Patient identity
Full legal name, date of birth, and a government ID or medical record number to ensure the authorization matches the correct patient file and avoids misdirected disclosures.
The form creates a clear legal basis to disclose PHI, documents patient consent, and limits scope and duration of access. It protects providers by showing the patient authorized the release and helps recipients obtain necessary clinical history without delay.
Each signer must have authority to consent; providers should verify identity and, when required, obtain witness or notarization per state rules.
The patient named in the record may sign if competent. If an adult patient is incapacitated, a designated health care proxy or legally authorized representative signs on the patient’s behalf; documentation of that authority should accompany the form.
A parent for a minor, a legal guardian, or an agent under a valid durable power of attorney for health care may sign. Organizations should check state law and the representative’s documentation before releasing PHI.
Full legal name, date of birth, and a government ID or medical record number to ensure the authorization matches the correct patient file and avoids misdirected disclosures.
Name and contact information of the person or organization authorized to receive records; include address, phone number, and a clear recipient role (e.g., insurer, attorney).
Specify types of records to release (e.g., entire medical record, lab results, mental health notes) and any date ranges to narrow the disclosure scope.
Briefly state the purpose for disclosure (e.g., continuity of care, legal representation, insurance claim) so the authorization is specific as required by HIPAA.
A clear expiration date or event (e.g., six months from signature or when treatment ends) that limits how long the authorization is effective.
Signature, printed name, date, and relationship to patient if signed by a representative; include witness or notary lines if required by state law.
| Field | Configuration |
|---|---|
| Patient ID field | Make required; use input mask for DOB. |
| Recipient block | Require full address and phone number. |
| Scope selector | Provide checkboxes and a custom text area. |
| Signature field | Require signer authentication and date stamp. |
Choose a platform that can provide a HIPAA-compliant environment with a BAA when PHI is involved and that preserves a tamper-evident record of the signing session.
Enter a specific date or event; without one, authorization may be considered invalid for ongoing releases.
Providers often process record requests within 30 days; state law may prescribe shorter timelines.
A revocation is effective when received; providers should act promptly to stop future disclosures.
Keep the signed authorization with the medical record for the retention period applicable to the record.
For insurance or litigation, submit authorizations well before filing or hearing dates to avoid delays.
| signNow | DocuSign | Adobe Sign | PandaDoc | HelloSign | |
|---|---|---|---|---|---|
| Starting Price | $8/user/mo | $15/user/mo | $14/user/mo | $19/user/mo | $15/user/mo |
| Free Trial | 7-day free trial | Varies | Varies | Varies | Varies |
| Bulk Send | Yes | Yes | Yes | Yes | No |
| Audit Trail | Yes | Yes | Yes | Yes | Yes |
| HIPAA Compliant | Yes | Yes | Yes | No | No |
The interface is simple and easy-to-use for our team; more importantly, it is just as easy for our customers.
The airSlate SignNow team has been exceptional, responsive, the API has been great.