Can this addendum be signed electronically?

Yes in most cases: electronic signatures meet legal validity under the ESIGN Act (15 U.S.C. ch.96) and UETA where adopted. Ensure consent and retention requirements are met; some documents (e.g., certain court filings or wills) remain exceptions to e-signature acceptance.

What HIPAA safeguards are needed when faxing PHI?

Use minimum necessary principles, cover sheets, and secure fax or encrypted transmission when available. Execute a Business Associate Agreement for vendors handling PHI, maintain audit logs, and follow HIPAA privacy and security rules including retention obligations per 45 CFR §164.530(j).

Do I need a notarization or witnesses?

Notarization or witness requirements depend on state law and the type of authorization. Most fax addenda do not require notarization, but some states or specific authorizations may require witnesses or notarization. Verify with state statutes or legal counsel.

How long must I keep executed addenda?

Retain addenda according to applicable rules: HIPAA requires six years from creation or last effective date (45 CFR §164.530(j)). Financial or tax-related records may require three years (IRC §6501(a)). State laws can extend retention periods; consult counsel.

What if a fax fails or is misdirected?

Stop transmission, attempt secure retransmission if appropriate, and notify the recipient and internal privacy officer. Assess whether the incident constitutes a breach under HIPAA and follow breach-notification procedures, including patient notices and regulatory reporting when required.

Can I use e-sign platforms for the addendum?

Yes. Electronic platforms that comply with ESIGN (15 U.S.C. ch.96) and UETA, and that offer HIPAA safeguards and a BAA, are appropriate. Look for TLS 1.2/1.3 in transit, AES-256 at rest, and complete audit trails.

Electronic Signature
Templates
Healthcare
Healthcare Fax Addendum

Healthcare Fax Addendum

This template is fully customizable. Edit the text, fill out the fields, and send it for signature. Give it a try!

HEALTHCARE FAX ADDENDUM

Patient Information

Patient Name

Date of Birth

Gender

Phone

Address Emergency Contact

Insurance Information

Primary Insurance Provider

Policy Number

Group Number

Subscriber Name

Medical History (Optional)

Current Medications Allergies

Fax Authorization

By completing this Healthcare Fax Addendum, Patient Name: authorizes the release and transmission of Protected Health Information (PHI) via fax to the authorized numbers listed below. This authorization applies to communications between the Patient and the following authorized recipient(s) for coordination of care, billing, scheduling, and other treatment-related activities.

Authorized Fax Number(s)

Authorized Recipient Name/Department:

Scope of Authorization and Limitations

This authorization permits the disclosure of PHI to and from the authorized fax numbers for purposes related to treatment, payment, and healthcare operations. The disclosure may include but is not limited to medical records, test results, appointment schedules, billing statements, and referral information. The provider will limit PHI disclosed to the minimum necessary to accomplish the purpose of the fax transmission.

I understand that fax transmission may present risks to confidentiality, including misdirected transmissions or interception. The organization will employ reasonable precautions to reduce these risks, but cannot guarantee complete confidentiality during fax transmission.

Consent and Revocation

I voluntarily authorize fax communications as described above. I may revoke this authorization at any time by providing a written revocation to the health care provider, except to the extent that action has already been taken in reliance on this authorization. Revocation will not affect disclosures made prior to receipt of revocation.

Authorization Expiration Date

Acknowledgments

By signing below, I acknowledge that I have read and understand this Healthcare Fax Addendum, that I have had the opportunity to ask questions and receive answers, and that I authorize the use and disclosure of my PHI via fax as described herein.

Select applicable authorization type(s) Authorize provider to send PHI via fax to authorized numbers Authorize provider to receive PHI via fax from authorized numbers I acknowledge receipt of the Notice of Privacy Practices and understand my rights regarding PHI

Additional Instructions / Notes

Patient Printed Name:

Relationship to Patient (if not patient):

Date of Birth (for verification):

Signature:

Date:

Relationship Authority/Guardian Printed Name:

What the Healthcare Fax Addendum Is

The Healthcare Fax Addendum is a short, standardized attachment used to authorize or clarify the transmission of protected health information (PHI) by fax between covered entities, business associates, and third parties. It documents permitted fax recipients, specific pages or categories of records to be sent, and any special handling or confidentiality instructions. The addendum also records patient consent or provider authorization for faxing, aligns the transmission with HIPAA privacy and security obligations, and serves as an evidentiary record of agreed fax practices in audit or compliance reviews.

Why a Fax Addendum Helps Protect PHI

Used by providers and their partners to document consent and safeguard PHI, the Healthcare Fax Addendum reduces ambiguity about recipient scope, content limits, and handling procedures. It supports HIPAA compliance and creates a clear record for audits, breach assessments, and liability allocation.

