Identity Proofing
Capture government ID details and at least two matching identifiers to reduce misattribution when linking accounts to an EHR.
A clear Healthcare Patient Portal Addition creates an auditable record of consent and identity, reduces disputes over access, and supports HIPAA requirements for access control and accounting of disclosures. It also clarifies roles, effective dates, and revocation procedures to limit unnecessary exposure of protected health information.
The form is also used by registration teams and health information management staff to verify identity and attach appropriate access roles in the EHR or portal system.
Verify the portal and EHR integration methods, supported formats, and authentication workflows before onboarding users.
| Field | Configuration |
|---|---|
| Authentication | Email OTP | SMS fallback | SSO |
| Role Mapping | View-only | Full access | Proxy |
| Notification | Email confirmation and security alerts |
| Audit Logging | Timestamps, IP, user agent captured |
Capture government ID details and at least two matching identifiers to reduce misattribution when linking accounts to an EHR.
Include clear text that the patient consents to electronic access and understands which records will be viewable or shared.
Specify which record categories are included (notes, labs, billing) and whether messaging or appointment features are enabled.
Record the exact authority (parent, guardian, POA) and attach supporting documentation when required by policy.
Log signature timestamps, signer IP, authentication method, and a certificate of completion for the authorization event.
Describe the process and effective date for revoking access and any obligations for notifying affected parties.
Provide access within 30 days (45 CFR §164.524(b)(2)).
Verify identity promptly; typical SLA: same business day to three business days.
Notify patient immediately upon account provisioning or credential changes.
Process revocation within a short, documented timeframe (policy-driven).
Retention begins on creation or last effective date of the record.
Intake and initial eligibility check performed by registration staff.
Match ID and demographic attributes to the EHR record.
Consent and signature recorded with audit metadata.
Portal account linked and activation email dispatched to the patient.
A clinic digitized proxy enrollments to reduce intake time and improve patient convenience.
A multisite practice standardized portal additions across locations to ensure consistent identity matching.
The patient with capacity may sign to authorize access for themselves or to delegate a representative; signature indicates intent and consent under ESIGN (15 U.S.C. ch. 96).
A properly appointed guardian or agent under a power of attorney may sign for the patient; organizations should verify supporting documentation before granting proxy access.
| signNow | DocuSign | Adobe Sign | PandaDoc | HelloSign | |
|---|---|---|---|---|---|
| Starting Price | $8/user/mo | $15/user/mo | $14/user/mo | $19/user/mo | $15/user/mo |
| Free Trial | 7-day free trial | No | No | Yes, limited | Yes, limited |
| Bulk Send | Yes | Yes | Yes | Yes | Yes |
| Audit Trail | Yes | Yes | Yes | Yes | Yes |
| HIPAA Compliant | Yes | Yes | Yes | No | No |