Can the RCDR Copy be signed electronically?

Yes. Electronic signatures are generally valid under the ESIGN Act and state e-signature laws such as UETA or ESRA. Verify any state exceptions and ensure signed records can be reproduced and retained in accordance with agency policy.

Is a BAA required for e-submission?

Yes. If a third-party platform processes PHI, a Business Associate Agreement is required under HIPAA to document responsibilities and safeguards for protected health information.

How do I revoke an authorization?

Provide written revocation to the record custodian per the authorization terms. Revocation does not affect disclosures already made in reliance on the authorization before receipt of revocation.

What supporting documents are commonly requested?

Proof of identity, a completed authorization form, representative documentation for agents or guardians, and any court orders when applicable are frequently required to process release requests.

How long does fulfillment typically take?

Turnaround varies by provider and scope; many custodians aim for 7–30 calendar days depending on record volume and redaction needs. Expedited processing may incur fees.

How should I secure transmitted PHI?

Use encrypted delivery, authenticated recipient addresses, and retain audit logs. Avoid unencrypted email for PHI and document the method of transmission in the record history.

Electronic Signature
Templates
Healthcare
Healthcare RCDR Copy

Healthcare RCDR Copy

This template is fully customizable. Edit the text, fill out the fields, and send it for signature. Give it a try!

HEALTHCARE RCDR COPY

Patient Information

Patient Name:

Date of Birth Gender Address

Phone

Email

Emergency Contact

Insurance Information

Primary Insurance Provider

Policy / ID Number

Group Number

Subscriber Name

Records Requested (RCDR Copy)

Records to be released from:

From Date (if applicable)

To Date (if applicable)

Specific records or services requested Type of Information to be Released (check all that apply)

All medical records Operative / Procedure reports Radiology images (still images only) Pathology reports Laboratory results Immunizations Billing / claims records Other:

Recipient and Method of Release

Release To (Name) Recipient Address or Fax / Secure Delivery

Preferred Method of Delivery (select all that apply) Patient pick-up Standard mail Fax Secure electronic transmission CD or portable media Other:

Fees and Processing

I understand that a reasonable fee may be charged for copying, postage, and retrieval of medical records consistent with applicable law. I authorize the provider to charge applicable fees to the patient or the patient representative indicated on this form.

Payment Method

Check Credit / debit card Cash Bill insurance (if permitted)

Authorization and Acknowledgements

I hereby authorize the release of the medical information described above to the named recipient. This authorization includes records that may contain information relating to mental health treatment, substance use disorder treatment, HIV/AIDS testing and status, genetic testing, reproductive health services, and other sensitive information unless I have specifically excluded such information below.

Sensitive information exclusion (if any)

Exclude mental health / behavioral health records Exclude substance use disorder treatment records Exclude HIV/AIDS-related information Other exclusion:

I understand that this authorization is voluntary and that treatment, payment, enrollment, or eligibility for benefits will not be conditioned on signing this authorization unless allowed by law. I understand that I may revoke this authorization in writing at any time, except to the extent that action has already been taken in reliance on it. To revoke this authorization, send a written notice to the health information management department of the releasing provider.

I understand that information disclosed pursuant to this authorization may be subject to redisclosure by the recipient and no longer protected by federal privacy rules, except where state law or other federal law provides special protections.

Authorization Expiration Acknowledgment

I acknowledge I have read and understand the statements above, including that the release may include sensitive information. I request an RCDR copy to be provided as indicated on this form.

Certification

I certify that I am the individual whose information is being released or I am authorized to act on behalf of the individual. I attest that the information I have provided on this form is true and correct to the best of my knowledge. I understand that falsifying information to obtain medical records may be subject to penalties under applicable law.

If signed by authorized representative, provide relationship to patient

Patient / Representative Name:

Signature:

Relationship (if not patient):

Date:

What the Healthcare RCDR Copy Is and when it’s used

The Healthcare RCDR Copy is a written authorization and record-release form used to request or provide copies of a patient’s protected health information (PHI). It documents the scope of records requested, the recipient, the purpose, and the patient’s signature or approved electronic signature. The form supports routine transfers between providers, release to third-party payers, continuity-of-care exchanges, and patient requests under HIPAA. It may include access, disclosure limits, expiry dates, and re-release restrictions; some sensitive categories (e.g., behavioral health, HIV, substance-use records) can require additional state steps.

Why a clear RCDR Copy matters for patient care and compliance

A correctly completed RCDR Copy ensures authorized access to PHI while protecting patient privacy and meeting HIPAA requirements. It reduces delays in treatment, clarifies permitted data use, and documents consent for audits and legal review.

Who completes and receives a Healthcare RCDR Copy

Typical users include treating providers, medical records staff, payers, authorized third parties, and patients requesting their own records.

Health system release teams processing inter-provider transfers and referrals.
Patients or patient representatives requesting copies for continuity of care or personal records.
Attorneys, insurers, or third-party administrators receiving documents for claims or legal review.

Roles vary by workflow; ensure the signer is authorized and that the recipient identity and purpose match the authorization scope.