Who Typically Completes This Addendum

Typical signers include clinical staff, health information management, compliance officers, and business associate representatives responsible for PHI exchanges.

Hospitals and clinics — HIM or compliance teams completing authorization for patient record transfers.
Physician groups and labs — authorize diagnostic reports to external providers or payers.
Business associates and vendors — define permitted fax routines and security obligations.

Use the addendum whenever faxing PHI outside routine internal workflows or when additional confidentiality terms are needed.

Stepwise Process to Complete and Use the Addendum

Follow these steps to complete, authorize, and transmit a Healthcare Fax Addendum while maintaining HIPAA alignment and a clear audit trail.

01

Prepare Document: Identify PHI scope and recipient details.
02

Complete Fields: Enter full names, dates, fax numbers, and scope.
03

Obtain Signature: Signer dates and signs; capture authentication if electronic.
04

Retain Record: Store executed addendum per HIPAA and organizational policy.

Key Elements Every Professional Addendum Should Include

Core elements of a professional Healthcare Fax Addendum ensure recipient identification, content scope, transmission controls, retention directions, liability allocation, and signatures for authorization.

Recipient Details

List the recipient organization name, fax number, department or individual, and role. Specify alternate authorized recipients and any restrictions on forwarding or redisclosure of PHI.

Content Scope

Define exactly which documents, date ranges, or record types may be transmitted (e.g., lab reports, imaging, progress notes). Avoid vague terms like 'all records' without qualifiers.

Transmission Controls

Specify permitted transmission hours, cover sheet requirements, use of secure fax lines or encryption, and procedures for failed transmissions or confirmation receipts, including who must be notified on failure.

Retention

Indicate whether sender or recipient retains the transmitted copy, retention period, and disposal methods. Note HIPAA retention implications and recordkeeping responsibilities for audits, including references to organizational policy.

Liability & Responsibility

Clarify who is responsible for accuracy, redaction of irrelevant data, patient consent verification, and costs associated with secure transmission or repeat sends and breach notification duties.

Signatures & Dates

Provide signature lines for authorized signers, printed name and title, date executed, and a statement confirming applicable consents and acknowledgements under HIPAA and organizational policy.

Required Identification and Security Information

Patient Name: Full legal name as on ID

Date of Birth: Use MM/DD/YYYY format to match medical records

Recipient Fax Number: Include country code if applicable

Record Types: List specific documents or date ranges

Authorization Statement: Patient or provider consent statement

Signature and Date: Wet or electronic signature plus date

Configuring an Online Workflow for the Addendum

Configure online workflows to place fields, route signers, and manage delivery confirmations for Healthcare Fax Addendum transmissions.

Field	Configuration
Signature and Date Required Field	Require signature and date; set signer role
Recipient Contact and Fax Field	Validate fax number format and include department
Scope and Document Type Selector	Use checkboxes for document categories and custom date ranges
Delivery Confirmation and Audit Log	Enable email receipts and detailed audit trail storage

Typical Routing and Transmission Flow

Typical routing: sender uploads addendum, assigns fields, sends for signature, then confirms fax transmission and retains records for audits.

Upload: Attach addendum PDF and templates.
Assign Fields: Place recipient, scope, and signature fields.
Send to Signer: Use secure link or email invitation.
Confirm & Fax: Transmit via secure fax or RON gateway; log confirmation.

Platform and Technical Requirements to Support Secure Faxing

Ensure platforms support PDF, Word DOCX, secure delivery, audit trails, and HIPAA BAA where required.

File Formats: PDF, DOCX, or scanned images
Integrations: Works with EHRs and cloud storage
Authentication: Email, SMS OTP, or KBA options

Pricing and Capability Comparison for eSignature Vendors

Compare common eSignature pricing and capabilities relevant to Healthcare Fax Addendum workflows; signNow is listed first per comparison convention.

