Establishing secure connection…Loading editor…Preparing document…

Authorization for Release of Information

This template is fully customizable. Edit the text, fill out the fields, and send it for signature. Give it a try!

Authorization for Release of Information (for Use and Disclosure)

Please fill out all sections or the form may be returned to you.

Patient Name: Social Security Number:

Address: Date of Birth:

City: State: Zip: Phone Number:

Type of Release

Send Information from:

Send Information to:

Email address or physical address (if name and address is different from above)

I would like records from the following dates: through

(This can be a very specific date or more general. Examples: July 15, 2007 or June 2006 - Feb 2007)

Please check the records you would like:

Records related to (specify):

Sharing of Special Protected Records: I authorize the sharing of information about:

a. The diagnosis or treatment of AIDS, including the results of HIV tests (the virus that causes AIDS)

b. The diagnosis or treatment of drug and/or alcohol abuse

c. The treatment and/or consultation for mental health or psychiatric disorders

d. Genetic testing, counseling and education

Reason records are needed (check all that apply):

This Authorization will expire on (date):

If no date is included the Authorization will expire in 90 days.

- I understand that I may revoke this Authorization at any time, unless the Authorization was obtained as a condition of obtaining insurance coverage; that my revocation must be submitted in writing to the Registration Office at the Facility/location where I originally submitted/filed this authorization; and that the revocation shall be effective except to the extent that the Facility has already used or disclosed information in reliance on the Authorization.

- I further understand that treatment payment, enrollment in any health plan, or eligibility for benefits is not conditioned on signing this Authorization, however, Facility may condition the provision of health care that is solely for the purpose of creating protected health information for disclosure to a third party on my signing this Authorization, and Facility may condition the provision of research-related treatment on my signing this Authorization.

- I understand that information used or disclosed pursuant to this Authorization may be subject to re-disclosure by the recipient and may no longer be protected by applicable privacy law. I further understand that the facility, its employees, officers and agents are released from legal responsibility or liability for the use and disclosure of the above information to the extent indicated and authorized.

I have read and understand this information. I have received a copy of this form and I am the patient or am authorized to act on behalf of the patient to sign this document verifying authorization for the use or disclosure of the protected health information under the above stated terms.

Date

Signature of Patient

If patient is unable to sign, secure consent of Legal Representative and indicate reason below:

Signature of Legal Representative and Relationship to Patient

Proof of designation must be filed in the chart or sent with this request.

Signature of Witness for Psychiatric Records

TO PATIENTS OR LEGAL DESIGNEES:

FACTS ABOUT OBTAINING YOUR MEDICAL RECORDS:

You have the right to obtain a copy of your medical records. The law requires a signed authorization form which contains certain criteria included on this form. This form must be fully completed before any medical information can be released. Incomplete forms may be returned for completion.

COSTS:

Kentucky law allows you one free copy of your medical record. This free copy is one requested by you for yourself or for a third party. Additional requests will cost $1.00 per page. It is advised you keep a personal copy of any medical information you request to avoid future costs of obtaining copies.

WHEN AND HOW WILL I GET MY RECORDS?

The request will be completed within 30 days of receipt. You will be notified via mail if the records cannot be processed in 30 days. If you would like to pick up your records, indicate this on the form with a phone number where you can be contacted. Otherwise, records will be mailed to the address listed on the authorization.

WHERE TO SEND YOUR REQUEST

Mail a completed request form to one of the following addresses:

1) University of Kentucky Hospital
Release of Information Section
Health Information Management Dept.
Room C601
800 Rose Street
Lexington, KY 40536-0293

2) UK HealthCare Ambulatory Services
Release of Information Section
Health Information Management Dept.
Room K003
740 South Limestone
Lexington, KY 40536-0284

3) UK HealthCare Good Samaritan Hospital
Release of Information Section
Health Information Management Dept.
Room B128
310 South Limestone
Lexington, KY 40508-3008

4) UK College of Dentistry
Dental Records
800 Rose Street D-104
Lexington, KY 40536-0297

Or fax a completed request form to:

University of Kentucky Hospital (859) 323-6853
UK HealthCare Ambulatory Services (859) 257-7228
UK HealthCare Good Samaritan (859) 226-7037
UK College of Dentistry (859) 323-0271

Contact UK Health Connection if you have any questions:

Local (859) 257-1000
Toll-Free (800) 333-8874

Enter text✕

What an Authorization for Release of Information Is

An Authorization for Release of Information is a written directive that allows an individual or organization to disclose protected or private records to a named recipient for a specified purpose. Commonly used in healthcare, legal, and financial contexts, the form names the person or entity releasing information, describes the records to be released, specifies the recipient, and sets a time frame or expiration. Properly completed, it documents the signer's consent, scope limits, and any conditions—helping organizations comply with HIPAA, FERPA, and other privacy rules while enabling authorized data sharing.

Why this Authorization Matters

It documents a subject's informed consent to share specific records, reduces legal risk for the disclosing party, and creates a clear audit trail. A valid authorization helps organizations respond to requests while meeting regulatory requirements and protecting privacy.

Why this Authorization Matters

Who typically completes and signs this form

The form is used by individuals authorizing disclosure and by organizations that collect, hold, or release records.

  • Patients or clients authorizing medical or behavioral health records release
  • Parents or guardians consenting to release of educational records
  • Customers or account holders authorizing financial or billing disclosures

Step-by-step: Completing the authorization

Follow these sequential steps to prepare a valid and processable form.

