Permission To Share Medical Information Form Template for the United States

When you need to share your medical information with someone outside your healthcare team, you'll need a Permission To Share Medical Information Form. This document serves as your formal authorization under federal HIPAA laws, allowing healthcare providers to release your protected health information to designated third parties. Without this form, healthcare providers cannot legally share your medical records with family members, employers, insurance companies, or other parties who aren't directly involved in your care.

When do you need this document?

You'll need this form whenever you want your medical information shared beyond standard treatment, payment, or healthcare operations. Common situations include authorizing your spouse to access your medical records during a hospital stay, allowing an employer to receive fitness-for-duty evaluations, or permitting a specialist to share test results with your primary care physician. The form is also essential when applying for disability benefits, life insurance, or when legal proceedings require medical documentation. If you're dealing with mental health treatment, substance abuse recovery, or HIV/AIDS care, additional protections may require more specific authorization forms.

Key legal considerations

Your authorization must be specific about what information can be shared, who can receive it, and how long the permission lasts. You have the right to limit the scope of information released-for example, you might authorize sharing of surgical records but not psychiatric evaluations. The form must include an expiration date or triggering event, and you can revoke the authorization at any time in writing. Be aware that once information is shared, the recipient may not be bound by the same privacy protections that apply to your healthcare provider. Substance abuse treatment records require additional protections under 42 CFR Part 2, often requiring separate, more restrictive authorization forms.

Legal requirements in United States

Under HIPAA's Privacy Rule, your authorization must contain specific required elements including your name and identification information, description of the information to be disclosed, identification of who will receive the information, and your signature with date. The form must include statements about your right to revoke the authorization and potential re-disclosure by recipients. State laws may impose additional requirements-some states require witness signatures for certain types of medical information, while others have stricter protections for mental health or genetic information. The HITECH Act strengthens these protections by requiring healthcare providers to account for disclosures and allowing patients to request electronic copies of their records. Healthcare providers must retain copies of signed authorization forms and cannot condition treatment on your willingness to sign an authorization unless the treatment is specifically for the purpose of creating health information for disclosure to third parties.