Is an electronic CAN Form legally binding?

Yes, in interstate transactions electronic signatures meet the ESIGN Act's requirements when the four-part legal test is satisfied: intent, consent, attribution, and reproducible retention. See 15 U.S.C. §7001. For intrastate validation, confirm UETA or state ESRA rules.

Does HIPAA allow electronic authorization for PHI disclosure?

Yes, HIPAA permits electronic authorizations for protected health information if the authorization includes required elements and the covered entity protects confidentiality and access; retain records consistent with 45 CFR §164.530(j) and follow any state-specific privacy laws.

Are witnesses or notarization required?

Requirements vary by state and by the form's legal purpose. Some jurisdictions require witnesses or notary acknowledgement for durable or power-of-attorney style authorities. Verify local rules; where remote notarization is available follow state RON standards and retention rules.

How can I revoke a CAN Form?

Revoke in writing and deliver notice to the provider and any designated parties; effective date typically when received by provider. Maintain documentation of revocation delivery. Check state law for special revocation requirements for specific authorities like durable powers of attorney.

Can RON be used for this form?

Remote online notarization may be permitted where state law allows RON; states differ on identity-proofing, audio-video retention, and notary journal rules. Confirm state notary commission guidance and preserve recordings per applicable retention rules.

How should signed forms be stored?

Store executed forms in the electronic health record or secure document management with access controls, AES-256 encryption, and an audit trail. Retain copies according to HIPAA (45 CFR §164.530(j)) and facility retention policies; include exportable, tamper-evident records for legal defensibility.

Healthcare CAN Form

This template is fully customizable. Edit the text, fill out the fields, and send it for signature. Give it a try!

HEALTHCARE CAN FORM

This Consent, Authorization and Notification (CAN) Form documents patient identification, insurance and medical history information, authorizations for the use and disclosure of protected health information (PHI), and patient preferences for notifications. Completion and signature of this form constitutes a written authorization and informed consent to the extent specified below.

Patient Information

Patient Name:

Date of Birth: Gender:

Address: Primary Phone: Email (optional):

Emergency Contact

Contact Name: Relationship / Phone:

Insurance Information

Insurance Provider:

Policy Number: Group Number:

Subscriber Name (if different):

Medical History

Current Medications: Allergies / Reactions: Prior Surgeries / Hospitalizations: Chronic Conditions / Diagnoses:

Consent and Authorization

I hereby authorize the release and disclosure of my protected health information to the persons and entities identified in this form for the purposes of treatment, payment, and healthcare operations. Patient Name:

I authorize disclosure of PHI to the following recipients (enter names or organizations):

Purpose of disclosure (check all that apply):

Treatment Payment Healthcare Operations

I understand that this authorization may include disclosure of sensitive information including HIV/AIDS-related records, mental health records, substance use treatment records, and genetic testing information only if I have specifically initialed and authorized such release below:

HIV/AIDS-related records
Mental health records
Substance use treatment records
Genetic testing information

Procedure / Notification Preferences

Description of Procedure, Service or Information to be Disclosed:

Notification Preferences (select all that apply):

Phone call to primary phone
SMS / Text message
Email

Risks, Benefits and Right to Revoke

I acknowledge that the benefits, material risks, and reasonable alternatives to the proposed procedure, disclosure or service have been explained to me in language I understand. I have had the opportunity to ask questions and receive answers.

I understand that I may revoke this authorization at any time by delivering a written revocation to the health center's records manager, except to the extent that action has already been taken in reliance on this authorization. Revocation will not affect disclosures made in reliance on the authorization prior to receipt of the revocation.

Authorization Period and Expiration

This authorization is effective on the date signed and shall expire on:

If no date is specified, this authorization will expire one year from the date of signature unless otherwise limited by state law or the health center's policies.

Acknowledgment and Certification

By signing below, I certify that I am the patient or the patient's legal representative and that the information provided on this form is true and complete to the best of my knowledge. I authorize the release of my PHI as described above and understand the provisions of this authorization.

I understand that treatment, payment, enrollment in a health plan, or eligibility for benefits may not be conditioned on my signing this authorization except as permitted by law.

Signature indicates acceptance of the terms and grants the authorizations specified herein.

