Patient Identification
Full legal name, date of birth, medical record number, and current address. These identifiers reduce the risk of wrong-patient disclosure and support accurate retrieval from multiple systems.
A precise release protects patient privacy, clarifies what may be shared, and reduces administrative delays. For providers it documents consent and limits legal exposure; for patients it preserves control over medical information disclosure and timelines.
Common requestors include patients, personal representatives, providers, insurers, and legal counsel needing medical records for care, claims, or proceedings.
A patient signs when personally authorizing disclosure; the signature must match legal name on ID and the patient must be competent to consent. The form should state purpose, recipient, date range, and revocation rights, and include a dated signature.
A medical records or release coordinator prepares and verifies the form, confirms identity, redacts non-authorized items as required, and documents the request in the health record with processing timestamps and routing.
Full legal name, date of birth, medical record number, and current address. These identifiers reduce the risk of wrong-patient disclosure and support accurate retrieval from multiple systems.
Named person or organization, full mailing address, email and phone. Clear recipient information prevents misdelivery and documents to whom the covered entity may disclose PHI.
Explicitly list record types (e.g., lab reports, imaging, progress notes) and exclude any categories not authorized. Narrow scopes limit exposure and simplify redaction needs.
Specify exact start and end dates for records to be released. Providers frequently need precise ranges to search EHR segments and release only relevant files.
State the purpose and whether redisclosure is allowed. If redisclosure is permitted, note potential loss of protection beyond the recipient’s control.
Include an expiration date or event, and clear revocation instructions, so the covered entity can log limitations and comply with withdrawal requests.
| Field | Configuration |
|---|---|
| Authentication Method | Email link | SMS code | optional KBA |
| Field Types | Signature, Date, Checkbox, Conditional text |
| Template | Save reusable release templates |
| Retention Export | Store PDF copies with audit trail |
Choose delivery formats and integrations that match recipient capabilities and privacy needs.
Typically 30 days for access requests
One 30-day extension may be allowed
Handled faster for critical care needs
Electronic delivery often faster than paper
Imaging and external records may extend timing
Intake recorded and initial eligibility check performed.
Confirm signer identity and authority before releasing PHI.
Locate and assemble relevant EHR sections and external records.
Remove non-authorized PHI and transmit via secure channel.
| signNow | DocuSign | Adobe Sign | PandaDoc | HelloSign | |
|---|---|---|---|---|---|
| Starting Price | $8/user/mo | $15/user/mo | $14/user/mo | $19/user/mo | $15/user/mo |
| Free Trial | Yes, 7-day trial | Varies | Varies | Varies | Varies |
| Bulk Send | Yes (Premium) | Yes | Yes | Yes | Yes |
| Audit Trail | Yes | Yes | Yes | Yes | Yes |
| HIPAA Compliant | Yes | Yes | Yes | No | No |
| Envelope Cap | None | 100 env/user/yr | Varies | Varies | Varies |
A discharged patient needs records sent to a rehabilitation center
An insurer requests records for a contested claim