Can this protocol be signed electronically?

Yes. Electronic signatures are generally enforceable under the federal ESIGN Act (15 U.S.C. ch. 96) and state UETA implementations, provided intent, consent, attribution, and record retention are documented.

Do healthcare records require a BAA with vendors?

Yes. If a vendor will create, receive, maintain, or transmit protected health information, a signed Business Associate Agreement is required under HIPAA to define permitted uses and safeguards.

When must I report cases to public health?

Reporting timing and thresholds vary by state and the reportable-condition list; many jurisdictions expect prompt or same-day reporting for confirmed cases—consult the local health department.

Is notarization needed for the protocol?

Not typically. Protocols and clinical policies usually do not require notarization, but specific administrative approvals or signatures might be notarized depending on institutional rules.

How long must I keep protocol records?

Follow HIPAA (6 years) for health records and IRS guidance (3 years) for tax-related records; industry and state rules can extend these periods, so adopt the longest applicable retention period.

Who can sign to approve the protocol?

An authorized official such as the Infection Control Officer, Chief Medical Officer, or Facility Administrator should sign; record their title, printed name, and signature date to establish authority.

Electronic Signature
Templates
Healthcare
Healthcare COVID Protocol

Healthcare COVID Protocol

This template is fully customizable. Edit the text, fill out the fields, and send it for signature. Give it a try!

HEALTHCARE COVID PROTOCOL

Patient Information

Patient Name

Date of Birth

Gender

Address

Phone

Emergency Contact (Name / Phone)

Insurance & Responsible Party

Insurance Provider

Policy / ID Number

Subscriber Name

Medical History

Current Medications Allergies Prior Surgeries / Chronic Conditions

COVID-19 Screening (Check all that apply)

The undersigned certifies the following current symptoms and exposures:

Fever or chills New or worsening cough Shortness of breath or difficulty breathing New loss of taste or smell Sore throat Other (describe below)

If Other, describe

Vaccination & Testing

Vaccination status (check applicable):

Fully vaccinated (primary series complete) Received booster dose Partially vaccinated Not vaccinated

Consent to testing: I consent to COVID-19 testing as required by facility screening protocols and acknowledge that a positive result may affect my care plan and visitation rights.

Consent to COVID Testing

I consent to COVID-19 testing I do not consent to testing (I understand care may be modified)

Infection Control, Masking & PPE

Facility protocols require masking, hand hygiene, and physical distancing consistent with current public health guidance. Patients and visitors must comply with requests for personal protective equipment and testing. Failure to comply may result in denial of entry or modification of services to protect others.

Agree to follow masking & PPE requirements

I agree to follow masking and PPE requirements I decline to comply (I understand care may be altered)

Visitor Policy & Isolation

Visitor access may be restricted based on symptoms, exposures, or positive test results. If isolation is required, the facility will provide instructions for care and return-to-care criteria, which may include symptom resolution and negative testing as applicable.

Acknowledgment of visitor and isolation policies

I have read and understand the visitor and isolation policies

Data Use, Reporting & Privacy

By signing this form I authorize the facility to collect, use, and disclose limited health information related to COVID-19 testing, results, and exposure for purposes of treatment, infection control, public health reporting, and compliance with applicable laws. Such disclosures may include reporting to public health authorities as required by law.

HIPAA Privacy Acknowledgment

I acknowledge receipt of the facility privacy notice regarding use and disclosure of my health information

Consent, Right to Withdraw, and Authorization

I understand that consenting to testing and compliance with this COVID protocol is voluntary. I may withdraw consent at any time by notifying the facility in writing; however, withdrawal may affect my ability to receive services or remain on-site. The facility may continue to use and disclose health information collected prior to withdrawal as permitted by law.

Authorization expiration date (if different from the date of signature):

Additional Notes / Special Instructions

Patient Certification

I, , certify that the information I have provided on this form is true and accurate to the best of my knowledge. I understand the facility's COVID-19 protocols and agree to comply with reasonable infection-control measures necessary for safe care delivery. I authorize the release of COVID-19 test results and related information to public health authorities and other health care providers as necessary for my treatment and for public health purposes.