Security, compliance, and technical protections to include

Encryption: TLS 1.2/1.3 in transit; AES-256 at rest

HIPAA: BAA required for cloud PHI handling

Audit Trail: Tamper-evident logs and timestamps

21 CFR Part 11: Support for electronic records where required

SOC 2 Type II: Independent controls and reporting available

ISO/WCAG: ISO 27001 and WCAG 2.0 Level AA compliance

Key legal risks from an incorrect or incomplete RCDR Copy

HIPAA breach: Unauthorized disclosure liability

Wrong recipient: PHI to unintended party

Revoked consent: Failed revocation processing

Delayed care: Treatment interruptions from missing records

State fines: Jurisdiction-specific penalties possible

Civil exposure: Negligence or privacy claims

Step-by-step: completing a Healthcare RCDR Copy

Follow these sequential steps to create a valid request for medical records while protecting patient rights and meeting e-signature rules.

01

Identify patient: Enter full legal name and DOB exactly as on ID
02

Specify records: List date ranges and specific record types to release
03

Name recipient: Provide recipient name, address, and relationship to patient
04

Sign and date: Signer affirms authorization with signature and effective date

Typical e-submission workflow for RCDR Copy requests

This workflow shows common stages when handling RCDR Copy forms electronically, from request to record delivery.

Request intake: Patient or provider uploads completed form to portal
Identity check: Verify signer identity and authority
Authorization review: Records team confirms scope and sensitive categories
Fulfillment: Records are redacted as required and delivered securely

Essential elements to include on a professional RCDR Copy

A complete RCDR Copy combines identity details, precise scope, signature and authentication fields, storage instructions, and retention notes to ensure defensibility and patient protection.

Patient identity

Full legal name, date of birth, and a government ID reference if required; mismatched names delay processing and may trigger additional verification steps to protect PHI.

Record scope

Specify exact date range, visit types, and categories (e.g., lab results, radiology, behavioral health) so the custodian can locate and redact records accurately before release.

Recipient details

Clearly name the recipient organization or individual, mailing or secure delivery address, and intended use to limit re-disclosure and document permissible purposes.

Expiry and revocation

State an expiration date and explain how the patient may revoke authorization; include language about revocation not affecting prior disclosures.

Signature and attest

Signature block for patient or authorized representative, date signed, and relationship description; include ID verification steps for non-patient signers.

Special consents

When releasing sensitive categories, attach required state-specific authorization or additional consent language to meet applicable legal thresholds.

Configuring an online RCDR Copy workflow

Set up the digital workflow to capture identity proofing, conditional fields for sensitive records, and secure delivery options.

Authentication Method	Email link, SMS code, or KBA depending on sensitivity
Signature Field	Required signature and date fields with signer role
Conditional Fields	Show extra consent for mental health and substance-use records
Template Naming	Use consistent names for auditability and reuse
Notifications	Automatic emails on completion and delivery

Technical and platform requirements for eSubmission

Electronic submission requires secure transport, access controls, and an auditable signing process to protect PHI.

File formats: PDF, DOCX accepted
Integrations: Connect with EHRs and cloud storage
Authentication: Email, SMS, or stronger options

Ensure your platform supports HIPAA BAAs, preserves audit trails, and exports tamper-evident signed copies for record retention.

eSignature vendor comparison for Healthcare RCDR Copy workflows

Compare basic vendor pricing and common capability markers relevant to HIPAA workflows and high-volume release processes.

	signNow	DocuSign	Adobe Sign	PandaDoc	HelloSign
Starting Price	$8/user/mo	$15/user/mo	$14/user/mo	$19/user/mo	$15/user/mo
Free Trial	7-day free trial	Varies by vendor	Varies by vendor	Varies by vendor	Varies by vendor
Bulk Send	Yes	Yes	Yes	Yes	No
Audit Trail	Yes	Yes	Yes	Yes	Yes
HIPAA Compliant	Yes	Yes	Yes	No	No

Frequently asked questions about Healthcare RCDR Copy handling

Answers to common questions about validity, revocation, e-signatures, and secure delivery for RCDR Copies.

Need help? Contact support

Can the RCDR Copy be signed electronically?
Yes. Electronic signatures are generally valid under the ESIGN Act and state e-signature laws such as UETA or ESRA. Verify any state exceptions and ensure signed records can be reproduced and retained in accordance with agency policy.
Is a BAA required for e-submission?
Yes. If a third-party platform processes PHI, a Business Associate Agreement is required under HIPAA to document responsibilities and safeguards for protected health information.
How do I revoke an authorization?
Provide written revocation to the record custodian per the authorization terms. Revocation does not affect disclosures already made in reliance on the authorization before receipt of revocation.
What supporting documents are commonly requested?
Proof of identity, a completed authorization form, representative documentation for agents or guardians, and any court orders when applicable are frequently required to process release requests.
How long does fulfillment typically take?
Turnaround varies by provider and scope; many custodians aim for 7–30 calendar days depending on record volume and redaction needs. Expedited processing may incur fees.
How should I secure transmitted PHI?
Use encrypted delivery, authenticated recipient addresses, and retain audit logs. Avoid unencrypted email for PHI and document the method of transmission in the record history.

be ready to get more

Join over 28 million airSlate SignNow users

Sign Now