Printed Name:

Relationship (if guardian):

Signature:

Date:

What the Healthcare CAN Form Is

The Healthcare CAN Form (Care Authorization and Notification) is a standardized authorization used to document who may access a patient’s medical information, receive care notifications, or make specified decisions on the patient’s behalf. It typically records patient identity, the names and contact details of authorized persons or organizations, the precise scope of permitted actions, time limits or trigger events, HIPAA release language when health information is disclosed, and signature authentication. Proper completion produces a clear, auditable consent record that supports clinical decision-making and administrative processes.

Why a Clear CAN Form Matters

A Healthcare CAN Form clarifies access and decision authority, reduces administrative delays, creates an auditable consent record for compliance, and helps providers satisfy HIPAA privacy obligations while improving coordination with designated caregivers.

Common Users and Responsible Parties

Primary users include clinical staff, administrative teams, patient representatives, and caregivers involved in ongoing care coordination.

Hospitals and clinics — used at admission, care transitions, and inpatient record access.
Long-term care and assisted living — visitor access and representative communications.
Family caregivers and legal proxies — authorized to make non-emergency care arrangements.

Completed forms are retained in the patient record and shared only with authorized parties to support care, billing, and communication workflows.

Essential Components to Include

Core elements of a professional Healthcare CAN Form define identity, authority scope, duration, privacy permissions, decision limits, and signature authentication for legal clarity and clinical usability.

Patient Identity

Include full legal name, date of birth, medical record or patient ID, and primary contact details; accurate identity prevents misattribution and ensures authorization applies to the intended individual.

Authorized Party

List each person or organization granted access, include relationship to patient, phone/email, and scope (records, visits, decisions). Clear designation avoids disputes and limits unintended disclosure.

Scope

Define permitted actions explicitly: medical information release, appointment scheduling, medication decisions, or full decision-making authority. Use specific dates or event-based triggers to limit ambiguity and legal exposure.

Duration

State start and end dates or conditional termination events (e.g., hospitalization end, patient revocation). Time limits reduce open-ended authority and aid periodic review by clinical teams.

HIPAA Authorization

Include explicit HIPAA release language when authorizing disclosure of protected health information; ensure consumer disclosure requirements are met for electronic records per ESIGN where applicable.

Signature Block

Provide signer name, role, date, and witness or notary fields if required by state law; capture method of signature (wet, electronic, RON) and keep an audit trail.

Security and Compliance Checklist

Encryption: AES-256 at rest; TLS 1.2/1.3

Access Controls: Role-based permissions and SSO available

Audit Trail: Timestamps, IP addresses, and full action log

HIPAA BAA: Business Associate Agreement required

21 CFR Part 11: Supports 21 CFR Part 11 workflows

Retention Controls: Immutable copies and retention settings

Step-by-Step: Completing a Healthcare CAN Form

Follow these steps to prepare, complete, sign, and submit a Healthcare CAN Form to ensure valid authorization and recordkeeping.

01

Gather Documents: Collect ID, patient record number, and supporting medical records.
02

Complete Form: Fill patient and authorized-party sections accurately.
03

Sign & Authenticate: Sign, witness, or notarize per state requirements.
04

Submit & File: Provide copies to care team and retain original in record.

Typical Digital Submission Flow

Digital submission streamlines routing, authorizations, and storage while maintaining auditable records compatible with clinical systems and compliance requirements.

Upload Document: Provider uploads form to secure system.
Assign Signers: Add authorized parties and required witnesses.
Authenticate Signer: Use email, SMS, or stronger verification.
Archive & Audit: Store signed copy and certificate of completion.

Technical and Integration Considerations

Choose a platform that supports secure PDFs, audit trails, and appropriate signer authentication for healthcare privacy obligations.

File Formats: PDF, DOCX, and standard forms
Integrations: EHR, CRM, cloud storage supported
Authentication: Email, SMS, KBA, and SSO

Configuring an Electronic CAN Workflow

Configure a reusable eWorkflow for Healthcare CAN Forms to reduce repetition and ensure consistent consent capture across cases.

