HIPAA: Health Insurance Portability and Accountability Act of 1996 - Includes Privacy Rule requirements, Security Rule requirements, minimum necessary standard, and patient rights regarding their health information

State Privacy Laws: State-specific medical privacy laws that may include additional privacy protections, specific requirements for mental health/HIV/AIDS/substance abuse records, and varying retention periods

42 CFR Part 2: Federal regulations specifically governing the confidentiality of substance use disorder patient records

HITECH Act: Health Information Technology for Economic and Clinical Health Act - Covers electronic health record requirements and security breach notification requirements

ADA: Americans with Disabilities Act - Includes confidentiality requirements for medical information and accessibility considerations

Patient Identification Requirement: Mandatory element of the authorization form that must clearly identify the patient whose information is to be released

Information Description Requirement: Mandatory element specifying what specific health information is authorized to be released

Purpose Disclosure Requirement: Mandatory element stating the purpose for which the information can be disclosed

Recipient Identification Requirement: Mandatory element identifying who is authorized to receive the disclosed information

Expiration Requirement: Mandatory element specifying when the authorization expires (date or event)

Revocation Right: Mandatory statement explaining the right to revoke the authorization

Redisclosure Statement: Mandatory statement explaining that disclosed information may be subject to redisclosure by the recipient

Conditional Treatment Statement: Mandatory statement about whether treatment is conditional on signing the authorization

Signature Requirements: Mandatory elements including signature of patient or representative and date

Sensitive Information Authorization: Special authorization requirements for sensitive information such as mental health, HIV/AIDS, and substance abuse records