Patient Printed Name:

Signature:

Date:

If signed by other than patient, Relationship to Patient:

Signer Printed Name (if not patient):

What the Healthcare COVID Protocol Is and When It Applies

A Healthcare COVID Protocol is an operational document that defines screening, testing, isolation, contact-tracing, reporting, and recordkeeping steps for healthcare facilities during COVID-19 exposures or outbreaks. It standardizes roles, decision thresholds, communication paths, PPE and testing requirements, and the documentation that supports regulatory reporting and patient confidentiality. The protocol is intended for routine use during community transmission, targeted outbreak response, or when public health authorities issue directives; it should be integrated with infection control policies and reviewed regularly to reflect current guidance and statute-driven reporting obligations.

Why a Formal COVID Protocol Matters for Healthcare Settings

A written protocol reduces ambiguity during an exposure, preserves legal and regulatory compliance, protects patients and staff, and documents the facility’s reasonable steps to control transmission. It also supports consistent decision-making across shifts and locations, evidences adherence to public-health reporting, and facilitates faster contact tracing and operational recovery after an incident.

Who Typically Prepares and Follows a Healthcare COVID Protocol

Use by these groups ensures alignment between clinical practice, workforce safety, and public health reporting.

Hospitals and acute-care clinical teams performing patient triage and isolation procedures.
Long-term care and assisted-living administrators overseeing resident screening and cohorting.
Occupational health teams and large employer medical units managing staff exposures.

Key People Involved and Their Responsibilities

Infection Control Officer

Leads protocol development, updates clinical thresholds, coordinates testing strategies, and serves as the primary contact for public health notifications and internal training programs.

Facility Administrator

Maintains documentation, assigns staff roles during incidents, ensures supplies and PPE availability, and oversees record retention and access controls for sensitive health information.

Security and Compliance Essentials for Protocol Records

Encryption in transit: TLS 1.2/1.3

Encryption at rest: AES-256

HIPAA compliance: BAA required

Audit trail: Timestamped events

Access controls: Role-based permissions

Retention controls: Policy-managed deletion

Top Risks If the Protocol Is Incorrect or Missing

HIPAA breach: Civil penalties, corrective action

OSHA citations: Workplace safety fines

Regulatory nonreporting: Public health enforcement

Patient harm: Clinical liability exposure

Operational disruption: Staffing shortages

Reputational damage: Community trust loss

Common Preparation and Execution Mistakes to Avoid

Using outdated case definitions or thresholds, which can delay necessary isolation and testing actions and confuse clinical staff during a surge.
Failing to secure patient consent language or a BAA when documenting health data electronically, creating regulatory exposure under HIPAA.
Not defining clear signatory authority for protocol activation, causing delays in implementing cohorting or reporting steps during an incident.
Relying on manual paper logs without consistent retention or backup, which complicates contact tracing and legal defensibility after the fact.

Step-by-Step: Completing a Healthcare COVID Protocol

Follow these steps to create or fill out the protocol document so it is operationally useful and legally defensible.

01

Assemble team: Identify infection control, admin, and legal reviewers.
02

Define triggers: Set case counts and exposure criteria that activate the protocol.
03

Outline steps: Document screening, testing, isolation, and communication tasks.
04

Authorize sign-off: Record who approves activation and changes to the protocol.

How the Protocol Operates in an Exposure Event

This sequence shows operational flow from detection to resolution during a suspected or confirmed COVID exposure.

Detect case: Identify symptomatic or test-positive person immediately.
Isolate and test: Apply appropriate isolation and arrange diagnostic testing.
Notify contacts: Perform contact identification and notify exposed individuals.
Report and document: Submit required public health reports and preserve records.

Core Components Every Professional Healthcare COVID Protocol Should Include

A compliant, practical protocol contains specific operational, legal, and recordkeeping elements so actions are consistent, auditable, and aligned with public-health obligations.

Screening Checklist

Standardized symptom and exposure questions for patients, visitors, and staff, including escalation rules for positive responses and temperature or symptom thresholds.

Testing Procedures

Specified diagnostic tests, timing for repeat testing, specimen handling, and who arranges and documents test results within the medical record.

