Compliance Glossary

A HIPAA waiver form, also known as a medical record information release form, allows patients to authorize third parties to access their health records. It also permits healthcare providers to share information when needed. Patients can revoke or change these permissions at any time. Sharing medical records without a HIPAA authorization form is a violation.

HIPAA compliance requires obtaining a signed release form from patients before sharing their protected health information with others, except for routine disclosures related to treatment, payment, or healthcare operations allowed by the HIPAA Privacy Rule. 

When do you need a HIPAA Medical Information Release Form?

• Sharing PHI with third parties for non-standard healthcare purposes, like disclosing information to an insurance underwriter
• Using PHI for marketing or fundraising purposes
• Providing PHI to a research organization
• Disclosing psychotherapy notes
• Selling PHI or sharing it for financial gain