Medical records release form

This article is general information, not legal or medical advice. Rules for releasing health records vary by state and province and by the provider that holds them, so check with your healthcare provider or a qualified professional for the requirements that apply to you.

What a medical records release form is

A medical records release form, sometimes called a medical records authorization or a release of information form, is a written authorization that lets a healthcare provider disclose your protected health information to someone else. Without your signed permission, providers are generally required to keep your records private. The form is how you lift that restriction for a specific person, a specific set of records, and a specific purpose.

You might use one to send your records to a new doctor, to share results with a family member, to give an insurer the information it needs to process a claim, or to provide records to a lawyer handling a case. In each case, the form names who is releasing the records, who is receiving them, exactly what is being shared, and how long the permission lasts.

When you need a medical records release form

You need a signed release any time you want your health information shared with someone who would not otherwise have access. Common situations include:

• Switching to a new doctor or specialist and moving your history to them.
• Letting a spouse, parent, adult child, or caregiver speak with your provider or view your results.
• Sending records to an insurance company for a claim or coverage decision.
• Giving records to an attorney, an employer program, or a disability office.
• Requesting a copy of your own records to keep.

Providers usually will not release records on a phone call or a casual email. A signed form protects your privacy and gives the provider a clear record of what you authorized.

What to include in a medical records release form

A complete release form is specific. Vague forms get rejected or cause the wrong information to be shared. Include each of these:

• Patient details. Full legal name, date of birth, and address so the provider can match the request to the right record.
• The provider releasing the records. The name of the doctor, clinic, or hospital that holds the information.
• Who receives the records. The name and address of the person or organization you are authorizing to receive them.
• What is being released. The specific records, such as a date range, a type of visit, lab results, or the full chart. You can also limit or exclude sensitive categories.
• The purpose. Why the records are being shared, such as continued care, insurance, or personal use.
• An expiration. A date or event when the authorization ends.
• Your right to revoke. A note that you can cancel the authorization in writing at any time.
• Signature and date. The patient signs and dates it, or a legal representative signs on the patient's behalf.

Some providers have their own release form they require you to use. Ask first, because using the provider's own version can speed things up.

Free medical records release template

Copy the template below as a starting point, or open it in the fill tool and type your details onto the page. Every blank line is a field you complete.

AUTHORIZATION TO RELEASE MEDICAL RECORDS

PATIENT
  Name: _______________________________________
  Date of birth: ____________  Phone: ____________
  Address: ____________________________________

I authorize the following provider to release my records:
  Provider / clinic / hospital: _______________________
  Address: ____________________________________

To be released to:
  Name: _______________________________________
  Address: ____________________________________

RECORDS TO BE RELEASED
  [ ] Complete medical record
  [ ] Records from ______________ to ______________ (date range)
  [ ] Lab / test results   [ ] Visit notes   [ ] Imaging
  [ ] Other: ________________________________________

Purpose of release: ____________________________________

This authorization expires on: ____________ (date or event)

I understand I may revoke this authorization in writing at any time,
except where information has already been shared based on it.

SIGNATURE

Patient (or legal representative): ____________________
Print name: ________________   Relationship: ____________
Date: ____________

How to fill out a medical records release form step by step

1. Open the template in the fill tool. Load it into the fill a PDF tool, or start from a ready-made form in the templates library so the labels are in place.
2. Enter the patient details. Type the patient's full legal name, date of birth, and address so the provider can find the right record.
3. Name the provider releasing the records. Write the exact name and address of the doctor, clinic, or hospital that holds the information.
4. Name who receives the records. Add the full name and address of the person or organization you are authorizing to receive them.
5. Specify the records. Tick exactly what is being shared, such as a date range, lab results, or the complete chart. Be specific so nothing extra is sent.
6. State the purpose and expiration. Write why the records are being shared and the date or event when the authorization ends.
7. Sign and date. The patient signs, or a legal representative signs and notes their relationship. Add a signature with the sign a PDF tool.
8. Download and submit. Download a clean copy, keep one for yourself, and send the other to the provider. Your entries are flattened into the page so they cannot be easily changed.

Who can sign a release form

Usually the patient signs their own release. When the patient cannot sign, a legal representative may sign on their behalf, such as a parent for a minor child, a guardian, or a person holding medical power of attorney. The representative should note their relationship to the patient and may need to show proof of their authority. For a patient who has appointed someone to make health decisions, a medical power of attorney form is often what establishes that authority.

Privacy rules: HIPAA in the US and PIPEDA in Canada

Health information is protected by law, and the release form is what allows a provider to share it. In the United States, the main federal rule is HIPAA, which sets standards for how providers protect and disclose protected health information. A valid authorization under HIPAA generally must be specific about what is shared, with whom, for what purpose, and when it expires, and it must tell you that you can revoke it. In Canada, privacy of personal health information is governed by federal and provincial laws, such as PIPEDA and provincial health privacy acts, which similarly require consent to share your records. The practical effect is the same in both countries: a clear, signed authorization is what allows the release.

Your right to revoke

Authorizing a release is not permanent. You can revoke, or cancel, a medical records release at any time by notifying the provider in writing. The one limit is that a revocation cannot undo a disclosure that already happened based on your earlier permission. If you no longer want a person or organization to receive your records going forward, send the provider a written revocation and keep a copy for yourself.

Tips for a release that gets processed quickly

Providers reject incomplete or unclear forms, which delays your request. A few habits help. Match the patient name and date of birth to what the provider has on file. Be precise about the records you want, since a request for the complete chart takes longer than a targeted date range. Sign and date the form, because an unsigned authorization is not valid. If the provider has its own form, use it. And keep a copy of everything you send, so you have a record of what you authorized and when.

Fill and store your release form online

You do not have to print, handwrite, and scan a release form. Open our fill a PDF tool, add the release form or a template, type your details into the correct spots, and download a clean copy to submit. Because the document is processed in your browser, your health details stay on your own device rather than being uploaded to a server, which matters for a form that contains private medical information. Browse the templates library for related consent and authorization forms you can fill the same way, and add a signature with the sign a PDF tool before you download.