Can the plan be electronically signed?

Yes. Electronic signatures are valid under the ESIGN Act (15 U.S.C. ch. 96) and UETA in most states, provided intent, consent, attribution, and retention requirements are met.

Is a BAA required for eSignature vendors?

Yes. If the plan contains or accesses protected health information, execute a Business Associate Agreement with the vendor to meet HIPAA requirements.

When is notarization required?

Most operational plans do not require notarization, but certain delegations or legal declarations may; verify state law and attach notarized affidavits when required.

How long should we retain incident records?

Follow federal minima (IRS 3 years, IRC §6501(a)) and HIPAA 6 years (45 CFR §164.530(j)); extend retention for industry-specific or state requirements.

Can remote notarization be used?

Many states permit Remote Online Notarization with identity proofing and recorded sessions; confirm the state's RON status and retention requirements before relying on it.

What common mistakes delay activation?

Failing to update contacts, lacking alternate signers, and not testing communications or authentication mechanisms are frequent causes of activation delays.

Electronic Signature
Templates
Healthcare
Healthcare Crisis Plan

Healthcare Crisis Plan

This template is fully customizable. Edit the text, fill out the fields, and send it for signature. Give it a try!

HEALTHCARE CRISIS PLAN

This Healthcare Crisis Plan documents the patient’s preferences, known triggers, early warning signs, and directives to health care providers and support persons during behavioral health or medical crises. Completion of this plan authorizes listed providers and designated persons to receive clinical information necessary to implement interventions consistent with the plan for crisis prevention and response. The patient may revoke or amend this plan at any time in writing; withdrawal does not affect actions taken in good faith prior to receipt of the revocation.

Patient Information

Patient Full Legal Name Date of Birth Gender Address Primary Phone

Emergency Contact(s)

Primary Emergency Contact Name Primary Emergency Contact Phone Relationship to Patient

Insurance Information

Insurance Provider Policy Number Group Number Subscriber Name

Medical History & Current Status

Current Medications (include dosage and frequency) Allergies Prior Surgeries / Hospitalizations (relevant) Chronic Conditions / Diagnoses

Crisis Triggers and Early Warning Signs

Describe situations, events, or symptoms that commonly precede a crisis and objective signs that staff or support persons should monitor.

Early warning signs (check all that apply)

Suicidal ideation or statements of hopelessness Non-suicidal self-injury Psychotic symptoms (hallucinations, delusions) Severe substance withdrawal or intoxication Agitation or threats of violence Marked change in sleep or appetite Other

Preferred Interventions & De-escalation

List strategies, supports, persons, and clinical actions that have been helpful in preventing or resolving crises.

Actions to Avoid

Crisis Response Logistics

Preferred Facility for Evaluation / Admission Preferred Pharmacy Medications to Continue (if clinically appropriate) Medications to Withhold (if clinically indicated)

Legal Directives & Representatives

Advance Directive / Psychiatric Advance Directive Present?

Yes No

If yes, location of document and summary Durable Power of Attorney for Health Care / Representative

Authorization to Share Information

I authorize treating clinicians and authorized staff to disclose the information contained in this Crisis Plan and relevant medical records to the persons and agencies named below for the purpose of crisis prevention, evaluation, and treatment. Records disclosed under this authorization may include mental health, substance use, and medical treatment information. This authorization is voluntary and may be revoked in writing at any time except to the extent action has been taken in reliance upon it.

I authorize disclosure to the following persons / agencies Authorization expiration date

Consent for Emergency Treatment

In the event of a behavioral health or medical crisis, I authorize care providers to initiate necessary emergency interventions consistent with standard clinical practice and with the preferences documented in this plan. I understand that emergency interventions may include evaluation, medication administration, transport to an appropriate facility, and temporary detention if required by law to prevent imminent harm. This consent does not obligate providers to follow preferences that would place the patient or others at substantial risk or that are inconsistent with applicable law.

Additional instructions regarding emergency treatment

Privacy Notice and Acknowledgment

I acknowledge that I have received an explanation of how my protected health information will be used and disclosed in accordance with applicable privacy laws. I understand my rights to request restrictions and to revoke this authorization in writing, and that revocation will not affect disclosures made in reliance on this authorization prior to receipt of the revocation. I understand that copies of this document have the same force and effect as the original.

Do you authorize release of this plan to emergency responders (EMS, police), if needed?

Yes No

Signatures and Certification

By signing below, I certify that the information provided in this Crisis Plan is accurate to the best of my knowledge, that I have had the opportunity to discuss the plan with my health care team, and that I authorize the release and use of the information contained herein for the purposes described. I understand I may revoke or amend this plan at any time in writing.

