Exchange eligibility application in the Federally-facilitated Exchange:

(i) The web-broker who makes the website available must:

(A) Provide HHS with a list of agents and brokers who enter into such a contract or other arrangement to use the web-broker's website, in a form and manner to be specified by HHS;

(B) Verify that any agent or broker accessing or using the Web site pursuant to the arrangement is licensed in the State in which the consumer is selecting the QHP; and has completed training and registration and has signed all required agreements with the Federally-facilitated Exchange pursuant to paragraph (d) of this section and § 155.260(b);

(C) Ensure that its name and any identifier required by HHS prominently appears on the Internet Web site and on written materials containing QHP information that can be printed from the Web site, even if the agent or broker that is accessing the Internet Web site is able to customize the appearance of the Web site;

(D) Terminate the agent or broker's access to its Web site if HHS determines that the agent or broker is in violation of the provisions of this section and/or HHS terminates any required agreement with the agent or broker;

(E) Report to HHS and applicable State departments of insurance any potential material breach of the standards in paragraphs (c) and (d) of this section, or the agreement entered into under § 155.260(b), by the agent or broker accessing the internet website, should it become aware of any such potential breach. A web-broker that provides access to its website to complete the QHP selection or the Exchange eligibility application or ability to transact information with HHS to another web-broker website is responsible for ensuring compliance with applicable requirements in paragraph (c)(3) of this section for any web pages of the other web-broker's website that assist consumers, applicants, qualified individuals, and enrollees in applying for APTC and CSRs for QHPs, or in completing enrollment in QHPs, offered in the Exchanges.

(F) When an internet website of a web-broker is used to complete the Exchange eligibility application, obtain HHS approval verifying that all requirements in this section are met.

(ii) HHS retains the right to temporarily suspend the ability of a web-broker making its website available to transact information with HHS, if HHS discovers a security and privacy incident or breach, for the period in which HHS begins to conduct an investigation and until the incident or breach is remedied to HHS' satisfaction.

(iii) Web-brokers operating in State Exchanges that do not use the Federal platform that permit other agents and brokers, through a contract or other arrangement, to use their internet website to help an applicant or enrollee complete a QHP selection or complete the Exchange eligibility application must comply with the standards in paragraphs (c)(4)(i)(A), (B), (D) and (F) of this section, except that all references to “Federally-facilitated Exchange” or “HHS” in paragraphs (c)(4)(i)(A), (B), (D), and (F) will be understood to mean “the applicable State Exchange.”

(5) HHS or its designee may periodically monitor and audit an agent, broker, or web-broker under this subpart to assess its compliance with the applicable requirements of this section.

(6) In addition to applicable requirements under § 155.221(b)(4), a web-broker must demonstrate operational readiness and compliance with applicable requirements prior to the web-broker's internet website being used to complete an Exchange eligibility application or a QHP selection, which may include submission or completion, in the form and manner specified by HHS, of the following:

(i) Operational data including licensure information, points of contact, and third-party relationships;

(ii) Enrollment testing, prior to approval or renewal;

(iii) Website reviews performed by HHS;

(iv) Security and privacy assessment documentation, including:

(A) Penetration testing results;

(B) Security and privacy assessment reports;

(C) Vulnerability scan results;

(D) Plans of action and milestones; and

(E) System security and privacy plans.

(v) Agreements between the web-broker and HHS.

(d) Agreement. An agent, broker, or web-broker that enrolls qualified individuals in a QHP in a manner that constitutes enrollment through the Exchange or assists individuals in applying for advance payments of the premium tax credit and cost-sharing reductions for QHPs must comply with the terms of an agreement between the agent, broker, or web-broker and the Exchange under which the agent, broker, or web-broker at least:

(1) Registers with the Exchange in advance of assisting qualified individuals enrolling in QHPs through the Exchange;

(2) Receives training in the range of QHP options and insurance affordability programs, except that a licensed agent or broker entity that registers with the Federally-facilitated Exchange in its capacity as a business organized under the laws of a State, and not as an individual person, and direct enrollment technology providers are exempt from this requirement; and

(3) Complies with the Exchange's privacy and security standards adopted consistent with § 155.260.

