Can authorizations be electronically signed?

Yes. Electronic signatures are legally enforceable under ESIGN (15 U.S.C. ch. 96) and UETA where adopted, provided intent, consent, attribution, and record retention are met. For consumer-facing healthcare forms, confirm any required consumer disclosure and provider acceptance policies.

Is notarization required?

Not usually. Most medical record authorizations do not require notarization under HIPAA; however, some states or custodians may require notarization or witness signatures for third-party executors or durable authorizations. Check state law or custodian policy before submitting.

What if the requester lacks valid ID?

Custodians are permitted to refuse release until identity is verified. Acceptable alternatives can include notarized statements, attestation by a healthcare proxy, or additional matching data points. Communicate with the custodian to confirm acceptable verification methods before resubmitting.

Can I limit scope to specific records?

Yes. Narrow scopes by specifying document types and date ranges. A focused request reduces review time, lowers copying fees, and minimizes disclosure of unrelated sensitive information. Providers may still redact third-party data under applicable privacy rules.

How long do authorizations remain valid?

Authorizations should state a clear expiration date or event. Absent a date, providers may apply institutional policy or state law limits; many custodians favor specific end dates to reduce indefinite access to PHI and to simplify recordkeeping obligations.

Can I revoke the authorization?

Yes. Revocation must generally be written, signed, and delivered to the custodian; it does not affect disclosures already made in reliance on a valid authorization. Keep proof of delivery; custodians may require processing time before stopping further releases.

Electronic Signature
Templates
Other
Authorization to Inspect and Copy Medical Records

Authorization to Inspect and Copy Medical Records

This template is fully customizable. Edit the text, fill out the fields, and send it for signature. Give it a try!

DIVISION OF

WORKERS'

COMPENSATION

3315 W. Truman Blvd.

P.O. Box 58

Jefferson City, MO 65102-0058

573-751-4231

www.labor.mo.gov/DWC

MISSOURI DEPARTMENT OF LABOR AND INDUSTRIAL RELATIONS
AUTHORIZATION TO INSPECT AND/OR
COPY MEDICAL RECORDS

TO:

Injury Number

Checked By

Employee

Employer

Insurer

Date of Accident

Place and County of Accident

Description of Injury (Must include part of body affected)

You are hereby authorized to permit in behalf of to inspect and/or copy any and all medical records you have in your possession in regard to the above captioned case, which is now pending before the Division of Workers' Compensation.

NOTE: The medical records which may be released according to this authorization are limited to medical treatment for the injury suffered on the date of accident listed above. ONLY records that relate to the injury listed above, as to the type of injury and the part of the body injured, may be included. Medical records from before the date of accident or medical records after the date of accident, which do not relate to this injury, may not be released pursuant to this authorization.

This authorization is made in accordance with Section 287.140.7, RSMo., which reads as follows:

"Every hospital or other person furnishing the employee with medical aid shall permit its record to be copied by and shall furnish full information to the division or the commission, the employer, the employee or his dependents and any other party to any proceedings for compensation under this chapter, and certified copies of the records shall be admissible in evidence in any such proceedings."

Date

APPROVED BY: Administrative Law Judge

Signature (Division of Workers' Compensation)

This form is effective twelve months from the date it is signed by an Administrative Law Judge.

WC-43 (03-12) AI

What this Authorization Is and When It Applies

An Authorization to Inspect and Copy Medical Records is a HIPAA-compliant written consent that allows an identified individual or organization to review and obtain copies of a patient’s protected health information. The form specifies the patient, the recipient, the scope of records to be inspected or copied, relevant date ranges, purpose of disclosure, and the duration of authorization. It must include explicit patient signatures and dates, and may require identity verification or notarization where state law or covered-entity policy demands it. Properly completed, it documents informed consent for release of medical information.

Why a Clear Authorization Matters

This authorization clarifies who may access protected health information, what records are covered, and the timeframe for disclosure. Clear written authorization helps covered entities comply with HIPAA, reduces processing delays, and provides an audit trail to support lawful release and patient rights.

