Can a consent form be signed electronically?

Yes. Electronic signatures are legally valid under the ESIGN Act (15 U.S.C. ch. 96) and UETA where adopted, provided intent, consent, attribution, and retention are demonstrable.

When is notarization required?

Notarization depends on state law and the document’s purpose. Not all consents need notarization; check the custodian’s requirements or state statute for specific filing or evidentiary uses.

How do I revoke a third party consent?

Revoke in writing and communicate to all parties and custodians. Processing times vary; retain proof of revocation. If HIPAA applies, follow covered entity procedures for revocation.

What if a signer is acting for a business?

Attach proof of authority such as a board resolution or power of attorney. For entity signers, include printed title and confirm signing authority to avoid release delays.

Is special language required for health records?

Yes. Health record releases must include HIPAA-compliant authorization language and a specification of PHI to be disclosed; include expiration and revocation instructions.

How long should signed consents be kept?

Retain consents at least for the active term plus relevant regulatory periods: IRS three years (IRC §6501(a)), HIPAA six years (45 CFR §164.530(j)), or longer if state law requires it.

Electronic Signature
Templates
Legal
Third Party Consent Form

Third Party Consent Form

This template is fully customizable. Edit the text, fill out the fields, and send it for signature. Give it a try!

THIRD PARTY CONSENT FORM

This Third Party Consent Form (the "Consent") is made and entered into as of by and between Principal Name: of Address: (hereinafter "Principal") and Third Party Name: of Address: (hereinafter "Third Party").

RECITALS

WHEREAS, Principal possesses certain records, information and documentation related to the Principal's affairs that are private or otherwise protected from disclosure; and

WHEREAS, Principal desires to authorize Third Party to obtain, receive, inspect and reproduce specified records and to act on behalf of Principal for the limited purposes set forth herein; and

WHEREAS, Third Party is willing to accept such authorization subject to the terms and conditions of this Consent.

NOW, THEREFORE, in consideration of the mutual covenants contained herein and other good and valuable consideration, the receipt and sufficiency of which are hereby acknowledged, the parties agree as follows:

1. CONSENT GRANT

1.1 Principal hereby authorizes and directs any person, entity, custodian or holder of records, including but not limited to financial institutions, medical providers, employers and governmental agencies, to disclose to Third Party and its authorized representatives such information and records concerning Principal as reasonably requested by Third Party and permitted below. This authorization includes the right to obtain copies of records, statements, reports, summaries and other documents necessary to accomplish the purposes stated herein.

1.2 Categories of information authorized for disclosure (check all that apply):

Medical records Financial records Employment records Other

If Other, describe: Specific documents, limits, or instructions:

2. DURATION AND TERMINATION

2.1 This Consent shall be effective commencing on and shall remain in effect until , unless earlier revoked pursuant to Section 2.2.

2.2 Principal may revoke this Consent at any time by providing written notice of revocation to Third Party and to any third-party custodian who has received information pursuant to this Consent. Revocation shall be effective only upon receipt by Third Party and will not apply retroactively to disclosures made in reliance on this Consent prior to receipt of the revocation.

Revocation procedure / additional instructions:

3. SCOPE, LIMITATIONS AND USE OF INFORMATION

3.1 Third Party shall use information obtained pursuant to this Consent solely for the purposes expressly authorized in Section 1 and shall not re-disclose such information except as required by law or as expressly authorized in writing by Principal. Any permitted re-disclosure shall be limited to the minimum information necessary to accomplish the authorized purpose.

3.2 Third Party shall implement and maintain reasonable safeguards to protect the confidentiality and integrity of the information received, and shall promptly notify Principal in writing of any unauthorized access, disclosure or use of such information of which Third Party becomes aware.

4. REPRESENTATIONS AND WARRANTIES

4.1 Principal represents and warrants that Principal is competent to execute this Consent, has authority to authorize the release of the categories of information identified herein, and that the information provided in connection with this Consent is true and correct to the best of Principal's knowledge.

4.2 Third Party represents and warrants that it will act in good faith, within the scope of this Consent, and in compliance with all applicable laws, regulations and professional obligations governing the handling of the information disclosed under this Consent.

5. INDEMNIFICATION

5.1 Third Party shall indemnify, defend and hold harmless Principal from and against any and all claims, liabilities, losses, damages, costs and expenses (including reasonable attorneys' fees) arising from Third Party's breach of this Consent, including unauthorized use or disclosure of information obtained pursuant to this Consent, except to the extent such claims arise from Principal's own acts or omissions.