Patient Name:

Signature:

Date:

If signed by legal guardian or representative, relationship to patient

What the Healthcare Crisis Plan Is and Who It Serves

A Healthcare Crisis Plan is a written, actionable protocol that organizes clinical, administrative, communications, and legal steps when a public-health or facility-level emergency occurs. It typically covers incident command structure, patient triage and continuity of care, data privacy procedures, interagency coordination, and resource allocation. The plan aligns operational actions with regulatory obligations (for example HIPAA record protections), documents decision authority and contact lists, and provides reproducible checklists so staff can execute consistent responses during high-stress events.

Why a Formal Healthcare Crisis Plan Matters

A formal plan reduces uncertainty, preserves patient safety, and documents compliance steps required during emergencies. It clarifies roles, protects sensitive data, and creates a record that supports regulatory review and reimbursement decisions.

Organizations and Roles That Benefit Most

Healthcare providers, clinics, hospitals, long-term care facilities, and public-health agencies typically maintain crisis plans.

Clinical leadership and frontline staff — Use the plan for triage, cohorting, and clinical resource allocation during surges.
Compliance, privacy, and legal teams — Coordinate HIPAA-safe disclosures and documentation under emergency rules.
Operations and facilities management — Trigger building-level actions (evacuation, surge spaces, supply chain) using the plan.

The plan also supports payers, suppliers, and affiliated community partners who need clear procedures for continuity and coordination.

Core Sections Every Professional Healthcare Crisis Plan Should Include

A complete plan groups operational tasks, legal guidance, communications, and records management so teams can act quickly and document decisions.

Incident Command

Define command structure, decision authorities, alternates, and contact lists so leadership handoffs are clear during multi-day incidents.

Clinical Triage

Triage criteria, surge thresholds, cohorting rules, and protocols for resource allocation (ventilators, ICU beds, medications).

Communications

Templates for internal alerts, patient-family notifications, and public statements; designate spokespersons and approval workflow.

Data & Privacy

Procedures for protected health information handling, emergency disclosures, and HIPAA-limited authorizations; include BAA lists.

Supply Chain

Inventory thresholds, alternate suppliers, reuse policies (if any), and conservation measures with responsible managers named.

Legal & Documentation

Record-keeping standards, incident logs, after-action review checklist, and citations for applicable laws and reporting obligations.

Required Legal and Security Elements to Include

Encryption: TLS 1.2/1.3 in transit

Data at Rest: AES-256 encryption

Audit Trail: Tamper-evident logs

HIPAA: BAA required

ESIGN / UETA: Electronic signature validity

Certifications: SOC 2 Type II, ISO 27001

Step-by-Step: Activate and Use the Healthcare Crisis Plan

Follow these sequential steps to activate the plan, deploy resources, and document actions for compliance and review.

01

Detect: Confirm incident and severity using defined indicators
02

Activate: Declare incident and notify command and staff
03

Operate: Implement triage, cohorting, and resource protocols
04

Record: Maintain timestamped logs and decisions

How to Configure an Online Crisis Plan Workflow

Mapping digital workflow fields to organizational roles reduces friction and ensures required approvals are captured automatically.

Field	Configuration
Activation Toggle	Auto-notify Incident Commander and admin team
Signature Fields	Require signer name, title, date for orders
Distribution List	Auto-send to compliance, legal, and supply teams
Audit Settings	Capture IP, timestamp, and completion certificate

Options for Digital Completion and Secure Sharing

Choose platforms that support audit trails, HIPAA BAAs, and flexible signer authentication for emergency use.

Document Formats: PDF, DOCX, Excel support
Integrations: Salesforce, NetSuite, Microsoft 365
Authentication: Email/SMS, KBA, SSO

Ensure any chosen vendor can provide a BAA, uses AES-256/TLS, and preserves a complete audit trail for post-incident review.

Where to Send Completed Crisis Plan Documents

Routing completed records to the right recipients ensures timely action and compliance with reporting and retention obligations.

Internal Archive: Store signed plan in secure document management
Compliance Office: Send completed plan for regulatory review
Partner Agencies: Share redacted copies with public-health partners
Legal Counsel: Provide signed records for legal advisory

Typical Timelines and Deadlines to Observe

Some elements of the plan and incident records have statutory or operational deadlines; track these to remain compliant and to support after-action reporting.

