Signer Information
Record full legal name, date of birth, contact details, and relationship to the patient; include authority documentation for guardians or agents so recipients can verify signer identity before releasing PHI.
Provides clear, limited permission for PHI access, reducing administrative delays while preserving patient privacy. A well-structured authorization documents scope, duration, and purpose, improving compliance with HIPAA and simplifying record release workflows for providers, payers, and caregivers.
Primary users include patients, clinical staff, authorized representatives, and third-party requesters such as insurers and legal counsel.
Each party’s role and verification method should be documented to maintain an audit trail and meet regulatory consent requirements.
| Field | Configuration |
|---|---|
| Document Template | Upload PDF or DOCX, set reusable template. |
| Conditional Fields | Show fields only when specific choices selected. |
| Signer Authentication | Enable email, SMS code, or 2FA per risk. |
| Audit & Retention | Capture timestamps, IP, and retain signed PDF. |
Digital distribution requires compatibility with EHR systems and secure file transfer; review integration and format requirements before sending.
Provide access or decision within 30 days; one 30-day extension allowed.
Process urgent requests faster when patient indicates immediate need.
Delivery method may affect timing; electronic typically faster.
Keep signed authorizations per retention policy and HIPAA periods.
Acknowledge revocations promptly and stop future disclosures.
Record full legal name, date of birth, contact details, and relationship to the patient; include authority documentation for guardians or agents so recipients can verify signer identity before releasing PHI.
Specify types of records (e.g., progress notes, imaging, billing), date ranges, and whether summaries or full records are permitted; avoid vague language to prevent misinterpretation or unintended disclosures.
State the specific purpose for access, such as continuity of care, insurance claim, legal review, or personal use, to limit permitted disclosures and document necessity for the request.
Provide effective and expiration dates, and whether the authorization is single-use or ongoing; include instructions for automatic termination upon certain events if required.
Describe required signer verification methods (ID check, two-factor, notarization or power-of-attorney documentation) and specify acceptable evidence to reduce fraudulent requests.
Explain how the patient can revoke authorization, how revocations are processed, and the effect on disclosures already made; include contact information for revocation requests.
Authorization received and logged, begin verification.
Confirm signer identity and authority before disclosure.
Collect relevant records and create release package.
Send to recipient and retain signed copy with audit trail.
A regional hospital grants temporary viewing rights to family members following surgery to support discharge planning.
An insurer requests access to specified billing and encounter records to adjudicate a complex claim and verify medical necessity.
| signNow | DocuSign | Adobe Sign | PandaDoc | HelloSign | |
|---|---|---|---|---|---|
| Starting Price | $8/user/mo | $15/user/mo | $14/user/mo | $19/user/mo | $15/user/mo |
| Free Trial | 7-day free trial | Varies by vendor | Varies by vendor | Varies by vendor | Varies by vendor |
| Bulk Send | Yes | Yes | Yes | Yes | No |
| Audit Trail | Yes | Yes | Yes | Yes | Yes |
| HIPAA Compliant | Yes | Yes | Yes | No | No |