6. CONFIDENTIALITY EXCEPTIONS

6.1 Nothing in this Consent shall be interpreted to require disclosure of information that is privileged, protected by law or subject to a court order prohibiting disclosure. To the extent disclosure is compelled by law or court order, Third Party shall, where lawful, provide Principal with notice of the compelled disclosure as soon as practicable.

7. NOTICES

All notices, requests, consents and other communications required or permitted under this Consent shall be in writing and shall be delivered to the addresses set forth below or to such other address as a party may designate by written notice in accordance with this Section.

Principal Notice Contact Principal Notice Address Third Party Notice Contact Third Party Notice Address

8. MISCELLANEOUS

8.1 Governing Law. This Consent shall be governed by and construed in accordance with the laws of the state designated by Principal for governing law: , without regard to its conflicts of laws principles.

8.2 Entire Agreement. This Consent constitutes the entire agreement between the parties with respect to the subject matter hereof and supersedes all prior and contemporaneous agreements, representations and understandings, whether written or oral.

8.3 Severability. If any provision of this Consent is held to be invalid, illegal or unenforceable, the remaining provisions shall continue in full force and effect and the invalid provision shall be reformed to the extent necessary to make it enforceable.

8.4 Amendments; Waiver. No amendment or waiver of any provision of this Consent shall be effective unless in a writing signed by both parties. No waiver by any party of any breach shall be deemed a waiver of any subsequent breach.

8.5 Counterparts. This Consent may be executed in counterparts, each of which shall be deemed an original and all of which together shall constitute one and the same instrument. Signatures delivered by facsimile or electronic image shall be deemed originals for all purposes.

9. AUTHORIZATION AND CERTIFICATION

Principal certifies that Principal has read and understands the terms of this Consent and voluntarily authorizes the release of the specified records and information to Third Party. Principal acknowledges that Principal may request a copy of this executed Consent.

Principal:

By:

Date:

Third Party:

By:

Date:

What a Third Party Consent Form Is and When it's Used

A Third Party Consent Form documents an individual's or organization’s authorization for a named third party to access, receive, or act on specified records or services. Common uses include authorizing a representative to obtain medical records, permitting a broker to access financial statements, or allowing an agent to manage account information. The form identifies the consenting party, the third party, the scope and duration of consent, and any limitations or conditions. Properly completed consent forms support secure information sharing while creating a clear audit trail for compliance and dispute resolution.

Why a Clear Consent Form Matters

A precise Third Party Consent Form reduces ambiguity, protects privacy, and documents permission for access. It creates a clear record for compliance reviews and minimizes disputes over scope, duration, and authority.

Who Typically Completes or Signs This Form

Organizations and individuals use these forms when delegating access or release of information to an authorized third party.

Consumers and patients authorizing release of medical or financial records to an advocate or provider.
Businesses delegating account or contract access to brokers, agents, or external consultants.
Legal and HR departments authorizing third-party vendors, counsel, or payroll agents to act on behalf of an employee or client.

The form helps requesters, custodians, and third parties document authority and limits, reducing operational friction and legal risk.

Core Data Elements Required on the Form

Consenting Party: Full legal name of individual or entity

Third Party: Name and contact details of authorized recipient

Scope of Access: Specific records or actions authorized

Effective Dates: Start and end date of consent

Purpose: Reason for access or disclosure

Signature Block: Signed name, date, and printed name

Step-by-Step: Completing a Third Party Consent Form

Follow these sequential steps to reduce mistakes and ensure the consent is enforceable and clear for all parties.

01

Identify Parties: Enter full legal names and contact details for both consenting party and third party.
02

Define Scope: List specific documents, account types, or actions being authorized.
03

Set Dates: Specify effective and expiration dates using MM/DD/YYYY format.
04

Sign and Date: All required signers must sign and date where indicated.

Configuring an Online Consent Workflow

When digitizing the form, configure authentication, routing, and retention to match your compliance needs.

Field	Configuration
Authentication Method	Email link \| SMS code or stronger MFA
Signature Order	Sequential \| Parallel routing options
Document Retention	Automated archival \| Exportable audit trail
Attachments Required	Proof of authority \| ID upload settings

Where to Send or File Completed Consent Forms

Route signed consents to custodians and third parties and retain an archived copy for compliance and auditability.