  • 01
    Identify Parties: Enter full names for the subject and the recipient.
  • 02
    Specify Records: Describe records with dates and types precisely.
  • 03
    State Purpose: Provide a clear, limited purpose for disclosure.
  • 04
    Sign and Date: Ensure authorized signer signs, dates, and adds contact info.

How release requests are processed

Typical processing follows identity verification, scope confirmation, and secure transmission to the named recipient.

  • Submit Request: Deliver signed authorization to records custodian.
  • Verify Identity: Custodian confirms signer identity per policy.
  • Review Scope: Staff confirm requested records fall within scope.
  • Transmit Records: Records sent securely to the specified recipient.

Configuring an online release workflow

Set workflow parameters so electronic authorizations meet organizational policies and legal requirements.

Field Configuration
Authentication Email + SMS code or stronger ID verification
Field Types Signature, date, conditional selection, and text fields
Routing Order Define signer sequence and reviewer steps
Storage Destination Encrypted archive with access controls

Technical considerations for digital processing

Use a platform that supports secure upload, strong authentication, and tamper-evident audit trails.

  • File Formats: PDF or DOCX preferred
  • Authentication Options: Email, SMS, KBA, or SAML
  • Retention: Encrypted at rest

Typical deadlines and response expectations

Processing times and statutory response periods vary by context; below are common benchmarks and legal timelines.

HIPAA Response Time:

30 days to respond (45 CFR §164.524)

Extension Option:

One 30-day extension with written notice

Education Records:

FERPA response periods vary; submit request promptly

Typical Processing:

Most custodians process in 7–14 business days

Security Retention:

Keep authorization record per retention rules

Key milestones from request to delivery

This sequence outlines the main stages and expected actions for a standard release request.

01

Request Submitted

Signed form received by records office.

02

Identity Verified

Custodian confirms identity and authority to sign.

03

Records Located

Staff identify and collect requested documents.

04

Secure Delivery

Records transmitted to recipient and audit saved.

Common mistakes to avoid

  • Using vague record descriptions that cause denial or delay
  • Leaving signature or date fields blank, invalidating authorization
  • Providing incorrect recipient contact details that misdirect records
  • Failing to verify signer identity before release, risking unauthorized disclosure

Principal risks and legal consequences

Unauthorized Disclosure: Civil liability and corrective actions
HIPAA Violations: Civil and criminal penalties possible
Regulatory Fines: Enforcement actions and sanctioning
Contract Liability: Claims for breach of confidentiality
Reputational Harm: Loss of trust and business impact
Document Rejection: Process failures and rework costs

Security and compliance controls to expect

Encryption: TLS 1.2/1.3 in transit
Data at Rest: AES-256 encryption
Regulatory Standards: ESIGN and UETA compliant
Healthcare: HIPAA support with BAA
Audit Trail: Timestamps, IP, and action log
Certifications: SOC 2 Type II and ISO 27001

Core elements every professional authorization should include

A complete authorization contains clear items that limit scope, identify parties, and document consent to satisfy legal and operational needs.

Authorization Statement

A clear sentence stating the signer authorizes release of identified records to a named recipient; this is the operative consent language that must be unambiguous and tied to the signer.

Records Description

Precise listing of document types and date ranges to be released; specificity reduces scope disputes and prevents over-disclosure of unrelated information.

Recipient Identity

Full name, organization, and contact for the recipient; specifies who may receive records and avoids misrouting to third parties.

Purpose and Use

A limited purpose statement explains why the records are being released and supports downstream compliance or permissible use limitations.

Effective and Expiration Dates

Start and end dates or event-based expiration; controls how long the authorization remains valid and limits indefinite access.

Signature Block

Signature (physical or electronic), printed name, relationship to subject, and date; establishes authority and provides an audit point for validation.

Real-world perspectives on secure document workflows

Organizations describe how secure signing and clear authorizations reduce friction in record sharing while maintaining compliance.

Optica Ventures — Brian Fitzgibbons

Their team emphasized usability for customers

  • The interface is simple and easy-to-use for our team; more importantly, it is just as easy for our customers.
  • A streamlined signing experience helped reduce back-and-forth and supported faster client onboarding while preserving auditability.

Fertility Centers of Illinois — John Butler

Their team focused on security and support

  • The airSlate SignNow team has been exceptional, responsive, the API has been great, and we're extremely happy that we chose airSlate SignNow as a company.
  • Reliable audit trails and integrations supported secure, documented releases of sensitive records.

How this authorization differs from similar documents

Compare scope, typical duration, notarization norms, and revocation mechanisms for commonly confused document types.

Criteria Authorization for Release Power of Attorney
Purpose limited disclosure broad authority
Duration short, specific often durable or extended
Notarization usually not required frequently required
Revocation written revocation typical formal notice and possible recording

Typical eSignature vendor pricing and capability snapshot

Comparison of common plan-level starting prices and feature availability for basic eSignature needs. Pricing reflects publicly reported starting rates and feature notes.

signNow DocuSign Adobe Sign PandaDoc HelloSign
Starting Price $8/user/mo $15/user/mo $14/user/mo $19/user/mo $15/user/mo
Free Trial 7-day free trial Trial availability varies Trial availability varies Trial availability varies Trial availability varies
Bulk Send Yes Yes Yes Yes No
Audit Trail Yes Yes Yes Yes Yes
HIPAA Compliant Yes Yes Yes No No
Envelope Cap No envelope cap 100 envelopes/user/year Varies by plan Varies by plan Varies by plan

Frequently asked questions about authorizations

Answers to common questions about validity, e-signing, revocation, and compliance for Authorization for Release of Information forms.


Need help? Contact support

be ready to get more
Join over 28 million airSlate SignNow users