Can this form be signed electronically?

Yes. Electronic signatures are legally valid under the ESIGN Act (15 U.S.C. ch. 96) and UETA where applicable, provided intent, consent, attribution, and record retention requirements are met.

Is patient revocation effective immediately?

A patient may revoke authorization, but revocation does not affect disclosures already made lawfully before the revocation; document revocation requests and processing dates promptly.

Do I need a BAA for eSignature vendors?

Yes — if the vendor will create, receive, maintain, or transmit PHI on your behalf, execute a Business Associate Agreement to comply with HIPAA.

When is notarization required?

Notarization or witnesses depend on state law and institutional policy; check your state requirements and the form's purpose (some employers or schools may require notarized consent).

What if the signer is a guardian?

Collect proof of authority (court order, power of attorney) and document the relationship on the form; include representative authority fields.

How long should we retain the form?

Retain per HIPAA minimum of six years from creation or last effective date (45 CFR §164.530(j)), and follow any state or payer requirements that impose longer retention.

Electronic Signature
Templates
Healthcare
Healthcare TB and HIPAA Authorization Form

Healthcare TB and HIPAA Authorization Form

This template is fully customizable. Edit the text, fill out the fields, and send it for signature. Give it a try!

Healthcare TB and HIPAA Authorization Form

Patient Information

Full Legal Name

Date of Birth

Gender

Address

Primary Phone

Email

Emergency Contact

Name

Phone

Relationship

Insurance Information

Insurance Provider

Policy Number

Group Number

Subscriber Name

Medical History (Relevant to TB)

Current Medications Allergies Prior Surgeries / Significant Medical History Chronic Conditions

I understand that the purpose of TB screening and testing is to detect latent or active tuberculosis infection. The available tests include skin testing (Mantoux PPD), blood testing (IGRA), and chest radiograph when clinically indicated. I have the right to ask questions and to refuse the test or withdraw consent at any time prior to the procedure without penalty.

TB Screening and Consent

Check the test(s) for which you give consent:

Tuberculin Skin Test (PPD) Blood Test (IGRA) Chest X-ray if clinically indicated

I authorize the clinician to perform the selected test(s) and to release the results to my employer, school, or public health authorities as required or authorized by law. I understand risks may include local injection site pain, minor bleeding, allergic reaction, or minor discomfort from blood draw; chest x-ray involves minimal radiation exposure. I acknowledge that testing does not constitute a guarantee of absence of disease.

TB History

Date of Last TB Test Result

Have you ever been treated for active TB disease? Yes No

HIPAA Authorization to Disclose Protected Health Information

I hereby authorize the release of my protected health information as described below. I understand this authorization is voluntary unless otherwise required as a condition of obtaining treatment.

Name or Organization Authorized to Receive Information Recipient Address / Phone Purpose of Disclosure

Types of information to be disclosed (check all that apply):

All medical records related to TB and respiratory illness TB test results (PPD, IGRA) Treatment records, medications, and follow-up Chest x-ray or imaging reports Other (specify below) Authorization Expiration

I understand that I may revoke this authorization at any time by submitting a written revocation to the facility's Privacy Officer. Revocation will not affect disclosures already made in reliance on this authorization. I understand that information disclosed pursuant to this authorization may be subject to redisclosure by the recipient and may no longer be protected by federal privacy regulations.

I understand that I have the right to receive a copy of this authorization. I understand that treatment, payment, enrollment, or eligibility for benefits will not be conditioned on signing this authorization except where applicable by law.

Request Copy of Authorized Records I request a copy of the records released pursuant to this authorization

Acknowledgment and Certification

By signing below I certify that I am the patient or the patient’s legal representative and that I have read and understand the information on this form. I authorize the release of the specified health information as indicated and consent to the TB screening/testing procedures selected. I acknowledge that I have been provided the opportunity to ask questions, and that all my questions have been answered to my satisfaction.