Custodian: Send signed copy to the record holder or information custodian.
Third Party: Provide the authorized third party with a signed, time-stamped copy.
Internal Records: Archive in your document management or HR file for retention requirements.
Audit Trail: Store the audit certificate showing signatures, timestamps, and IPs.

Digital Signing and Integration Considerations

Choose platform settings that provide secure authentication, exportable audit trails, and integration with your systems.

File Types: PDF, DOCX, HTML supported
Integration Options: Salesforce, Microsoft 365, NetSuite
Authentication: Email link, SMS code, SSO

Typical Timelines and Processing Expectations

Processing time varies by organization and verification needs; plan for review and routing when scheduling access.

Request Response Window:

Allow 5–15 business days for verification and release

Immediate Access:

May be granted same day for internal records with strong authentication

Retention Start Date:

Retention begins on execution or delivery, as specified

Revocation Processing:

Expect 3–10 business days to process and notify parties

Audit Export:

Exportable audit trail available immediately after signing

Common Errors That Delay or Invalidate Consent

Ambiguous scope descriptions that leave parties unsure which records are covered and whether access includes derivative materials or future records.
Mismatched names or incorrect signer details that prevent custodians from verifying identity against records or require re-execution.
Missing effective or expiration dates, creating uncertainty about the consent’s duration or creating effectively perpetual authorizations.
Failing to attach proof of representative authority when someone signs on behalf of an entity or another individual, causing custodians to refuse release.

Principal Risks and Legal Consequences

Invalid Consent: Consent may be unenforceable

Privacy Breach: Unintended data disclosure risk

HIPAA Exposure: Potential civil penalties under HIPAA

Regulatory Fines: State or federal penalties possible

Contract Disputes: Claims over unauthorized actions

Reputational Harm: Loss of trust and liability

Comparison: eSignature Vendor Pricing and Basic Capabilities

Choose an eSignature provider that supports required authentication, retention, and any sector-specific compliance needs. Pricing and features vary by plan and contract.

	signNow	DocuSign	Adobe Sign	PandaDoc	HelloSign
Starting Price	$8/user/mo	$15/user/mo	$14/user/mo	$19/user/mo	$15/user/mo
Free Trial	7-day trial	Varies	Varies	Varies	Varies
Bulk Send	Yes (Premium)	Varies	Varies	Varies	Varies
Audit Trail	Yes	Yes	Yes	Yes	Yes
HIPAA Compliant	Yes	Yes	Yes	No	No
Envelope Cap	No cap	100 envelopes/user/year	Varies	Varies	Varies

Real-World Examples of Third Party Consents in Use

These brief examples show how organizations use consent forms to authorize third-party access for specific, auditable purposes.

Optica Ventures (Client Authorizes Agent)

Optica implemented a standard consent for investor data access to streamline reporting.

The form specified accounts and date ranges to limit scope.
This reduced back-and-forth with custodians and created a consistent audit trail for compliance and investor inquiries.

Fertility Centers of Illinois (Patient Records)

The center uses a tailored consent form for releasing medical records to third-party clinics.

The consent excludes psychotherapy notes and requires patient ID.
Including clear PHI descriptions and expiration dates made processing faster and reduced requests for reauthorization.

Frequently Asked Questions and Troubleshooting

Answers to common questions about validity, signatures, notarization, revocation, and recordkeeping for Third Party Consent Forms.

Need help? Contact support

Can a consent form be signed electronically?
Yes. Electronic signatures are legally valid under the ESIGN Act (15 U.S.C. ch. 96) and UETA where adopted, provided intent, consent, attribution, and retention are demonstrable.
When is notarization required?
Notarization depends on state law and the document’s purpose. Not all consents need notarization; check the custodian’s requirements or state statute for specific filing or evidentiary uses.
How do I revoke a third party consent?
Revoke in writing and communicate to all parties and custodians. Processing times vary; retain proof of revocation. If HIPAA applies, follow covered entity procedures for revocation.
What if a signer is acting for a business?
Attach proof of authority such as a board resolution or power of attorney. For entity signers, include printed title and confirm signing authority to avoid release delays.
Is special language required for health records?
Yes. Health record releases must include HIPAA-compliant authorization language and a specification of PHI to be disclosed; include expiration and revocation instructions.
How long should signed consents be kept?
Retain consents at least for the active term plus relevant regulatory periods: IRS three years (IRC §6501(a)), HIPAA six years (45 CFR §164.530(j)), or longer if state law requires it.

be ready to get more

Join over 28 million airSlate SignNow users

Sign Now