(e) Compliance with State law. An agent, broker, or web-broker that enrolls qualified individuals in a QHP in a manner that constitutes enrollment through the Exchange or assists individuals in applying for advance payments of the premium tax credit and cost-sharing reductions for QHPs must comply with applicable State law related to agents, brokers, or web-brokers including applicable State law related to confidentiality and conflicts of interest.

(f) Termination notice to HHS.

(1) An agent, broker, or web-broker may terminate its agreement with HHS by sending to HHS a written notice at least 30 days in advance of the date of intended termination.

(2) The notice must include the intended date of termination, but if it does not specify a date of termination, or the date provided is not acceptable to HHS, HHS may set a different termination date that will be no less than 30 days from the date on the agent's, broker's, or web-broker's notice of termination.

(3) Prior to the date of termination, an agent, broker, or web-broker should—

(i) Notify applicants, qualified individuals, or enrollees that the agent, broker, or web-broker is assisting, of the agent's, broker's, or web-broker's intended date of termination;

(ii) Continue to assist such individuals with Exchange-related eligibility and enrollment services up until the date of termination; and

(iii) Provide such individuals with information about alternatives available for obtaining additional assistance, including but not limited to the Federally-facilitated Exchange Web site.

(4) When the agreement between the agent, broker, or web-broker and the Exchange under paragraph (d) of this section is terminated under paragraph (f) of this section, the agent, broker, or web-broker will no longer be registered with the Federally-facilitated Exchanges, or be permitted to assist with or facilitate enrollment of qualified individuals, qualified employers or qualified employees in coverage in a manner that constitutes enrollment through a Federally-facilitated Exchange, or be permitted to assist individuals in applying for advance payments of the premium tax credit and cost-sharing reductions for QHPs. The agent's, broker's, or web-broker's agreement with the Exchange under § 155.260(b) will also be terminated through the termination without cause process set forth in that agreement. The agent, broker, or web-broker must continue to protect any personally identifiable information accessed during the term of either of these agreements with the Federally-facilitated Exchanges.

(g) Standards for termination for cause from the Federally-facilitated Exchange.

(1) If, in HHS' determination, a specific finding of noncompliance or pattern of noncompliance is sufficiently severe, HHS may terminate an agent's, broker's, or web-broker's agreement with the Federally-facilitated Exchange for cause.

(2) An agent, broker, or web-broker may be determined noncompliant if HHS finds that the agent, broker, or web-broker violated—

(i) Any standard specified under this section;

(ii) Any term or condition of the agreement with the Federally-facilitated Exchanges required under paragraph (d) of this section, or any term or condition of the agreement with the Federally-facilitated Exchange required under § 155.260(b);

(iii) Any State law applicable to agents, brokers, or web-brokers, as required under paragraph (e) of this section, including but not limited to State laws related to confidentiality and conflicts of interest; or

(iv) Any Federal law applicable to agents, brokers, or web-brokers.

(3)

(i) Except as provided in paragraph (g)(3)(ii) of this section, HHS will notify the agent, broker, or web-broker of the specific finding of noncompliance or pattern of noncompliance made under paragraph (g)(1) of this section, and after 30 days from the date of the notice, may terminate the agreement for cause if the matter is not resolved to the satisfaction of HHS.

(ii) HHS may immediately terminate the agreement for cause upon notice to the agent or broker without any further opportunity to resolve the matter if an agent or broker fails to maintain the appropriate license under State law as an agent, broker, or insurance producer in every State in which the agent or broker actively assists consumers with applying for advance payments of the premium tax credit or cost-sharing reductions or with enrolling in QHPs through the Federally-facilitated Exchanges.

(4) After the applicable period in paragraph (g)(3) of this section has elapsed and the agreement under paragraph (d) of this section is terminated, the agent, broker, or web-broker will no longer be registered with the Federally-facilitated Exchanges, or be permitted to assist with or facilitate enrollment of a qualified individual, qualified employer, or qualified employee in coverage in a manner that constitutes enrollment through a Federally-facilitated Exchange, or be permitted to assist individuals in applying for advance payments of the premium tax credit and cost-sharing reductions for QHPs. The agent's, broker's, or web-broker's agreement with the Exchange under § 155.260(b)(2) will also be terminated through the process set forth in that agreement. The agent, broker, or web-broker must continue to protect any personally identifiable information accessed during the term of either of these agreements with the Federally-facilitated Exchanges.

