Patient identity
Full legal name, date of birth, and medical record number where available to ensure the revocation is matched to the correct chart and avoids misapplication.
Revoking an ROI restores tighter control over protected health information, limits further disclosures, and documents the patient’s intent. It creates a clear administrative record for the provider and third parties and supports HIPAA obligations to honor individual rights to revoke authorizations when feasible.
The form is primarily used by patients, personal representatives, and authorized third parties who previously signed an authorization to release health information.
| Field | Configuration |
|---|---|
| Recipient List | Prepopulate known recipients for one-click notification |
| Verification Step | Add identity verification (ID check or staff confirmation) |
| Audit Logging | Enable time-stamped audit trail of actions and deliveries |
| Retention Flag | Tag the original authorization record for archival per policy |
Full legal name, date of birth, and medical record number where available to ensure the revocation is matched to the correct chart and avoids misapplication.
Exact date and description of the prior ROI authorization, including any file or document number, so staff can locate and note the authorization that is being revoked.
Clear description of which disclosures are revoked (recipients, date ranges, types of records) to prevent ambiguity and unintended continuation of sharing.
State when the revocation takes effect; typically prospective from receipt unless the form specifies otherwise and the recipient agrees to retroactive action.
Signature and printed name of the patient or authorized representative plus a statement of authority and supporting documentation where applicable.
A section for the covered entity to acknowledge receipt, record the date received, and note any actions taken, which supports reliable auditing and compliance.
Digital submission streamlines receipt and creates an auditable record when properly configured.
Provider should acknowledge receipt within a reasonable administrative period
Update release logs and EHR flags within 3–7 business days
Send cease notifications to known recipients within 7–14 days
Disclosures made before receipt remain valid per HIPAA
Allow patient to provide evidence or correct identification within organization-defined window
| signNow | DocuSign | Adobe Sign | PandaDoc | HelloSign | |
|---|---|---|---|---|---|
| Starting Price | $8/user/mo | $15/user/mo | $14/user/mo | $19/user/mo | $15/user/mo |
| Free Trial | 7-day free trial | No | No | Yes, limited | Yes, limited |
| Bulk Send | Yes | Yes | Yes | Yes | No |
| Audit Trail | Yes | Yes | Yes | Yes | Yes |
| HIPAA Compliant | Yes | Yes | Yes | No | No |