Which parts of a medical authorization form must the patient complete?

Fields the Patient Should Complete or Confirm

Medical authorization forms vary by provider, hospital, insurer, and law office. Even so, a valid authorization generally needs enough information to identify the patient, describe what may be released, identify who may release it, and state who may receive it.

The patient should complete or carefully confirm the following fields:

• Patient information: Full legal name, date of birth, current address, and any former name used with the provider. A medical record number may help if it is known. A Social Security number should not be added unless the form requires it and there is a legitimate need for it.
• Provider or facility: The name and address of each hospital, clinic, physician’s office, therapy facility, imaging center, pharmacy, ambulance service, or other record holder covered by the form.
• Information being released: The form should identify the requested material, such as clinical notes, imaging reports, test results, discharge instructions, billing records, itemized statements, or the complete chart.
• Date range: The patient should enter the beginning and ending dates for the requested records. If treatment is continuing, the form may permit language such as the accident date through the present, but the provider’s instructions control.
• Recipient: The person or organization permitted to receive the records, including an accurate address, secure fax number, or other requested contact information.
• Purpose: The form may state that the disclosure is for the patient’s use, legal representation, or evaluation of a personal injury claim.
• Expiration: The authorization should state when it expires, either through a date or a defined event allowed by the form.
• Signature and date: The patient normally signs and dates the completed form. Some providers also request a witness or additional identifying information.

North Carolina generally treats confidential medical information as protected information that may be furnished with the patient’s authorization. N.C. Gen. Stat. § 8-53 addresses the confidentiality of information obtained through the provider-patient relationship and recognizes patient authorization as a basis for furnishing records.

Choosing the Records and Date Range

For a personal injury claim, the requested records should match the reason for the request. Common materials include emergency records, office notes, diagnostic reports, therapy notes, prescriptions listed in the chart, discharge summaries, and medical bills. An itemized bill is different from a treatment record, so the request may need to identify both.

A practical starting point is to list every provider involved in care following the accident and request records from the accident date through the most recent relevant visit. Earlier records may sometimes matter if there is a dispute about whether a condition existed before the accident. That does not mean every provider should automatically receive an unlimited authorization for the patient’s entire medical history.

Before signing, the patient should check whether the form authorizes:

• The complete chart or only selected categories of records.
• Records from one provider or any provider.
• A limited treatment period or the patient’s entire history.
• Medical bills as well as clinical records.
• Direct disclosure to a law office, insurer, or another recipient.
• Repeated requests until the authorization expires.

A patient completing intake paperwork can use a medical-record request checklist to identify the providers, treatment dates, and types of documents that may be needed.

Pay Attention to Sensitive-Information Sections

Some forms contain separate checkboxes or initials for categories such as mental health information, substance-use treatment, HIV-related information, or other sensitive records. The patient should read these sections carefully and authorize only the information intended for disclosure. A provider may require additional language or a separate form for certain records.

The patient should also review statements explaining the right to revoke the authorization, whether treatment or benefits are conditioned on signing, and the possibility that information could be disclosed again by the recipient. Revocation generally does not undo a disclosure already made in reliance on a valid authorization.

If an insurance company supplies the authorization, read its scope closely. North Carolina law requires certain insurance disclosure authorizations to be dated and to identify the types of people who may disclose information, the nature of the information, the recipient, the purpose, and the authorization period. It also provides for the individual to receive a copy. N.C. Gen. Stat. § 58-39-35 describes these requirements for covered insurance transactions.

Can an Adult Child Fill Out the Form for a Parent?

An adult child may usually help a parent gather provider names, treatment dates, addresses, and other factual details. The parent should review the completed form and ordinarily must sign and date it personally.

If someone signs as the patient’s legally authorized representative, the form should identify that person’s authority. The provider may ask for documentation showing that authority. Being a family member or helping with paperwork does not, by itself, necessarily authorize someone to sign for a competent adult patient.

A medical-record authorization is also different from permission to make health care decisions. The purpose here is to permit the use or disclosure of records, not to authorize treatment.

How This Applies to the Intake Paperwork

For a person helping a parent after an accident, begin by creating a provider list. Include the ambulance service, emergency department, imaging facility, follow-up offices, rehabilitation providers, and any other facility connected to the injuries. Add approximate first and last treatment dates and note whether each provider issued separate bills.

Next, compare that list with each authorization. Confirm that the correct provider is named, the requested date range is accurate, and both records and itemized bills are included when needed. The parent should then review the recipient, purpose, sensitive-information choices, and expiration language before signing.

Keep a copy of every signed authorization. It is also useful to preserve appointment summaries, bills, insurance statements, claim letters, and communications showing when records were requested or received. For more information about the process, see how medical records and bills may be gathered for an injury claim.

Common Authorization Mistakes to Avoid

• Signing a form before the provider, recipient, record scope, or date range is filled in.
• Using a nickname that does not match the provider’s file.
• Requesting records but forgetting itemized billing information.
• Leaving required checkboxes or initials blank.
• Entering an inaccurate fax number or recipient address.
• Allowing the authorization to expire before the request is processed.
• Assuming that helping a parent complete the form gives the helper authority to sign it.
• Failing to save a copy of the signed form and the request sent with it.