(5) Fraud or abusive conduct—

(i)

(A) If HHS reasonably suspects that an agent, broker, or web-broker may have may have engaged in fraud, or in abusive conduct that may cause imminent or ongoing consumer harm using personally identifiable information of an Exchange enrollee or applicant or in connection with an Exchange enrollment or application, HHS may temporarily suspend the agent's, broker's, or web-broker's agreements required under paragraph (d) of this section and under § 155.260(b) for up to 90 calendar days. Suspension will be effective on the date of the notice that HHS sends to the agent, broker, or web-broker advising of the suspension of the agreements.

(B) The agent, broker, or web-broker may submit evidence in a form and manner to be specified by HHS, to rebut the allegation during this 90-day period. If the agent, broker, or web-broker submits such evidence during the suspension period, HHS will review the evidence and make a determination whether to lift the suspension within 45 calendar days of receipt of such evidence. If the rebuttal evidence does not persuade HHS to lift the suspension, or if the agent, broker, or web-broker fails to submit rebuttal evidence during the suspension period, HHS may terminate the agent's, broker's, or web-broker's agreements required under paragraph (d) of this section and under § 155.260(b) for cause under paragraph (g)(5)(ii) of this section.

(ii) If there is a finding or determination by a Federal or State entity that an agent, broker, or web-broker engaged in fraud, or abusive conduct that may result in imminent or ongoing consumer harm, using personally identifiable information of Exchange enrollees or applicants or in connection with an Exchange enrollment or application, HHS will terminate the agent's, broker's, or web-broker's agreements required under paragraph (d) of this section and under § 155.260(b) for cause. The termination will be effective starting on the date of the notice that HHS sends to the agent, broker, or web-broker advising of the termination of the agreements.

(iii) During the suspension period under paragraph (g)(5)(i) of this section and following termination of the agreements under paragraph (g)(5)(i)(B) or (g)(5)(ii) of this section, the agent, broker, or web-broker will not be registered with the Federally-facilitated Exchanges, or be permitted to assist with or facilitate enrollment of qualified individuals, qualified employers, or qualified employees in coverage in a manner that constitutes enrollment through a Federally-facilitated Exchange, or be permitted to assist individuals in applying for advance payments of the premium tax credit and cost-sharing reductions for QHPs. The agent, broker, or web-broker must continue to protect any personally identifiable information accessed during the term of either of these agreements with the Federally-facilitated Exchanges.

(6) The State department of insurance or equivalent State agent or broker licensing authority will be notified by HHS in cases of suspensions or terminations effectuated under this paragraph (g).

(h) Request for reconsideration of termination for cause from the Federally-facilitated Exchange —

(1) Request for reconsideration. An agent, broker, or web-broker whose agreement with the Federally-facilitated Exchange has been terminated may request reconsideration of such action in the manner and form established by HHS.

(2) Timeframe for request. The agent, broker, or web-broker must submit a request for reconsideration to the CMS Administrator within 30 calendar days of the written notice from HHS.

(3) Notice of reconsideration decision. The CMS Administrator will provide the agent, broker, or web-broker with a written notice of the reconsideration decision within 60 calendar days of the date the CMS Administrator receives the request for reconsideration. This decision will constitute HHS' final determination.

(i) Use of agents' and brokers' and web-brokers' internet websites for SHOP. For plan years beginning on or after January 1, 2015, in States that permit this activity under State law, a SHOP may permit agents, brokers, and web-brokers to use an internet website to assist qualified employers and facilitate enrollment of enrollees in a QHP through the Exchange, under paragraph (c)(3) of this section.

(j) Federally-facilitated Exchange standards of conduct.

(1) An agent, broker, or web-broker that assists with or facilitates enrollment of qualified individuals, qualified employers, or qualified employees, in coverage in a manner that constitutes enrollment through a Federally-facilitated Exchange, or assists individuals in applying for advance payments of the premium tax credit and cost-sharing reductions for QHPs sold through a Federally-facilitated Exchange, must—

(i) Have executed the required agreement under paragraph § 155.260(b);

(ii) Be registered with the Federally-facilitated Exchanges under paragraph (d)(1) of this section; and

(iii) Comply with the standards of conduct in paragraph (j)(2) of this section.

