Patient Identity
Full legal name, date of birth, and a unique patient identifier (MRN or other) to avoid misfiling and to match records across systems.
A properly completed Healthcare Information Referral ensures timely access to relevant clinical records, reduces duplicate testing, and documents patient consent for disclosure. It supports lawful information exchange under HIPAA when the authorization is specific and retained in the record.
Organizations and individuals who commonly prepare or receive referrals vary by role and purpose.
Each party must confirm authority to release or receive protected health information and document consent when required.
A licensed clinician or authorized staff member prepares and certifies the referral content, confirms medical necessity for the transfer, and documents the patient’s consent or authorization in the medical record. This party is responsible for accuracy of clinical details and the scope of records released.
The clinic, hospital, or health information department designated to receive records must confirm identity, accept the specified scope, and attach the referral to the patient’s chart. Receiving entities are responsible for secure handling and retention consistent with HIPAA.
Full legal name, date of birth, and a unique patient identifier (MRN or other) to avoid misfiling and to match records across systems.
Name, role, facility, and contact details of the referring provider or office so the receiver can obtain clarifications or additional documentation.
Name, address, fax or secure transfer endpoint, and contact person at the receiving organization to direct delivered records correctly.
Clear description of what to send (e.g., discharge summary, imaging studies, lab results) and inclusive or exclusive date ranges to limit unnecessary disclosures.
Reason for the transfer (treatment, second opinion, insurance) and whether immediate action is required for scheduling or care planning.
Patient signature or documented consent, effective and expiration dates, and any restrictions on redisclosure to comply with HIPAA and state law.
| Field | Configuration |
|---|---|
| Authentication | Email plus SMS code for signer verification |
| Document Format | PDF or PDF/A preferred for consistent rendering |
| Retention | Retain signed copy minimum six years |
| Notifications | Automatic read receipts and completion notice |
Choose tools and endpoints that support secure transport, file compatibility, and identity verification appropriate to clinical and legal needs.
Confirm the chosen platform supports audit trails and retention policies aligned to HIPAA and organizational records-management practices.
30 days to provide access or copies (HIPAA rights; see 45 CFR §164.524).
7–14 days recommended for non-urgent transfers to avoid care delays.
Immediate or same-day for emergencies; document reason for expedited handling.
48–72 hours target for requested records for scheduled procedures.
Keep records per HIPAA minimums (6 years) and applicable state law.
| signNow | DocuSign | Adobe Sign | PandaDoc | HelloSign | |
|---|---|---|---|---|---|
| Starting Price | $8/user/mo | $15/user/mo | $14/user/mo | $19/user/mo | $15/user/mo |
| Free Trial | 7-day free trial, no card | Varies | Varies | Varies | Varies |
| Bulk Send | Yes (Premium+) | Yes | Yes | Yes | No |
| Audit Trail | Yes | Yes | Yes | Yes | Yes |
| HIPAA Compliant | Yes | Yes | Yes | No | No |
| Envelope Cap | No cap | 100 envelopes/user/year | Varies | Varies | Varies |
A discharged patient needs cardiology follow-up within two weeks
Primary care orders imaging at an external center for diagnosis