Skip to content
US Free Templates

FREE TEMPLATE · 2026 EDITION

HIPAA Medical Records Authorization Draft Template

Prepare a defined records disclosure with named senders and recipients, information categories, purpose, expiration, revocation contact, and sensitive-record review.

Free PDF & Word40 detailed inputsNo signupBlank or filled
Customize your template

YOUR ONLINE TEMPLATE EDITOR

Your details, step by step0 of 40 fields filled

STEP 1 OF 6

Document details

Set the date, jurisdiction, and your internal reference. * Required for completion.

1 / 6

Take your template with you

Choose the version you need. All four download options are free.

A 10-second countdown appears before download.

Your entries stay in browser memory. Download before leaving.

MAKE THE DOCUMENT WORK FOR YOUR SITUATION

About this hipaa medical records authorization draft

Prepare a defined records disclosure with named senders and recipients, information categories, purpose, expiration, revocation contact, and sensitive-record review. This editable template brings the key details into one document: patient & authority, information, purpose & expiration, rights, revocation & copy. Complete it online, compare the live preview with your records, and download a blank or completed PDF or editable Word document.

What the template includes

The online builder and downloaded documents use the same fields. A selected state can add relevant research prompts. Complete only applicable items; add explanations for exceptions rather than assuming a blank entry resolves them.

Document details4 inputs +

Set the date, jurisdiction, and your internal reference.

  • Document date *
  • US state *
  • County
  • Document reference
Patient & authority11 inputs +

Specify the signer’s representative authority when the patient is not signing.

  • Patient full legal name *
  • Patient birth date *
  • Patient address *
  • Patient contact
  • Personal representative name
  • Representative authority and evidence
  • Provider or entity authorized to disclose *
  • Disclosing entity address *
  • Recipient full name or organization *
  • Recipient address *
  • Recipient contact *
Information, purpose & expiration12 inputs +

Name the actual records and time range; avoid an unlimited all-records request.

  • Specific information categories *
  • Record period start
  • Record period end
  • Purpose of disclosure *
  • Requested format
  • Secure delivery method *
  • Expiration date or specific event *
  • Excluded information
  • Psychotherapy notes
  • Substance-use records and Part 2 review needed
  • Additional state-sensitive categories and consent review
  • Any remuneration or marketing use to review
Rights, revocation & copy6 inputs +

The final authorization must include required statements, not only these entries.

  • Where written revocation should be sent *
  • Written revocation process *
  • Any lawful conditioning exception to review
  • Redisclosure risk explained?
  • How the signed copy will be provided
  • Provider official form or final wording reference
Additional details & signing7 inputs +

Add attachments, exceptions, and the names of authorized signers.

  • Attachments / supporting records
  • Exceptions / additional terms
  • First signer printed name
  • First signer title
  • Second signer printed name
  • Second signer title
  • Signing date

How to complete it

  1. 1. Document details

    Set the date, jurisdiction, and your internal reference. Review document date, us state, county, document reference against your source records.

  2. 2. Patient & authority

    Specify the signer’s representative authority when the patient is not signing. Review patient full legal name, patient birth date, patient address, patient contact and the remaining details against your source records.

  3. 3. Information, purpose & expiration

    Name the actual records and time range; avoid an unlimited all-records request. Review specific information categories, record period start, record period end, purpose of disclosure and the remaining details against your source records.

  4. 4. Rights, revocation & copy

    The final authorization must include required statements, not only these entries. Review where written revocation should be sent, written revocation process, any lawful conditioning exception to review, redisclosure risk explained? and the remaining details against your source records.

  5. 5. Additional details & signing

    Add attachments, exceptions, and the names of authorized signers. Review attachments / supporting records, exceptions / additional terms, first signer printed name, first signer title and the remaining details against your source records.

Practical tips

  • Treatment consent and records disclosure authorization are different documents.
  • A patient’s own records-access request can follow different HIPAA rules from an authorization to a third party.

Before signing or submitting

This is a planning and attorney-review draft, not an execution-ready statutory form. It has not been reviewed by a lawyer. State law can require particular wording, notices, witnesses, notarization, capacity, disclosures, or court procedures. Use the linked official form when appropriate and obtain jurisdiction-specific review before signing.

Frequently asked questions