Patient identifiers
Full legal name, date of birth, medical record number, and contact information to reliably match the request to the correct chart and avoid misrouting.
A complete PMR Document records patient consent, clarifies scope of release, reduces processing delays, and creates an auditable trail for HIPAA compliance (45 CFR §164.524). Accurate PMRs reduce administrative risk and simplify requests from patients, payers, and providers.
Roles vary by setting; confirm internal signatory authority and identity-verification requirements before finalizing any PMR Document.
Manages record requests, applies retention policy, and ensures releases meet HIPAA standards. Needs clear patient identifiers, consent language, and an audit trail for chain-of-custody and compliance verification.
Requests records on behalf of a patient, provides proof of authority, and receives records. Requires accessible instructions, clear scope of release, and secure delivery options that protect PHI during transfer.
Full legal name, date of birth, medical record number, and contact information to reliably match the request to the correct chart and avoid misrouting.
Explicit date ranges, visit types, providers, and record categories (e.g., radiology, lab, mental health) to limit disclosure to what is authorized under HIPAA and state law.
Reason for disclosure such as continuity of care, insurance claim, or legal matter; helps recipients process and categorize records appropriately.
Instructions for how and when the patient may revoke consent, including any effective dates or conditions under which revocation does not apply.
Designated signer lines with printed name, relationship to patient if applicable, date, and an area for notary or witness when required by state law.
Timestamps, IP addresses, authentication method, and version history to support compliance reviews and prove chain-of-custody for disclosures.
| Authentication method | Email link, SMS code, or knowledge-based authentication |
|---|---|
| Field validation | Require MRN and DOB formats to reduce entry errors |
| Conditional fields | Show POA upload only when 'representative' is selected |
| Retention settings | Retain signed copies and A/C logs per policy |
| Notification rules | Alert HIM team when signed and when delivery fails |
Ensure any integration preserves PHI protections, supports BAA execution, and retains cryptographic audit records to meet regulatory obligations.
HIPAA requires a response within 30 days; one 30-day extension allowed (45 CFR §164.524).
Provide records in agreed electronic format promptly after verification and consent.
Revocations apply prospectively once processed; document the date received and processed.
If a state requires notarization, allow extra days for scheduling and potential RON sessions.
Retention counts from creation or last effective date depending on record type.
Log request date and requester identity; begin processing queue.
Confirm patient or authorized representative using ID or documentation.
Locate relevant files, redact where required, and prepare release package.
Send records securely, capture signed confirmation and full audit trail.
| signNow | DocuSign | Adobe Sign | PandaDoc | HelloSign | |
|---|---|---|---|---|---|
| Starting Price | $8/user/mo | $15/user/mo | $14/user/mo | $19/user/mo | $15/user/mo |
| Free Trial | 7-day free trial, no credit card required | Varies by vendor | Varies by vendor | Varies by vendor | Varies by vendor |
| Bulk Send | Yes (Business Premium) | Yes | Yes | Yes | Varies |
| Audit Trail | Yes | Yes | Yes | Yes | Yes |
| HIPAA Compliant | Yes (BAA available) | Yes | Yes | No | No |
A hospital streamlined authorizations for interfacility transfers using scoped PMRs and identity verification
An outpatient clinic implemented conditional PMR fields for attorney requests