FormDraft

Free Medical Release Form Template — Fill Out & Download Instantly

Free — No Sign-Up RequiredPDF & WordUpdated April 7, 2026

A medical release form is a written authorization that allows a healthcare provider to disclose a patient's protected health information (PHI) to a designated recipient. Under the Health Insurance Portability and Accountability Act (HIPAA), healthcare providers generally may not share a patient's medical records or health information without a valid written authorization from the patient.

⚠️ Legal Disclaimer: This template is attorney-reviewed and built to US legal standards. It does not substitute for professional legal advice. For complex situations, we recommend consulting a licensed attorney.

Document Completeness0%
MM/DD/YYYY

Required by HIPAA to verify patient identity

Name of the doctor, clinic, hospital, or practice releasing the records

Full name of the person authorized to receive the information

Name of the organization where the recipient is employed (if applicable)

Describe specifically what records or health information may be disclosed

State the specific reason for the disclosure (required by HIPAA)

MM/DD/YYYY

Date after which this authorization is no longer valid

MM/DD/YYYY

What Is a Medical Release Form Template?

A medical release form is a written authorization that allows a healthcare provider to disclose a patient's protected health information (PHI) to a designated recipient. Under the Health Insurance Portability and Accountability Act (HIPAA), healthcare providers generally may not share a patient's medical records or health information without a valid written authorization from the patient. This template creates a HIPAA-compliant authorization form that specifies who is releasing information, who is receiving it, what information may be disclosed, and the purpose of the disclosure.

When Do You Need It?

You need a medical release form when you want to authorize your healthcare provider to share your medical records with another doctor, specialist, insurance company, employer, attorney, or family member. This form is also needed when a parent authorizes disclosure of a child's health information, when a legal guardian acts on behalf of an incapacitated adult, when records are needed for a personal injury lawsuit, or when transferring care to a new provider. Without a signed authorization, HIPAA prohibits most disclosures of protected health information..

What's Included in This Template

  • Patient identification with date of birth and address
  • Healthcare provider information
  • Recipient identification and organization
  • Specific description of information to be released
  • Purpose of the disclosure
  • Expiration date of the authorization
  • Patient's right to revoke statement
  • Acknowledgment of voluntary authorization
  • Patient signature and signature date
  • HIPAA-compliant authorization language

How to Fill It Out

1
Enter Patient and Provider InformationProvide the patient's full legal name, date of birth, and address. These identifiers allow the healthcare provider to locate the correct records. Enter the provider's name and address — this is the entity that holds the records and will be disclosing the information.
2
Identify the RecipientEnter the name of the person or organization authorized to receive the information. If the recipient is an organization (such as an insurance company, law firm, or employer), include both the contact person's name and the organization name. Limiting the recipient to a specific person or entity prevents unauthorized further disclosure.
3
Describe the Information to be ReleasedSpecify exactly what medical information is being released — for example, 'all records from January 1, 2023 to December 31, 2024' or 'laboratory results and imaging from Dr. Smith's orthopedic practice.' The more specific you are, the more control you maintain over your health information.
4
Set Purpose and ExpirationState the specific purpose for the disclosure (not simply 'at my request,' as HIPAA requires a more specific purpose for certain types of disclosure). Enter the expiration date after which the authorization is no longer valid. A reasonable expiration limits the duration of the authorized disclosure.

Legal Requirements & Notes

Medical release forms in the US are governed primarily by HIPAA (45 CFR Part 164) and state privacy laws. Key considerations:

  • HIPAA Core Requirements: A valid HIPAA authorization must include: (1) specific description of the PHI to be disclosed; (2) identification of the person or entity authorized to disclose; (3) identification of the recipient; (4) description of the purpose; (5) expiration date or event; and (6) the patient's right to revoke. Missing any of these elements may invalidate the authorization.
  • State Privacy Laws: Many states have stricter privacy laws than HIPAA for certain categories of information, including mental health records, HIV/AIDS status, substance abuse treatment records, and reproductive health information. California (CMIA), New York, and Texas have particularly robust state medical privacy frameworks.
  • 42 CFR Part 2: Substance use disorder treatment records are protected by federal regulations (42 CFR Part 2) that impose requirements stricter than HIPAA, including restrictions on redisclosure and specific consent language.
  • Minor Patients: HIPAA generally allows parents to access a minor child's records and authorize disclosures. However, some state laws give minors the right to consent to — and control access to — records related to reproductive health, STI treatment, mental health, and substance abuse, even without parental knowledge.
  • Personal Representatives: A legally authorized representative (parent, legal guardian, healthcare proxy, or holder of a medical power of attorney) may sign a HIPAA release on behalf of an incapacitated patient. Documentation of authority should be attached.
  • Electronic Delivery: HIPAA permits electronic transmission of PHI when appropriate safeguards are in place. Ensure any electronic delivery method complies with the Security Rule (45 CFR Part 164, Subpart C).
  • Frequently Asked Questions

    This template is designed to meet the core requirements of a valid HIPAA authorization under 45 CFR § 164.508, including identification of information to be disclosed, the recipient, the purpose, an expiration date, and the patient's right to revoke. However, individual providers may have their own required authorization forms, and some states impose additional requirements. Verify with your provider whether their own form is required.

    Free Medical Release Form Template (2026) — Medical Records Release Authorization | FormDraft | FormDraft