Learn more about the policy updates coming into play for Open Enrollment. Use this page to prepare now, reduce enrollment friction, and help members continue coverage confidently.
CMS is requiring EDE partners to add risk-based consumer identity proofing and consumer authorization for agent/broker-assisted EDE applications.
CMS is requiring EDE partners to enforce consumer identity proofing and agent/broker authorization for OE27. EDE partners must implement these requirements no later than October 12, 2026. Before October 12, brokers should: - Confirm each client’s current mobile phone number, email address, and mailing address. - Make sure the client or authorized representative can directly access the phone number and email address on the application. - Remove broker, agency, professional, company, placeholder, or dummy contact information from consumer applications. - Collect and document consumer consent before searching for, accessing, updating, or submitting Marketplace application information. Prepare clients for a one-time passcode, confirmation link, identity questions, or a document review if the EDE platform requires it. - Prioritize outreach to clients most likely to hit friction: new applications, applications in a different coverage state, members with very low net premiums after APTC, clients changing brokers, clients with stale contact information, and anyone who has historically relied on their broker to complete every step. - Watch Oscar emails, Broker Portal updates, webinars, and toolkit materials for updated workflows and any at-risk member indicators.
CMS identity proofing and EDE agent/broker authorization do not replace consumer consent. Before you work on a Marketplace application, you still need to obtain and document the consumer’s consent. The new EDE authorization step confirms that the consumer authorizes a specific agent, broker, or web-broker user to assist on that application. Both matter.
For OE27, the first assisted enrollment touch may take longer. Build time into your appointment for contact information cleanup, consent confirmation, identity proofing, authorization, and any troubleshooting.
Watch our webinar recording for key takeaways on identity proofing, high-risk applications, One-Time Password requirements, and steps to take before the October 12 deadline.

After October 12, if a consumer’s contact information is wrong, the consumer or authorized representative must correct it. CMS guidance says consumers can update incorrect information through the Marketplace Call Center or through the consumer pathway. Brokers should guide the member, but the consumer must have direct access to the application contact channels used for verification.
If electronic identity proofing fails, the member may need to use the Experian help desk, the EDE partner’s approved third-party process, or a HealthCare.gov manual review path. Brokers should set expectations that the application cannot move forward through broker-assisted EDE until the required proofing and authorization are complete.
CMS guidance indicates that identity proofing may be evergreen on a given EDE platform when tied to the consumer’s account and credentials. Otherwise, identity proofing may need to be confirmed for a coverage year.
Agent/broker authorization is collected each plan year and generally lasts for that plan year unless the consumer authorizes a different agent, broker, or web-broker.
No. Brokers must still collect and document consumer consent before accessing, searching, updating, or submitting Marketplace application information.
No. CMS guidance says brokers must not enter their own professional, personal, company, or dummy contact information as the consumer’s application contact information.
No. The consumer or authorized representative must complete the identity proofing step. Brokers can explain and guide, but the member must complete the verification.
Follow the EDE platform’s resend process. CMS guidance says passcodes and links expire in 15 minutes and are limited to three notifications in 24 hours for the same agent/broker user and application.
Follow the platform instructions. The member may need the Experian help desk, a CMS-approved third-party identity proofing process, or HealthCare.gov manual review.
No. The stays apply while litigation continues and may change through appeal, additional court action, CMS guidance, or state DOI guidance.
On July 16, 2026, a federal court in City of Columbus v. Kennedy stayed several 2027 Notice of Benefit and Payment Parameters provisions while litigation continues. CMS issued guidance explaining that certain provisions scheduled for July 20, 2026 or plan year 2027 did not or will not go into effect as finalized while the stay remains in place.
Information current as of August 21, 2026. This page is for general educational purposes and is not legal, tax, or financial advice. CMS, state DOI, court, and EDE platform guidance may change before and during Open Enrollment 2027.