HIPAA

(Health Insurance Portability and Accountability Act of 1996) 

regulations require that covered entities obtain a HIPAA

medical release form

(or medical records release authorization form)

before Protected Health Information (PHI) is disclosed. 

​

When is a HIPAA Medical Release Form Required?

In the event that a provider must disclose Protected Health Information (PHI), the provider must generally obtain written authorization from the patient (or the patient’s personal representative). The written authorization form is commonly called a  HIPAA medical release form (or medical records release authorization form). The authorization must be obtained before any PHI can be disclosed.

​​