Medical records release form: name the records and the recipient

A medical records release form is a patient's written permission for a provider to send specific records to a named recipient for a stated purpose. It works only when the records, the recipient, the purpose and an end point are described clearly enough that a records office can tell what is allowed. Have your counsel and records office approve the wording, the identifiers they need and the handling of sensitive categories before you use it.

What this agreement means

What the patient agrees to, in plain words

  • This form lets your clinic send the records you name, to the recipient you name, for the purpose you choose.
  • It does not let anyone else see your records, and it does not cover records you did not name.
  • You can cancel it in writing. Cancelling stops future releases, but it does not undo a copy that has already been sent.
  • Once a copy leaves the clinic, the recipient may be able to share it again. Ask the records office what it can and cannot control after sending.

Drafting aid, not legal advice. Have your own counsel and records office approve the final wording and the process for signing, sending and tracking releases.

Field blueprint

Fields that make the release specific enough to act on

FieldTypeRequiredWhy you ask it

Patient name

Use the name you were registered under at the clinic.

Short textRequired

Matches the request to the records the office holds.

Patient date of birth

DateRequired

A second identifier that helps the records office confirm the right person. Ask only for identifiers the office really uses.

Records to release

Visit notesLab resultsImaging reportsDischarge summariesMedication list
Multiple choiceRequired

Limits the release to the categories the patient chose. A request for everything needs more review before anything is sent.

Other records, described

Leave this blank unless you need a category that is not listed above.

Short textOptional

Lets the patient name a category the list does not cover. A vague description is a reason to ask the records office first.

Date range of records

Write both dates, such as January 1, 2024 to January 31, 2026.

Short textRequired

A defined range is easier to honor and to review. Open-ended ranges belong in a separate, reviewed process.

Recipient name and organization

Short textRequired

Names who receives the records. The form should not accept a recipient described as anyone who asks.

Recipient address, fax or secure portal

Long textRequired

States where the records will go. The records office should confirm this before anything is sent.

Purpose of the release

Continuing care at another providerInsurance or benefitsLegal matterPersonal records
Single choiceRequired

The purpose changes what can go out and what must be reviewed. Use the purposes your counsel has approved, and if none fits, stop and ask the records office.

When the release ends

On a specific dateWhen the purpose is finished
Single choiceRequired

An authorization with no end point is hard to track. Set one before the patient is asked to agree.

End date or ending event

Write a date, or describe the event that ends the release.

Short textRequired

Gives the records office something it can check. Ongoing is not an end point.

Sensitive categories

Select only the categories counsel has approved for this form.

Mental health or psychotherapy notesSubstance use treatment recordsHIV test resultsGenetic test results
Multiple choiceOptional

These categories can carry extra protections under federal or state rules. Leave them off unless counsel has told you how to handle them.

Cancellation statement

I understand I can cancel this release in writing at any time
Multiple choiceRequired

Records that the patient read how to cancel. Your counsel should approve the exact wording.

Questions to leave out

Items that turn a release into an open-ended permission

Release all of my records, for any purpose, with no end date.

An open permission is hard to limit later and hard for a records office to review. Name the records, the purpose and an end point instead.

Send copies to anyone who asks.

A release needs a named recipient. A permission for anyone who asks is a different kind of decision and needs its own review.

Include my mental health, substance use or genetic records by default.

These categories can have extra protections. Make them an explicit choice that counsel has reviewed, not a box that is ticked for everyone.

Send records to my employer so they can review my health.

Employment is a sensitive purpose with its own rules. Route it to counsel instead of a standard release form.

After a response arrives

What the records office does with each release

  1. Check identity and scope before anything is sent

    Compare the request with the identifiers your records office uses, and confirm the recipient and end point. A submitted form starts the check; it does not complete it.

  2. Track releases in your own records system

    Each request is listed in the grid. The form does not track when records are sent or who received them, so log the date, recipient and scope in your records system.

  3. Plan for the hourly processing schedule

    Processing happens on an hourly production run, and only after it does the creator get notified. Build that delay into any deadline a patient or recipient gives you.

  4. Handle cancellations and exports carefully

    If a patient cancels in writing, stop future releases and note the date. CSV exports list names, dates and recipients, so restrict exporting to the staff who log releases.

Frequently asked questions

What is the difference between a medical release form and a medical records release form?

The phrase medical release form can mean many different documents, including a permission for a child to receive treatment. A medical records release names the records, the recipient and the purpose. Use the wording that matches the decision you need, and do not reuse a treatment permission as a records release.

Is a medical records request form the same as a release?

No. A request is what someone sends to ask for records. A release is the patient's permission for a provider to send them. Keeping the two on separate forms makes it clear who is asking and who is allowing.

Does a medical records release have to follow HIPAA?

HIPAA is a US federal health privacy law. It does not prescribe one fixed form, but it does list required parts of a valid authorization for many disclosures. Whether it applies to your organization, and whether your wording has every part it needs, is a question for your counsel or compliance lead.

Can I get the release as a PDF or Word file?

Patients open the form through a link, and there is no PDF or Word copy to download. Keep the approved wording in your own document system, and check that the online version matches it.

Browse by category

More consent forms in Healthcare & Medical

How to build it

  1. Choose a category and a form type in the wizard. Answer three Atty Suggestions questions, then give the form a title. Atty builds the fields in the background. Edit the fields and ask Atty to refine them, then publish and share the /f/ link.

Attain OS BETA