Header
Facility name, department, and unique form ID to ensure traceability across electronic health records and administrative systems, and to prevent duplicate processing.
Using a consistent Healthcare DASS & IESR Form reduces ambiguity, creates a clear audit trail, and helps meet privacy and recordkeeping obligations while clarifying responsibilities across clinical, administrative, and compliance teams.
Common users span clinical staff, privacy officers, administrative teams, and patients or authorized representatives.
Role clarity improves response times and reduces the risk of incomplete requests or improper disclosures.
Facility name, department, and unique form ID to ensure traceability across electronic health records and administrative systems, and to prevent duplicate processing.
Patient full legal name, date of birth, medical record number, and contact information so staff can unambiguously identify the affected record and verify identity.
Concise facts: what is requested or what occurred, dates/times, people involved, and the specific data elements or systems affected to guide triage and escalation.
Describe the reason for access, disclosure, or investigation, including intended recipients and time-limited scope to limit unnecessary exposure of PHI.
Explicit consent language or legal basis for action, including start/end dates for authorization and any special restrictions on onward sharing.
Signer name, role, signature (electronic or handwritten), date/time, and an audit trail entry recording who handled the form and any system-generated verification details.
| Field | Configuration |
|---|---|
| Authentication | Email link or SMS code; stronger options for privileged access. |
| Conditional Fields | Show incident follow-up fields only when 'Incident report' is selected. |
| Audit Trail | Enable automatic timestamps, IP logging, and signer attribution for each submission. |
| Document Storage | Save PDF to the secure EHR or document repository with role-based access controls. |
Choose a platform that supports secure upload, audit trails, and common integrations used by healthcare systems.
Confirm the platform supports a Business Associate Agreement for HIPAA workflows, secure APIs for EHR connection, and role-based access to stored records.
Provide access or respond within 30 days of request submission.
Notify individuals and HHS when required, typically within 60 days of discovery.
Complete initial triage and escalation within 72 hours for clinical safety events.
Retention periods run from creation or last effective date of the record.
Maintain accessible records for at least the federally required period for healthcare documents.
Form is logged and assigned an ID and handler.
Verify identity, completeness, and required attachments.
Privacy or clinical lead approves, denies, or requests more information.
Save final PDF with audit trail and retention metadata.
| signNow | DocuSign | Adobe Sign | PandaDoc | HelloSign | |
|---|---|---|---|---|---|
| Starting Price | $8/user/mo | $15/user/mo | $14/user/mo | $19/user/mo | $15/user/mo |
| Free Trial | 7-day free trial | Varies by vendor | Varies by vendor | Limited trial | Limited trial |
| Bulk Send | Yes | Yes | Yes | Yes | No |
| Audit Trail | Yes | Yes | Yes | Yes | Yes |
| HIPAA Compliant | Yes | Yes | Yes | No | No |
| Envelope Cap | No cap | 100 envelopes/user/year | Varies by plan | Varies by plan | Varies by plan |