(2) Standards of conduct. An individual or entity described in paragraph (j)(1) of this section must—

(i) Provide consumers with correct information, without omission of material fact, regarding the Federally-facilitated Exchanges, QHPs offered through the Federally-facilitated Exchanges, and insurance affordability programs, and refrain from marketing or conduct that is misleading (including by having a direct enrollment website that HHS determines could mislead a consumer into believing they are visiting HealthCare.gov), coercive, or discriminates based on race, color, national origin, disability, age, or sex (which includes discrimination on the basis of sex characteristics, including intersex traits; pregnancy or related conditions; sexual orientation; gender identity; and sex stereotypes);

(ii) Provide the Federally-facilitated Exchanges with correct information, and document that eligibility application information has been reviewed by and confirmed to be accurate by the consumer, or the consumer's authorized representative designated in compliance with § 155.227, prior to the submission of information, under section 1411(b) of the Affordable Care Act, including but not limited to:

(A) Documenting that eligibility application information has been reviewed by and confirmed to be accurate by the consumer or the consumer's authorized representative must require the consumer or their authorized representative to take an action that produces a record that can be maintained by the individual or entity described in paragraph (j)(1) of this section and produced to confirm the consumer or their authorized representative has reviewed and confirmed the accuracy of the eligibility application information. Non-exhaustive examples of acceptable documentation include obtaining the signature of the consumer or their authorized representative (electronically or otherwise), verbal confirmation by the consumer or their authorized representative that is captured in an audio recording, a written response (electronic or otherwise) from the consumer or their authorized representative to a communication sent by the agent, broker, or web-broker, or other similar means or methods specified by HHS in guidance.

(1) The documentation required under paragraph (j)(2)(ii)(A) of this section must include the date the information was reviewed, the name of the consumer or their authorized representative, an explanation of the attestations at the end of the eligibility application, and the name of the assisting agent, broker, or web-broker.

(2) An individual or entity described in paragraph (j)(1) of this section must maintain the documentation described in paragraph (j)(2)(ii)(A) of this section for a minimum of ten years, and produce the documentation upon request in response to monitoring, audit, and enforcement activities conducted consistent with paragraphs (c)(5), (g), (h), and (k) of this section.

(B) Entering only an email address on an application for Exchange coverage or an application for advance payments of the premium tax credit and cost-sharing reductions for QHPs that belongs to the consumer or the consumer's authorized representative designated in compliance with § 155.227. A consumer's email address may only be entered with the consent of the consumer or the consumer's authorized representative. Properly entered email addresses must adhere to the following guidelines:

(1) The email address must be accessible by the consumer, or the consumer's authorized representative designated in compliance with § 155.227, and may not be accessible by the agent, broker, or web-broker assisting the consumer; and

(2) The email address may not have domains that belong to the agent, broker, or web-broker or their business or agency.

(C) Entering only a telephone number on an application for Exchange coverage or an application for advance payments of the premium tax credit and cost-sharing reductions for QHPs that belongs to the consumer or their authorized representative designated in compliance with § 155.227. Telephone numbers may not be the personal number or business number of the agent, broker, or web-broker assisting the consumer, or their business or agency, unless the telephone number is actually that of the consumer or their authorized representative.

(D) Entering only a mailing address on an application for Exchange coverage or an application for advance payments of the premium tax credit and cost-sharing reductions for QHPs that belongs to, or is primarily accessible by, the consumer or their authorized representative designated in compliance with § 155.227, is not for the exclusive or convenient use of the agent, broker, or web-broker, and is an actual residence or a secure location where the consumer or their authorized representative may receive correspondence, such as a P.O. Box or homeless shelter. Mailing addresses may not be that of the agent, broker, or web-broker assisting the consumer, or their business or agency, unless the address is the actual residence of the consumer or their authorized representative.

