UHC apparently can capture the ISP that did the enrollment, I got a phone call from a compliance person in Minnesota and have been playing phone tag but my IMO told me that's probably the reason for the call.
This is stupid, stupid, stupid but makes my life easier-from now on when someone asks me to help them enroll in a Part D plan I just let them know it is a violation for me to do an online enrollment, here is the plan you should consider and good luck.
So who's to say the client wasn't in your office and you let them sit at your desk to complete their own enrollment while you walked out of the office?