Key Takeaways
- A HIPAA release form (also called a HIPAA authorization) gives doctors, hospitals and insurers written permission to share your health information with people you name.
- Once a child turns 18, parents need this authorization to get medical information reliably, even if they pay for the child’s insurance.
- A valid authorization names who can share, who can receive, what information is covered, the purpose, an expiration date or event, and your signature.
- A HIPAA release gives access to information only; it does not let anyone make medical decisions for you. That takes a health care power of attorney.
- You can revoke a HIPAA authorization in writing at any time.
What is a HIPAA release form?
HIPAA, the Health Insurance Portability and Accountability Act, includes a Privacy Rule that limits how health care providers, health plans and their business partners can share your “protected health information.” That covers diagnoses, test results, treatment notes, prescriptions and billing records.
A HIPAA release form is your written permission for those organizations to share some or all of that information with specific people. The federal rule calls it an authorization, so you’ll see the terms HIPAA release, HIPAA authorization and medical records release used interchangeably.
Who needs a HIPAA release?
Every adult benefits from one, but it matters most at moments when the people who would naturally help you lose automatic access:
- Young adults turning 18. Parents stop being their child’s legal “personal representative” for most health information once the child becomes an adult.
- Unmarried partners. A partner has no automatic right to information, and providers may not recognize them as family.
- Adult children caring for aging parents. A HIPAA release lets you speak with a parent’s doctors and insurers about bills and care.
- Anyone who travels, lives alone or has a chronic condition. It lets a trusted person coordinate care when you can’t make every call yourself.
What a valid HIPAA authorization must include
The HIPAA Privacy Rule lists the core elements an authorization needs. A properly drafted form will include:
- A specific description of the information to be shared, such as “all medical records” or “records related to my treatment at a named hospital.”
- Who may disclose the information, such as any health care provider or a specific clinic.
- Who may receive it: the names of the people you’re authorizing.
- The purpose of the disclosure. “At my request” is enough when you’re the one asking.
- An expiration date or event, such as a specific date or “upon my written revocation.”
- Your signature and the date.
It must also tell you that you can revoke the authorization in writing, that your treatment can’t be conditioned on signing it, and that information shared under it may no longer be protected by HIPAA once disclosed.
Psychotherapy notes are treated separately and need their own specific authorization. HIPAA itself doesn’t require a HIPAA release to be notarized, although some families choose to notarize it, and some hospitals prefer their own form.
HIPAA release vs. other health documents
| Document | What it does | Decision-making power? | Typical use |
|---|---|---|---|
| HIPAA release | Lets providers share your health information with named people | No | Keeping family informed |
| Health care power of attorney | Names an agent to make medical decisions if you can’t | Yes, when you’re incapacitated | Emergencies and serious illness |
| General medical authorization | Lets non-medical sources (schools, roommates, employers) share informal health updates | No | Day-to-day check-ins |
| FERPA release | Lets a college share education records, which may include campus health records | No | College students |
What a HIPAA release can’t do
A HIPAA release opens the door to information, not decisions. If your adult child is unconscious after an accident, a HIPAA release lets the hospital tell you what’s happening, but it doesn’t give you authority to consent to surgery. For that, your child needs a health care power of attorney.
It also may not cover every health record a college student has. Records kept by many campus health centers are treated as education records under FERPA rather than HIPAA, which is one reason students often sign a FERPA release too.
How to use a HIPAA release
- Sign it before you need it. It’s much harder to get a signature during an emergency.
- Give copies to doctors and keep one handy. Ask your primary care provider to keep it on file, and store a digital copy on your phone.
- Name more than one person if you want both parents, or a parent and a partner, to be able to call.
- Review it after big life changes, such as marriage, divorce or a new partner.
Frequently asked questions
No. A HIPAA release lets providers share your health information with people you name. A medical (health care) power of attorney names someone to make medical decisions for you if you can’t. Most adults benefit from having both.
Not reliably. Providers may share limited information with family in an emergency when they believe it’s in the patient’s best interest, but they aren’t required to. A signed HIPAA authorization removes the guesswork.
HIPAA doesn’t require notarization. A signed and dated authorization that contains the required elements is enough, although some people notarize it for extra assurance and some providers ask you to use their own form.
Until the expiration date or event written on it. Many people choose “until revoked in writing” so it stays in effect, and update it after major life changes.
Keep reading
- Legal Documents to Sign When Your Child Turns 18At 18, parents lose automatic access to medical, school and financial information. Here are the documents every young adult should sign, and why.
- FERPA Release Form: How Parents Can Access College RecordsColleges can't share grades or billing with parents without consent. Learn how a FERPA release form works, what it covers, and the exceptions schools use.
- Power of Attorney for a College Student: A Parent’s GuideWhy college students need a financial and health care power of attorney, what each one covers, how they're signed, and how to choose an agent.
- HIPAA Release vs. Health Care Power of AttorneyA HIPAA release gives access to medical information; a health care power of attorney gives authority to make decisions. Here's how they differ and why you need both.
Don’t get shut out when your child turns 18
Get the HIPAA, FERPA and medical authorization forms your young adult needs signed before they leave home, so you can still get answers in an emergency. The No Brainer Box adds health care and financial powers of attorney and a living will.
- Answer a few simple questions online
- Download your completed, ready-to-sign forms
- Sign them and keep copies in your account
This guide is general educational information written by the No Brainer Forms Team. It is not legal advice, and No Brainer Forms is not a law firm. Laws and signing requirements vary by state; for advice about your situation, talk to a licensed attorney in your state.