(E) When submitting household income projections used by the Exchange to determine a tax filer's eligibility for advance payments of the premium tax credit in accordance with § 155.305(f) or cost-sharing reductions in accordance with § 155.305(g), entering only a consumer's household income projection that the consumer or the consumer's authorized representative designated in compliance with § 155.227 has knowingly authorized and confirmed as accurate. Household income projections must be calculated and attested to by the consumer. The agent, broker, or web-broker assisting the consumer may answer questions posed by the consumer related to household income projection, such as helping the consumer determine what qualifies as income.

(iii) Obtain and document the receipt of consent of the consumer or their authorized representative designated in compliance with § 155.227, employer, or employee prior to assisting with or facilitating enrollment through a Federally-facilitated Exchange or assisting the individual in applying for advance payments of the premium tax credit and cost-sharing reductions for QHPs;

(A) Obtaining and documenting the receipt of consent must require the consumer, or the consumer's authorized representative designated in compliance with § 155.227, to take an action that produces a record that can be maintained and produced by an individual or entity described in paragraph (j)(1) of this section to confirm the consumer's or their authorized representative's consent has been provided. Non-exhaustive examples of acceptable documentation of consent include obtaining the signature of the consumer or their authorized representative (electronically or otherwise), verbal confirmation by the consumer or their authorized representative that is captured in an audio recording, a response from the consumer or their authorized representative to an electronic or other communication sent by the agent, broker, or web-broker, or other similar means or methods specified by HHS in guidance.

(B) The documentation required under paragraph (j)(2)(iii)(A) of this section must include a description of the scope, purpose, and duration of the consent provided by the consumer or their authorized representative designated in compliance with § 155.227, the date consent was given, name of the consumer or their authorized representative, and the name of the agent, broker, web-broker, or agency being granted consent, as well as a process through which the consumer or their authorized representative may rescind the consent.

(C) An individual or entity described in paragraph (j)(1) of this section must maintain the documentation described in paragraph (j)(2)(iii)(A) of this section for a minimum of 10 years, and produce the documentation upon request in response to monitoring, audit, and enforcement activities conducted consistent with paragraphs (c)(5), (g), (h), and (k) of this section.

(iv) Protect consumer personally identifiable information according to § 155.260(b)(3) and the agreement described in § 155.260(b)(2);

(v) Comply with all applicable Federal and State laws and regulations.

(vi) Not engage in scripting and other automation of interactions with CMS Systems or the Direct Enrollment Pathways, unless approved in advance in writing by CMS.

(vii) Only use an identity that belongs to the consumer when identity proofing the consumer's account on HealthCare.gov.

(viii) When providing information to Federally-facilitated Exchanges that may result in a determination of eligibility for a special enrollment period in accordance with § 155.420, obtain authorization from the consumer to submit the request for a determination of eligibility for a special enrollment period and make the consumer aware of the specific triggering event and special enrollment period for which the agent, broker, or web-broker will be submitting an eligibility determination request on the consumer's behalf.

(3) If an agent, broker, or web-broker fails to provide correct information, he, she, or it will nonetheless be deemed in compliance with paragraphs (j)(2)(i) and (ii) of this section if HHS determines that there was a reasonable cause for the failure to provide correct information and that the agent, broker, or web-broker acted in good faith.

(k) Penalties other than termination of the agreement with the Federally-facilitated Exchanges.

(1) If HHS determines that an agent, broker, or web-broker has failed to comply with the requirements of this section, in addition to any other available remedies, that agent, broker, or web-broker—

(i) May be denied the right to enter into agreements with the Federally-facilitated Exchanges in future years; and

(ii) May be subject to civil money penalties as described in § 155.285.

(2) HHS will notify the agent, broker, or web-broker of the proposed imposition of penalties under paragraph (k)(1)(i) of this section as part of the termination notice issued under paragraph (g) of this section and, after 30 calendar days from the date of the notice, may impose the penalty if the agent, broker, or web-broker has not requested a reconsideration under paragraph (h) of this section. The proposed imposition of penalties under paragraph (k)(1)(ii) of this section will follow the process outlined under § 155.285.

(3) HHS may immediately suspend the agent's or broker's ability to transact information with the Exchange if HHS discovers circumstances that pose unacceptable risk to Exchange operations or Exchange information technology systems until the incident or breach is remedied or sufficiently mitigated to HHS' satisfaction.