Who Typically Completes or Receives This Authorization

Typical users include patients, authorized representatives, healthcare providers, attorneys, insurers, and employers requesting medical records for a lawful purpose.

Patients — obtain copies for second opinions, legal matters, or personal records.
Authorized representatives — agents, guardians, or individuals with power of attorney.
Health plans and insurers — access records to process claims or appeals.

Confirm identity and scope before submission; incorrect scopes or expired dates commonly delay processing or lead to denials.

Step-by-Step: Complete and Submit the Authorization

Follow these steps to complete and submit an Authorization to Inspect and Copy Medical Records safely and in compliance with applicable laws.

01

Gather ID: Collect government-issued photo ID to verify patient identity.
02

Specify Records: Detail types and date ranges for requested records.
03

Sign: Sign and date using allowed signature method.
04

Submit: Send to the custodian using secure channel.

Core Elements Every Authorization Should Include

Essential components define scope, consent, verification, and retention; include these elements to ensure a valid Authorization to Inspect and Copy Medical Records.

Patient Identity

Full legal name, date of birth, and government-issued identification ensure custodian can locate accurate records; include alternate names and previous addresses if records span prior legal names.

Recipient Info

Name, organization, mailing and electronic addresses, and phone number determine delivery method; specify secure transmission preferences and secondary recipients if copies should be shared further.

Scope & Dates

Clearly describe types of records and explicit date range; overly broad scopes may require additional review or redaction that delays compliance and increases cost administrative overhead.

Purpose

Specify the reason for disclosure (legal, insurance, continuing care) to guide redaction decisions and to document lawful basis for transfer under HIPAA and state rules.

Signature

Patient or authorized signatory must sign and date; if signing for another, include authority description (power of attorney, guardian) and attach documentation verifying authority as required.

Expiration

State a specific expiration date or event-based termination; open-ended authorizations are discouraged and may be rejected by custodians under state or institutional policy for privacy reasons.

Security and Compliance Considerations

Encryption: TLS 1.2/1.3 in transit

Data at Rest: AES-256 encryption for stored records

Access Logs: Audit trail with IP and timestamps

BAA: Business Associate Agreement available

Authentication: Multi-factor option for high-sensitivity

Compliance: ESIGN, UETA, HIPAA, SOC 2

Principal Legal and Operational Risks

Privacy Breach: Potential civil and criminal penalties

Denial of Request: Custodian may refuse

Fees: Copy and retrieval charges

Civil Liability: Wrongful disclosure suits

Contract Breach: Violation of agreements

Criminal Risk: Intentional violations prosecuted

Common Mistakes That Cause Delays

Incomplete patient identifiers (name, DOB, SSN) commonly cause custodians to refuse or delay record retrieval while identity is confirmed.
Overly broad record requests increase review time and copying fees; request only necessary categories and date ranges to reduce cost.
Missing or expired authorizations are a frequent reason for denial; ensure the form includes a clear expiration or event-based end date.
Failure to specify delivery format can lead to incompatible file types or delays when large imaging files require special transfer methods.

Set Up an Online Authorization Workflow

Configure an online authorization workflow to collect secure signatures, verify identity, and route requests to the correct health record custodian.

Field	Configuration
Identity Verification	SMS code or ID upload required for high-sensitivity requests
Signature Type	Allow handwritten or compliant e-signatures; capture timestamp
Routing	Auto-route by facility or record custodian email
Audit Trail	Enable IP, timestamp, and download logs for compliance

Delivery Channels and Platform Requirements

Preferred distribution methods include secure portal delivery, encrypted email, fax via secure gateway, or certified mail depending on recipient capability.

Secure Portal: Best for large files
Encrypted Email: Ensure TLS and recipient capability
Certified Mail: Trackable physical delivery with proof

Routing: Where to Send the Completed Form

Routing and submission steps clarify where to send the completed authorization and how custodians process requests.

Identify Custodian: Send request to the facility listed on patient records.
Delivery Method: Use secure portal, encrypted email, or physical mail.
Processing: Custodian verifies identity and searches requested date range.
Fulfillment: Provide copies in requested format; note applicable copy fees.