Field	Configuration
Template Use	Create reusable template with required fields
Authentication	Set signer verification level (email, SMS, KBA)
Conditional Fields	Show fields only when criteria are met
Retention Policy	Apply retention and export settings automatically

Timing and Review Expectations

Timelines depend on care context; complete the CAN Form before relevant treatment, and review periodically or when circumstances change.

Before Treatment:

Obtain authorization prior to non-emergency procedures or admissions.

Annual Review:

Reconfirm authority annually or upon significant condition change.

Immediate Revocation:

Revocation takes effect when received by provider.

Emergency Exceptions:

Emergency care may proceed without prior formal authorization.

Record Retention:

Keep signed form per HIPAA and facility policies.

Potential Penalties and Legal Risks

Invalid Consent: May be unenforceable.

HIPAA Violation: Potential civil fines, corrective actions.

Denied Coverage: Insurer may deny claims.

Delay in Care: Access restrictions can delay treatment.

Civil Liability: Wrongful decisions risk lawsuits.

Criminal Exposure: Intentional misuse triggers criminal penalties.

Common Preparation Errors to Avoid

Leaving scope ambiguous — broad or vague authorizations increase risk of improper disclosure and make clinical staff uncertain about permissible actions.
Using nicknames or initials — incomplete identity data leads to mismatches in medical records and prevents secure verification during access requests.
Failing to record expiration — open-ended authorizations may persist unintentionally and complicate future care or legal challenges.
Not capturing audit evidence — without timestamps, IP data, or RON records, proving the signature's authenticity becomes difficult in disputes.

Practical Examples from Real Organizations

Real-world examples show how completed CAN Forms reduce administrative friction and solidify patient directives across outpatient and specialty clinics.

Fertility Centers of Illinois

Fertility Centers of Illinois used a standardized authorization to streamline patient authorizations across multiple clinics and phone-based consents.

Reduced turnaround time for signature and verification.
According to the organization's leadership, simplifying the authorization process improved administrative responsiveness and allowed staff to focus on clinical tasks while maintaining compliant audit trails and narrower risk of miscommunication among providers and caregivers.

Optica Ventures LLC

Optica Ventures implemented an electronic authorization process to reduce paperwork and accelerate external customer approvals across investment workflows.

Improved customer response rates and reduced turnaround.
The COO noted the platform's ease of use both internally and for customers, emphasizing that fewer manual steps led to faster approvals, clearer audit records, and a reduced administrative burden on staff handling sensitive client data.

Frequently Asked Questions and Practical Answers

Answers to common questions about validity, HIPAA implications, electronic signing, revocation, notarization, and storage of Healthcare CAN Forms.

Need help? Contact support

Is an electronic CAN Form legally binding?
Yes, in interstate transactions electronic signatures meet the ESIGN Act's requirements when the four-part legal test is satisfied: intent, consent, attribution, and reproducible retention. See 15 U.S.C. §7001. For intrastate validation, confirm UETA or state ESRA rules.
Does HIPAA allow electronic authorization for PHI disclosure?
Yes, HIPAA permits electronic authorizations for protected health information if the authorization includes required elements and the covered entity protects confidentiality and access; retain records consistent with 45 CFR §164.530(j) and follow any state-specific privacy laws.
Are witnesses or notarization required?
Requirements vary by state and by the form's legal purpose. Some jurisdictions require witnesses or notary acknowledgement for durable or power-of-attorney style authorities. Verify local rules; where remote notarization is available follow state RON standards and retention rules.
How can I revoke a CAN Form?
Revoke in writing and deliver notice to the provider and any designated parties; effective date typically when received by provider. Maintain documentation of revocation delivery. Check state law for special revocation requirements for specific authorities like durable powers of attorney.
Can RON be used for this form?
Remote online notarization may be permitted where state law allows RON; states differ on identity-proofing, audio-video retention, and notary journal rules. Confirm state notary commission guidance and preserve recordings per applicable retention rules.
How should signed forms be stored?
Store executed forms in the electronic health record or secure document management with access controls, AES-256 encryption, and an audit trail. Retain copies according to HIPAA (45 CFR §164.530(j)) and facility retention policies; include exportable, tamper-evident records for legal defensibility.

be ready to get more

Join over 28 million airSlate SignNow users

Sign Now