Canonical Reference
Start here
The comprehensive guide covers all major regimes in one place.
Medicare AI Compliance Guide: HIPAA, TCPA, TPMO & Consumer Health Privacy
Seven sections covering every regulatory regime that governs AI-assisted Medicare lead generation — with executive answer blocks, 20 FAQs, and 8 primary-source citations. The canonical reference for all other content on this hub.
Topic Guides
Deep dives by regulation
Each topic guide focuses on one regulatory regime — with a practical focus for Medicare programs.
HIPAA & Medicare Lead Generation
When HIPAA actually applies to Medicare programs, the Covered Entity / Business Associate analysis, and what a BAA does and doesn't cover.
Read guide →TCPA & Medicare Text Messaging
Prior express written consent requirements, the 2024 one-to-one consent rule, opt-out obligations, and why TCPA is often the higher-velocity litigation risk.
Read guide →Washington My Health My Data Act
Opt-in consent requirements, the private right of action, extraterritorial reach, and what it means for nationally-marketed Medicare programs.
Read guide →CMS Medicare Marketing & TPMO Rules
TPMO classification, required disclaimers, 10-year recording retention, Scope of Appointment requirements, and the technology vendor analysis.
Read guide →State Consumer Health Privacy Laws
Washington MHMDA, Nevada SB 370, CCPA/CPRA sensitive data, and an overview of other state frameworks — compared and mapped to Medicare programs.
Read guide →Need Full HIPAA? How We Handle It
Message channel options (managed by Side Nerd or your org), HIPAA-eligible infrastructure, AI model handling, and vendor BAA chain — plus a full compliance package available on request.
Read overview →White Paper
For carriers, insurers & compliance teams
The full compliance and regulatory framework document — structured for CISOs, procurement, and legal review.
Compliance & Regulatory Framework for AI-Assisted Medicare Communication
Four-section analysis covering HIPAA scope and the covered-entity path, state consumer-health privacy laws (WA, NV, CA, CO), TCPA consent requirements and the 2024 one-to-one rule, and CMS Medicare marketing requirements for TPMOs. Includes a responsibility allocation summary and 24 primary-source citations. Intended for CISOs, compliance officers, and carrier procurement teams.