Typical Timelines and Processing Expectations

Timeframes vary by custodian and state law; plan submissions to avoid delays and meet requester deadlines.

Request Acknowledgment:

Custodian typically acknowledges within 5–10 business days.

Standard Processing Time:

Most providers process copies within 30 days.

Expedited Requests:

May be completed within 7–10 business days for urgency.

Long-Term Records:

Older or archived records can take 30–60 days to retrieve.

Statutory Deadlines:

HIPAA requires timely response; states may set stricter deadlines.

Vendor Pricing and Feature Comparison for eSignature

Compare entry-level pricing and core delivery features for common eSignature vendors relevant to medical records authorization workflows.

	signNow	DocuSign	Adobe Sign	PandaDoc	HelloSign
Starting Price	$8/user/mo	$15/user/mo	$14/user/mo	$19/user/mo	$15/user/mo
Free Trial	7-day trial	Varies by vendor	Varies by vendor	Varies by vendor	Varies by vendor
Bulk Send	Yes	Yes	Yes	Yes	No
Audit Trail	Yes	Yes	Yes	Yes	Yes
HIPAA Compliant	Yes	Yes	Yes	No	No

Two Practical Examples of Typical Requests

Real-world examples show how authorizations speed care continuity, support legal requests, and protect patient privacy when correctly completed.

Hospital Release

A regional hospital responded to a patient’s authorization to release imaging and operative notes for a surgical second opinion, requiring identity verification and exact date ranges.

The hospital completed fulfillment in 12 business days.
The authorization specified imaging format and secure portal delivery, which reduced rework. The careful scope limited charges and avoided need for manual archival retrieval, improving patient satisfaction and maintaining compliance with HIPAA documentation requirements.

Legal Request

An attorney obtained an authorization to copy three years of outpatient notes for a personal injury case, including consent to share with opposing counsel.

Provider required notarized signature before release.
Because authority documentation was complete and notarized, the custodian released records without redaction delays; the detailed purpose statement helped narrow the search, reducing copying fees and preserving admissibility in court.

Frequently Asked Questions and Troubleshooting

Answers to common questions about completing, signing, and submitting an Authorization to Inspect and Copy Medical Records.

Need help? Contact support

Can authorizations be electronically signed?
Yes. Electronic signatures are legally enforceable under ESIGN (15 U.S.C. ch. 96) and UETA where adopted, provided intent, consent, attribution, and record retention are met. For consumer-facing healthcare forms, confirm any required consumer disclosure and provider acceptance policies.
Is notarization required?
Not usually. Most medical record authorizations do not require notarization under HIPAA; however, some states or custodians may require notarization or witness signatures for third-party executors or durable authorizations. Check state law or custodian policy before submitting.
What if the requester lacks valid ID?
Custodians are permitted to refuse release until identity is verified. Acceptable alternatives can include notarized statements, attestation by a healthcare proxy, or additional matching data points. Communicate with the custodian to confirm acceptable verification methods before resubmitting.
Can I limit scope to specific records?
Yes. Narrow scopes by specifying document types and date ranges. A focused request reduces review time, lowers copying fees, and minimizes disclosure of unrelated sensitive information. Providers may still redact third-party data under applicable privacy rules.
How long do authorizations remain valid?
Authorizations should state a clear expiration date or event. Absent a date, providers may apply institutional policy or state law limits; many custodians favor specific end dates to reduce indefinite access to PHI and to simplify recordkeeping obligations.
Can I revoke the authorization?
Yes. Revocation must generally be written, signed, and delivered to the custodian; it does not affect disclosures already made in reliance on a valid authorization. Keep proof of delivery; custodians may require processing time before stopping further releases.

Explore Templates

Petitioner Plaintiff State of Indiana Maryland Last Will and Testament Indiana Last Will and Testament Form Loan Agreement and Promissory Note Kansas Bill of Sale Texas Promissory Note

be ready to get more

Join over 28 million airSlate SignNow users

Sign Now