Patient Identity
Full legal name, date of birth, and a secondary identifier such as medical record or social security number to avoid misidentification.
A clear Healthcare Health Connections Document reduces ambiguity about who may access patient data, documents authorized sharing purposes, and establishes the legal basis for electronic exchange under ESIGN and applicable state law.
Typical users range from clinical staff to administrative teams and authorized patient representatives; each has distinct responsibilities when completing or relying on the document.
Understanding each role helps ensure correct fields are completed, appropriate authentication is used, and required consents are recorded for compliance and continuity of care.
Responsible for preparing the document, verifying patient identity, selecting permitted recipients, and ensuring retention policies are followed; must confirm any internal approvals before sending.
Signs to grant or deny authorization for specific data sharing; must confirm name, date of birth, and scope of permission, and understand how to revoke consent if required.
| Field | Configuration |
|---|---|
| Authentication Level | Email, SMS code, or knowledge-based verification |
| Required Fields | Signature, printed name, date, and scope selectors |
| Conditional Logic | Use conditional fields for optional consents |
| Retention Rule | Set automatic retention to HIPAA 6-year baseline |
Ensure your chosen platform supports secure authentication, HIPAA controls, and EHR or CRM integrations needed for your workflows.
Full legal name, date of birth, and a secondary identifier such as medical record or social security number to avoid misidentification.
Clear description of which records are shared and the purpose for disclosure, including date ranges and excluded items.
Name, organization, delivery address, and contact details for the party authorized to receive data.
Explicit statements authorizing disclosure, duration of consent, and how revocation can be executed in writing.
Signature, printed name, relationship to patient, and signature date; electronic signature must produce an audit trail.
Encryption in transit and at rest, access logs, and retention metadata to satisfy audit and compliance requirements.
Offer signed copies as PDF/A and editable DOCX to support archival and downstream editing when lawful.
Include signed PDF plus a separate auditable report showing timestamps, IP addresses, and signer authentication.
Attach copies of ID, authorization letters, and HIPAA authorizations as separate exhibits to the primary document.
Provide a clean, single-page printable layout for in-person signing and paper records.
Respond within 30 days (45 CFR §164.524).
Provide urgent records within hours to support care.
Complete signatures promptly; delays can invalidate time-limited authorizations.
Retention periods begin on date of creation or last effective date.
Process revocations upon receipt; document the receipt date.
Populate patient and recipient sections and define scope and duration.
Clinical or legal review for sensitive data or third-party requests.
Obtain signed consent with required authentication and record the timestamp.
Store executed copy and audit trail in secure records repository per retention policy.
| signNow | DocuSign | Adobe Sign | PandaDoc | HelloSign | |
|---|---|---|---|---|---|
| Starting Price | $8/user/mo | $15/user/mo | $14/user/mo | $19/user/mo | $15/user/mo |
| Free Trial | 7-day trial | Varies by plan | Varies by plan | Varies by plan | Varies by plan |
| Bulk Send | Yes | Yes | Yes | Yes | No |
| Audit Trail | Yes | Yes | Yes | Yes | Yes |
| HIPAA Compliant | Yes | Yes | Yes | No | No |
The clinic moved authorizations online to reduce in-person visits and errors in patient records.
Optica implemented digital consent forms to simplify partner onboarding and data sharing.