Plan Review Cycle:

Annual review recommended; update after major incidents

Immediate Reporting:

Report certain public-health events to authorities within 24 hours

Retention Start:

Retention begins on creation or last effective date

HIPAA Access Requests:

Respond within 30–60 days per HIPAA guidance

After-Action Report:

Complete and store within 90 days post-incident

Authentication, Notarization, and Witness Steps for Critical Orders

Certain emergency directives or delegated orders may require additional authentication, witness, or notarization depending on state law and document type.

01

Determine Requirement

Identify whether order needs witness or notarization

02

Select Method

Choose in-person or remote online notarization

03

Verify Identity

Use multi-factor or credential-proofing

04

Record Session

Retain audio-video if RON is used

05

Attach Certificate

Include notary or witness affidavits with record

06

Store Securely

Preserve tamper-evident signed copy

07

Notify Stakeholders

Distribute authenticated record to relevant parties

08

Audit Trail

Ensure timestamps and signer metadata captured

eSignature Pricing Comparison for Healthcare Crisis Documents

Compare common vendor pricing and core capabilities relevant to healthcare plans; signNow is listed first per comparison conventions.

	signNow	DocuSign	Adobe Sign	PandaDoc	HelloSign
Starting Price	$8/user/mo	$15/user/mo	$14/user/mo	$19/user/mo	$15/user/mo
Free Trial	7-day free trial	Varies by plan	Varies by plan	Varies by plan	Varies by plan
Bulk Send	Yes	Yes	Yes	Yes	No
Audit Trail	Yes	Yes	Yes	Yes	Yes
HIPAA Compliant	Yes	Yes	Yes	No	No

Real-World Examples of Crisis Plans and eSignature Use

These examples show how organizations used digital workflows and documented processes to manage urgent operational needs.

Fertility Centers of Illinois

The center adopted an electronic signature workflow to manage patient consents during remote operations

This reduced in-person contact and improved form turnaround
After implementation, incident documentation and patient authorizations could be completed remotely with preserved audit trails and a consistent chain of custody for records.

Xerox (NetSuite Operations)

Xerox integrated eSignature into enterprise workflows for approvals and vendor agreements

Integration enabled faster routing and fewer manual steps
The result was improved coordination between procurement, legal, and operations during peak demand periods while maintaining compliance controls.

Common Pitfalls to Avoid When Preparing a Crisis Plan

Vague authority lines — unclear delegation delays critical decisions during incidents.
Incomplete contact lists — outdated phone/email info blocks rapid notifications and responder coordination.
Poorly documented data access — failing to define PHI access raises HIPAA compliance risk.
No version control — multiple plan versions cause inconsistent execution and legal ambiguity.

Key Risks and Regulatory Consequences

HIPAA Violations: Civil and criminal penalties

Operational Harm: Patient safety incidents

Contract Exposure: Breach of supplier agreements

Regulatory Fines: Agency enforcement action

Reputational Loss: Public trust erosion

Legal Liability: Potential litigation costs

Who Can Sign and Authorize Crisis Documents

Chief Medical Officer

Typically signs clinical orders, triage protocols, and medical directives; should be explicitly named with backup designee and documented authority for emergency decisions.

Facility Administrator

Signs operational declarations, resource requests, and facility-level agreements; include title, delegation limits, and contact details in the plan.

Frequently Asked Questions About the Healthcare Crisis Plan

Answers to frequent practical and legal questions about creating, signing, and maintaining a crisis plan in a U.S. healthcare setting.

Need help? Contact support

Can the plan be electronically signed?
Yes. Electronic signatures are valid under the ESIGN Act (15 U.S.C. ch. 96) and UETA in most states, provided intent, consent, attribution, and retention requirements are met.
Is a BAA required for eSignature vendors?
Yes. If the plan contains or accesses protected health information, execute a Business Associate Agreement with the vendor to meet HIPAA requirements.
When is notarization required?
Most operational plans do not require notarization, but certain delegations or legal declarations may; verify state law and attach notarized affidavits when required.
How long should we retain incident records?
Follow federal minima (IRS 3 years, IRC §6501(a)) and HIPAA 6 years (45 CFR §164.530(j)); extend retention for industry-specific or state requirements.
Can remote notarization be used?
Many states permit Remote Online Notarization with identity proofing and recorded sessions; confirm the state's RON status and retention requirements before relying on it.
What common mistakes delay activation?
Failing to update contacts, lacking alternate signers, and not testing communications or authentication mechanisms are frequent causes of activation delays.

be ready to get more

Join over 28 million airSlate SignNow users

Sign Now