Facility Privacy Officer or Contact for Revocation (Name / Address / Phone)

Patient Name:

Signature:

Date:

If signed by someone other than the patient, state relationship

What the Healthcare TB and HIPAA Authorization Form Is

The Healthcare TB and HIPAA Authorization Form combines two related patient-level authorizations: a tuberculosis (TB) screening or testing consent and a HIPAA-compliant release permitting specified protected health information (PHI) disclosure. It documents patient identity, consent to TB testing or screening procedures, and explicit permission to share test results or related clinical data with named providers, public health agencies, or third parties. The form supports lawful handling of PHI under HIPAA while ensuring clear, dated authorization of testing and limited data release for treatment, public health reporting, or insurance purposes.

Why this combined form matters for providers and patients

Using a combined Healthcare TB and HIPAA Authorization Form reduces duplication, clarifies consent scope, and creates a single auditable record for testing and PHI release. It aligns clinical workflow needs with legal requirements under HIPAA and electronic signature laws.

Who typically completes this form

Healthcare organizations and their staff commonly use this form to obtain patient consent for TB testing and PHI disclosures; it fits clinics, occupational health, and public health reporting workflows.

Primary care clinics and community health centers — front-desk or clinical staff collect consent at intake or appointment.
Occupational health programs and employers — used for pre-employment or periodic TB screening with documented authorization to share results.
Local and state public health authorities — receive test results under public health reporting exceptions to usual authorization requirements.

When completed correctly the form protects patient rights, documents clinical necessity, and supports lawful information sharing with minimal administrative friction.

Core elements to include in a professional combined form

A complete Healthcare TB and HIPAA Authorization Form should be concise, use plain language, and include all legal and clinical elements required for testing and PHI disclosure. The form must identify parties, specify data types, set an expiration, and provide signature blocks with dates.

Patient Identification

Full legal name, date of birth, and a government or medical record identifier to ensure accurate patient matching and test attribution.

TB Consent

Clear statement of the TB procedure (e.g., skin test, blood-based IGRA, chest x-ray) and any risks or alternatives required for informed consent.

PHI Release Scope

Specify categories of information to share (test results, radiology reports, clinic notes) and any limits on use or re-disclosure.

Recipient Details

Named persons or organizations authorized to receive PHI, including contact information and purpose of disclosure (treatment, public health, employment).

Duration and Revocation

Effective date, expiration date or event, and instructions for how the patient may revoke authorization, when permitted.

Signature and Authentication

Signature block with signer role (patient, legal representative), date, and fields for witness or notary when required by state law.

Required privacy and security details

HIPAA Notice: Include HIPAA privacy notice reference.

Minimum Necessary: Limit release to required PHI elements.

BAA Mention: Note business associate agreement when applicable.

Audit Trail: Record signer identity and timestamps.

Access Controls: Restrict view to authorized staff.

Retention: State record retention policy.

Step-by-step: completing the form in clinical flow

Follow these sequential steps to collect valid consent and PHI authorization while minimizing rework and compliance risk.

01

Check identity: Verify patient using photo ID and medical record number.
02

Explain testing: Describe test purpose, risks, and alternatives in plain language.
03

Specify recipients: List who may receive results and why.
04

Obtain signature: Have patient or authorized representative sign and date.

Configure an online workflow for this form

Design the digital workflow to match the clinical intake process and to capture audit data required by HIPAA and e-signature standards.

Field	Configuration
Identity Verification	Require medical record number and DOB; enable ID upload optional.
Authentication	Use email link or SMS OTP for signer validation.
Conditional Fields	Show recipient fields only if patient selects 'Share with third party'.
Audit Options	Capture IP, timestamp, and signer consent text for each completed form.

Where to send or file the completed form

Route the signed form to the appropriate parties and systems to meet clinical, billing, and public health reporting needs while preserving an audit trail.

Electronic Health Record: Store scanned or native PDF in the patient's EHR chart.
Public Health: Send reportable TB results to state/local health departments as required.
Employer/School: Transmit only with explicit patient authorization and documented purpose.
Patient Copy: Provide a signed copy to the patient or authorized representative.

Technical considerations for digital signing and eSubmission

Select a platform that supports HIPAA compliance, robust audit trails, and configurable authentication to meet clinical and legal needs.

