Patient identity
Full legal name, date of birth, and an identifier such as MRN or SSN where appropriate.
A precise, compliant release reduces delays in care coordination, avoids unnecessary denials of records requests, and helps covered entities meet HIPAA requirements when disclosing protected health information. Properly executed authorizations protect patient privacy while giving providers the legal documentation needed to act.
Full legal name, date of birth, and an identifier such as MRN or SSN where appropriate.
Name and contact of the person or organization authorized to receive the information.
Specific types or date ranges of records to be disclosed; avoid overly broad language.
Clear, stated reason for sharing (e.g., continuity of care, legal review, insurance).
Start and expiration dates or event-based end conditions (e.g., 'until revoked').
Signer name, relationship if not the patient, date, and witness/notary if required.
| Field | Configuration |
|---|---|
| Signature Type | Email link with optional SMS two-factor |
| Required Fields | Make patient ID, DOB, records scope mandatory |
| Conditional Logic | Show proxy fields if signer is not the patient |
| Retention Setting | Export signed PDF/A and retain audit trail |
Ensure your eSignature platform supports required authentication, secure transport, and retention of an audit trail.
| signNow | DocuSign | Adobe Sign | PandaDoc | HelloSign | |
|---|---|---|---|---|---|
| Starting Price | $8/user/mo | $15/user/mo | $14/user/mo | $19/user/mo | $15/user/mo |
| Free Trial | 7-day free trial | Varies by vendor | Varies by vendor | Varies by vendor | Varies by vendor |
| Bulk Send | Yes | Yes | Yes | Yes | Yes |
| Audit Trail | Yes | Yes | Yes | Yes | Yes |
| HIPAA Compliant | Yes | Yes | Yes | No | No |
Providers commonly respond within 30 days of request
Patient should sign before records are released
Common default validity: 6–12 months unless specified
Revocations processed upon receipt and noted in records
Electronic transfers typically complete within 1–5 business days
| Criteria | Healthcare EI Release Form | Standard HIPAA Authorization |
|---|---|---|
| Scope | targeted ehi only | broad phi categories |
| Notarization | optional | optional |
| Purpose specificity | usually required | often required |
| Typical validity | user-specified | often 12 months |
A discharged patient needs imaging sent to a specialist
A patient authorizes claims history for an appeal
The form is used by various stakeholders who need documented permission to access or transfer medical information.
Responsibilities differ: providers must verify identity and document the release; recipients must use records only for the authorized purpose.
The patient signs when they have capacity; the signature documents consent to disclose specified health records and indicates the intended recipient and purpose.
A guardian, healthcare proxy, or person with durable power may sign; include proof of authority and relationship to the patient for the record.