Isolation Criteria

Clear isolation placement, PPE required for caring staff, duration rules, and criteria for safely discontinuing isolation based on clinical and testing data.

Contact Tracing

Defined roles, notification scripts, confidentiality protections, and timelines for notifying public health when legally required.

Reporting & Documentation

Templates for required reports, logs to retain, and the chain-of-custody for lab records and test results.

Training & Review

Scheduled staff training, drills, version-control records, and a review schedule to align protocol with changing guidance.

Configuring an Electronic Protocol Workflow

Map the online workflow so automated notifications, authentication, and storage match clinical and legal needs.

Field	Configuration
Authentication	Email + SMS code or stronger MFA
Conditional Logic	Show testing fields only if exposure flagged
Notifications	Auto-notify infection control on positive entry
Storage	Encrypted clinical record archive

Technical Considerations for eSubmission and Signing

Choose a platform that supports HIPAA controls, auditability, and integration with clinical workflows to preserve chain-of-record.

Integrations: Support for EHR and cloud storage
Document formats: PDF, DOCX, and exportable logs
Authentication: Support for MFA and access controls

Typical Timelines and Response Deadlines

Timelines below are operational best practices; local public-health rules can impose shorter statutory deadlines—verify with the relevant agency.

Immediate action:

Isolate suspected cases as soon as identified, ideally within minutes.

Testing window:

Obtain diagnostic testing within 24–72 hours of exposure or symptom onset.

Contact notification:

Notify close contacts within 24–48 hours when possible.

Public health reporting:

Report cases according to local rules; many jurisdictions expect same-day reporting.

Record preservation:

Retain logs and test records until retention policy period ends.

Key Milestones from Protocol Launch to Review

A sequential milestone view helps teams measure readiness, activation, and continuous improvement after an incident.

01

Protocol Approval

Formal sign-off by clinical and administrative leads authorizes active use.

02

Staff Training

Complete role-based training before activation; document attendance.

03

Activation Response

Deploy screening and isolation within defined trigger windows.

04

After-Action Review

Audit performance and revise the protocol within a set review period.

Representative eSignature Pricing and Feature Comparison

Compare common plan-level features and starting prices for eSignature vendors; signNow appears first in the header per platform comparison conventions.

	signNow	DocuSign	Adobe Sign	PandaDoc	HelloSign
Starting Price	$8/user/mo	$15/user/mo	$14/user/mo	$19/user/mo	$15/user/mo
Free Trial	7-day free trial	Varies	Varies	Varies	Varies
Bulk Send	Yes	Yes	Yes	Yes	No
Audit Trail	Yes	Yes	Yes	Yes	Yes
HIPAA Compliant	Yes	Yes	Yes	No	No

Frequently Asked Questions About the Healthcare COVID Protocol

Answers to common operational and legal questions about drafting, signing, and implementing a Healthcare COVID Protocol in the United States.

Need help? Contact support

Can this protocol be signed electronically?
Yes. Electronic signatures are generally enforceable under the federal ESIGN Act (15 U.S.C. ch. 96) and state UETA implementations, provided intent, consent, attribution, and record retention are documented.
Do healthcare records require a BAA with vendors?
Yes. If a vendor will create, receive, maintain, or transmit protected health information, a signed Business Associate Agreement is required under HIPAA to define permitted uses and safeguards.
When must I report cases to public health?
Reporting timing and thresholds vary by state and the reportable-condition list; many jurisdictions expect prompt or same-day reporting for confirmed cases—consult the local health department.
Is notarization needed for the protocol?
Not typically. Protocols and clinical policies usually do not require notarization, but specific administrative approvals or signatures might be notarized depending on institutional rules.
How long must I keep protocol records?
Follow HIPAA (6 years) for health records and IRS guidance (3 years) for tax-related records; industry and state rules can extend these periods, so adopt the longest applicable retention period.
Who can sign to approve the protocol?
An authorized official such as the Infection Control Officer, Chief Medical Officer, or Facility Administrator should sign; record their title, printed name, and signature date to establish authority.

be ready to get more

Join over 28 million airSlate SignNow users

Sign Now