(l) Application to State Exchanges using a Federal platform. An agent, broker, or web-broker who enrolls qualified individuals, qualified employers, or qualified employees in coverage in a manner that constitutes enrollment through a State Exchange using the Federal platform, or assists individual market consumers with submission of applications for advance payments of the premium tax credit and cost-sharing reductions through a State Exchange using the Federal platform must comply with all applicable Federally-facilitated Exchange standards in this section.

(m) Web-broker agreement suspension, termination, and denial and information collection.

(1) A web-broker's agreement executed under paragraph (d) of this section, may be suspended or terminated under paragraph (g) of this section, and a web-broker may be denied the right to enter into agreements with the Federally-facilitated Exchanges under paragraph (k)(1)(i) of this section, based on the actions of its officers, employees, contractors, or agents, whether or not the officer, employee, contractor, or agent is registered with the Exchange as an agent or broker.

(2) A web-broker's agreement executed under paragraph (d) of this section may be suspended or terminated under paragraph (g) of this section, and a web-broker may be denied the right to enter into agreements with the Federally-facilitated Exchanges under paragraph (k)(1)(i) of this section, if it is under the common ownership or control or is an affiliated business of another web-broker that had its agreement suspended or terminated under paragraph (g) of this section.

(3) The Exchange may collect information from a web-broker during its registration with the Exchange under paragraph (d)(1) of this section, or at another time on an annual basis, in a form and manner to be specified by HHS, sufficient to establish the identities of the individuals who comprise its corporate ownership and leadership and to ascertain any corporate or business relationships it has with other entities that may seek to register with the Federally-facilitated Exchange as web-brokers.

(n) Application to State Exchanges that do not use the Federal platform. A web-broker that assists or enrolls qualified individuals, qualified employers or qualified employees in coverage in a manner that constitutes enrollment through the State Exchange, or assists individual market consumers with submission of applications for advance payments of the premium tax credit and cost-sharing reductions through the State Exchange, must comply with the Federally-facilitated Exchange standards in paragraphs (c)(3)(i)(A), (G), (I), and (j)(2)(i) of this section, including any additional State-specific standards under paragraph (n)(1) of this section, and the State Exchange's operational readiness standards under paragraph (n)(2) of this section. For the purposes of paragraph (j)(2)(i) of this section, references to “HHS” and “the federally facilitated Exchanges” will be understood to mean “the applicable State Exchange, applied for web-brokers”, and the reference to “HealthCare.gov” will be understood to mean “the State Exchange website, applied for web-brokers.”

(1) State Exchanges may add State-specific information to the standardized disclaimers and information under paragraphs (c)(3)(i)(A), (G), and (I) of this section that does not conflict with the HHS-provided language.

(2) State Exchanges must establish the form and manner for their web-brokers to demonstrate operational readiness and compliance with applicable requirements in order for the web-broker's internet website being used to complete an Exchange eligibility application or a QHP selection, which may include submission or completion of the following items to the State Exchange, in the form and manner specified by the Exchange:

(i) Operational data including licensure information, points of contact and third-party relationships;

(ii) Enrollment testing, prior to approval or renewal;

(iii) website reviews performed by the State Exchange;

(iv) Security and privacy documentation, including:

(A) Penetration testing results;

(B) Security and privacy assessment reports;

(C) Vulnerability scan results;

(D) Plans of action and milestones; and

(E) System security and privacy plans.

(v) Agreements between the web-broker and the State Exchange.

[77 FR 18444, Mar. 27, 2012, as amended at 78 FR 15533, Mar. 11, 2013; 78 FR 54134, Aug. 30, 2013; 79 FR 13837, Mar. 11, 2014; 81 FR 12338, Mar. 8, 2016; 81 FR 94176, Dec. 22, 2016; 84 FR 17563, Apr. 25, 2019; 85 FR 37248, June 19, 2020; 86 FR 24288, May 5, 2021; 87 FR 27388, May 6, 2022; 88 FR 25917, Apr. 27, 2023; 89 FR 26420, Apr. 15, 2024; 89 FR 37703, May 6, 2024]