Authentication: Email link or SMS OTP; higher-risk flows may use KBA or SSO.
Encryption: TLS in transit and AES-256 at rest are recommended.
Integrations: Connectors to EHRs, cloud storage, and public health submission systems.

Timing: deadlines and processing expectations

Understand timing for testing, reporting, and recordkeeping so results and disclosures meet regulatory and program deadlines.

TB test timing:

Administer and record results per CDC guidance and jurisdictional public health requirements.

Public health reporting:

Report reportable TB cases per state rules, typically within 24–72 hours for confirmed cases.

Authorization retention:

Keep authorization with the medical record for the applicable retention period (see retention timeline).

Revocation processing:

Process revocations promptly; revocation does not undo disclosures already made.

Timely release:

Fulfill authorized disclosures within the timeframe stated on the form or within a reasonable period.

Common mistakes to avoid when preparing the form

Incomplete recipient details that block lawful disclosures and require re-authorizations, delaying care or employment clearance.
Using vague language about PHI categories which can create uncertainty about what may be shared and may violate the minimum-necessary rule.
Failing to document signer authority for guardians or legal representatives, which can invalidate the consent and lead to administrative disputes.
Omitting an expiration date or clear revocation instructions, which can result in overly broad or indefinite authorizations.

Penalties and risks of improper or missing authorizations

HIPAA violations: Civil and criminal exposure under HIPAA rules.

Reporting delays: Late public health reports risk regulatory follow-up.

Employment consequences: Invalid authorization can prevent placement or clearance.

Data breaches: Improper disclosures increase breach risk and penalties.

Reputational harm: Patient trust erosion from mismanaged PHI.

Operational cost: Additional administrative work and potential fines.

Real-world examples of form use

These brief case summaries illustrate typical scenarios where the combined form streamlines compliance and care coordination.

Community Clinic

A clinic screens new patients for TB on arrival and needs a single signed form to run tests and report positives to the county health department.

The form named the county health department as recipient.
The consolidated authorization reduced intake time and ensured the clinic met state reporting rules while keeping copies in the EHR for six years.

Employer Screening

An employer requires pre-employment TB testing and authorization to receive results for job clearance.

The employee signed authorizing release to occupational health only.
Keeping recipient and purpose narrowly defined avoided unnecessary PHI sharing and protected employee privacy during hiring.

eSignature platform pricing and feature snapshot for healthcare forms

Comparison highlights typical starting prices and feature presence for common eSignature providers; signNow is listed first per standard vendor comparisons.

	signNow	DocuSign	Adobe Sign	PandaDoc	HelloSign
Starting Price	$8/user/mo	$15/user/mo	$14/user/mo	$19/user/mo	$15/user/mo
Free Trial	7-day free trial	Yes	Yes	Yes	Yes
Bulk Send	Yes	Yes	Yes	Yes	No
Audit Trail	Yes	Yes	Yes	Yes	Yes
HIPAA Compliant	Yes	Yes	Yes	No	No

FAQs and troubleshooting for common completion issues

Answers to frequently asked questions address authentication, revocation, recordkeeping, and digital signature validity for combined TB and HIPAA authorizations.

Need help? Contact support

Can this form be signed electronically?
Yes. Electronic signatures are legally valid under the ESIGN Act (15 U.S.C. ch. 96) and UETA where applicable, provided intent, consent, attribution, and record retention requirements are met.
Is patient revocation effective immediately?
A patient may revoke authorization, but revocation does not affect disclosures already made lawfully before the revocation; document revocation requests and processing dates promptly.
Do I need a BAA for eSignature vendors?
Yes — if the vendor will create, receive, maintain, or transmit PHI on your behalf, execute a Business Associate Agreement to comply with HIPAA.
When is notarization required?
Notarization or witnesses depend on state law and institutional policy; check your state requirements and the form's purpose (some employers or schools may require notarized consent).
What if the signer is a guardian?
Collect proof of authority (court order, power of attorney) and document the relationship on the form; include representative authority fields.
How long should we retain the form?
Retain per HIPAA minimum of six years from creation or last effective date (45 CFR §164.530(j)), and follow any state or payer requirements that impose longer retention.

be ready to get more

Join over 28 million airSlate SignNow users

Sign Now