HIPAA Medical Release Form

HIPAA Medical Release Form

medical release formThere are certain circumstances in which it is required for behavioral health professionals to receive a HIPAA medical release form before they are permitted to disclose protected health information (PHI). HIPAA medical release form requirements are discussed below.

What to Include in a HIPAA Medical Release Form

When drafting a medical release form, it is important that it is written in plain language, without any jargon, ensuring that it is easily understandable to patients. The medical release form must be given to patients to review before they sign the document.

The following must be included in the medical release form:

  • A description of the PHI that may be shared or disclosed.
  • The purpose for the PHI disclosure.
  • The name of the entity or person(s) with whom the PHI will be shared.
  • A date by which the authorization for the disclosure will expire.
  • The signature of the patient.

If a personal representative is signing on behalf of the patient, covered entities must also include a description of the representative’s relationship patient, and documentation of the representative’s authority to act on behalf of the patient. Within the medical release form, there must be a statement regarding the patient’s rights with respect to the authorization.


  • The right to revoke the authorization for disclosures, including procedures for how to revoke the authorization.
  • The patient’s right to be free from retaliation or other penalty for failing to sign the authorization.

State medical release form requirements may differ from federal HIPAA requirements. Those states that have stricter requirements than HIPAA, must also be adhered to for behavioral health professionals operating in that state.

When is a Medical Release Form Required?

A HIPAA medical release form is required when PHI disclosures fall outside of the treatment, payment, or healthcare operations. The following are instances in which a HIPAA medical release form is required:

  • Prior to any disclosure of PHI to a third party for any reason other than treatment, payment, or healthcare operations.
  • Prior to disclosing PHI that may be used in marketing or fundraising efforts.
  • Prior to disclosing PHI for research purposes.
  • Prior to the disclosure of any psychotherapy notes.
  • Prior to PHI being disclosed or shared for monetary compensation.

HIPAA Resources

Need assistance with HIPAA compliance? Compliancy Group can help! They help you achieve HIPAA compliance with Compliance Coaches® guiding you through the entire process. Find out more about the HIPAA Seal of Compliance® and Compliancy Group. Get HIPAA compliant today!

Your TBHI Professional Training Options

TBHI specializes in teaching you how to relax when delivering telehealth.  It offers you a step-by-step learning path of online training that helps you be legally and ethically compliant, clinically proficient, and able to handle even the most difficult of clinical scenarios. Take advantage of COVID discount pricing to learn how to sit back and enjoy your telehealth experiences, rather than struggling with ZOOM fatigue and clinical uncertainty. All courses are evidence-based, available 24/7 through any device and most count toward legal and ethical requirements for licensure. Two micro certifications are also available.

    1. Telehealth Group Therapy  — Exciting, highly interactive telehealth learning experience designed to get answers to your questions about legally and ethically managing telehealth group therapy. Digital class will allow you to connect with colleagues ahead of time to ask questions and share answers. Distinguished faculty will lead you through telehealth group therapy theory and exercises.
    2. Telehealth Clinical Best Practices Workshop — Live, interactive webinar, w/ 4 CME or CE hours to discuss preventing and handling complex clinical issues.
    3. Course Catalog
    4. Micro Certifications to give you a broader range of legal and ethical grounding, and allow you to distinguish yourself as a TBHI-credentialed professional on your websites, in social media, directories and other areas.

Disclaimer: The views and opinions expressed in the article and on this blog post are those of the authors. These do not necessarily reflect the views, opinions, and position of the Telebehavioral Health Institute (TBHI). Any content written by the authors are their opinion and are not intended to malign any organization, company or individuals.

Rate this post!

(4 raters, 20 scores, average: 5.00 out of 5)

Leave a Reply

Name and email are required. Your email address will not be published.

This site uses Akismet to reduce spam. Learn how your comment data is processed.