	signNow	DocuSign	Adobe Sign	PandaDoc	HelloSign
Starting Price	$8 per user per month billed annually under Business plan	$15 per user per month billed annually for entry-level plan	$14 per user per month billed annually for individual/business plans	$19 per user per month billed annually for standard plan	$15 per user per month billed annually for core plan
Free Trial	Seven-day free trial with no credit card required	Trial offerings vary by account and region; check vendor	Trial terms differ; enterprise trials available through sales	Free tier or trial options vary; limited features included	Limited free trial options; paid plans required for advanced features
Bulk Send	Yes — bulk send available on Business Premium plan	Yes — bulk send available on select plans	Yes — bulk send supported with enterprise or business plans	Yes — bulk send available for paid plans	No — bulk send not available on core plans
Audit Trail	Yes — full audit trail with timestamps and IP logs	Yes — comprehensive audit trail and certificate of completion	Yes — audit logs and signer authentication records stored	Yes — basic audit trail included in signed documents	Yes — includes signing history and verification metadata
HIPAA Compliant	Yes — HIPAA available with BAA and controls	Yes — enterprise HIPAA support with appropriate agreements	Yes — HIPAA support via enterprise offerings and agreements	No — HIPAA compliance not available by default	No — does not advertise HIPAA-ready offerings broadly
Envelope Cap	No envelope cap — unlimited envelopes under paid plans	Envelope cap 100 envelopes per user per year on some plans	Limits vary by plan; verify vendor documentation for caps	Caps depend on subscription tier; higher tiers increase send volumes	Limits vary; some plans include monthly sending caps

Common Mistakes to Avoid

Using vague language such as 'all records' without date range or type, which can cause over-disclosure and compliance risk.
Failing to verify recipient fax number or authorized individual leads to misdirected PHI and potential breach notifications.
Omitting a HIPAA-compliant BAA for vendors handling PHI or not documenting patient consent properly in writing.
Relying on unsecured standard fax lines without cover sheets, encryption, or verification of transmission success.

Penalties and Risks from Incorrect or Incomplete Addenda

HIPAA Penalties: Civil and criminal fines; OCR enforcement.

Breach Notification: Mandatory notices to patients and HHS.

State Sanctions: State consumer protection or health board actions.

Civil Liability: Potential lawsuits and indemnity claims.

Operational Disruption: Care delays and record reconciliation costs.

Loss of Trust: Patient confidence and reputational harm.

How Organizations Use a Healthcare Fax Addendum in Practice

Use cases illustrate how addenda reduce errors and support HIPAA workflows across healthcare organizations of various sizes.

Hospital Example

At a 350-bed hospital, HIM and compliance teams attach a Healthcare Fax Addendum to release forms to control recipient scope and auditing.

This reduced misdirected faxes and clarification calls.
The addendum standardized sender procedures, required cover sheets, and recorded consent, which simplified breach investigations and demonstrated reasonable safeguards during OCR compliance reviews and internal audits and reduced legal exposure and operational delays.

Clinic Network Example

A regional clinic network used a standardized addendum to enable labs and imaging centers to fax results reliably to primary care providers and specialists.

It reduced duplicate testing and administrative delays.
By documenting consent, recipient roles, and retention obligations, the network reduced manual follow-ups, improved patient care continuity, and provided a clear paper trail for auditors and risk officers during accreditation and regulatory reviews.

Frequently Asked Questions About the Healthcare Fax Addendum

Answers to frequent questions about completing, signing, and transmitting Healthcare Fax Addenda, including e-signature legality, retention, and HIPAA considerations.

Need help? Contact support

Can this addendum be signed electronically?
Yes in most cases: electronic signatures meet legal validity under the ESIGN Act (15 U.S.C. ch.96) and UETA where adopted. Ensure consent and retention requirements are met; some documents (e.g., certain court filings or wills) remain exceptions to e-signature acceptance.
What HIPAA safeguards are needed when faxing PHI?
Use minimum necessary principles, cover sheets, and secure fax or encrypted transmission when available. Execute a Business Associate Agreement for vendors handling PHI, maintain audit logs, and follow HIPAA privacy and security rules including retention obligations per 45 CFR §164.530(j).
Do I need a notarization or witnesses?
Notarization or witness requirements depend on state law and the type of authorization. Most fax addenda do not require notarization, but some states or specific authorizations may require witnesses or notarization. Verify with state statutes or legal counsel.
How long must I keep executed addenda?
Retain addenda according to applicable rules: HIPAA requires six years from creation or last effective date (45 CFR §164.530(j)). Financial or tax-related records may require three years (IRC §6501(a)). State laws can extend retention periods; consult counsel.
What if a fax fails or is misdirected?
Stop transmission, attempt secure retransmission if appropriate, and notify the recipient and internal privacy officer. Assess whether the incident constitutes a breach under HIPAA and follow breach-notification procedures, including patient notices and regulatory reporting when required.
Can I use e-sign platforms for the addendum?
Yes. Electronic platforms that comply with ESIGN (15 U.S.C. ch.96) and UETA, and that offer HIPAA safeguards and a BAA, are appropriate. Look for TLS 1.2/1.3 in transit, AES-256 at rest, and complete audit trails.

be ready to get more

Join over 28 million airSlate SignNow users

Sign Now