Medical Records Release Form: What It Is and How to Fill It Out

A medical records release form is a written authorization that gives a healthcare provider permission to send your medical records to another person, provider, organization, or facility.

You may need one when you're changing doctors, seeing a new specialist, applying for insurance or disability, moving to a new healthcare system, or asking your provider to send records to someone on your behalf.

The form can look more complicated than it really is. Most of the information is straightforward: who you are, which records you want, where they should go, and how long the authorization stays valid.

Here's what to look for on the form, how to fill it out correctly, and what to do if you're asked to provide one.

TL;DR: Key Takeaways

• A medical records release form gives a healthcare provider permission to disclose specified health information to another person or organization.
• You may also see it called a release of medical records form, medical records authorization form, or HIPAA authorization form.
• A valid HIPAA authorization must describe what information is being disclosed, who can disclose it, who can receive it, when it expires, and your right to revoke it in writing.
• You usually don't need to notarize a release form. HIPAA itself doesn't require notarization or a witness signature.
• If you're requesting your own records, HIPAA generally gives you a right to access them without needing a formal authorization, though limited fees may apply for copies.
• Different providers may have different forms. Use the receiving or releasing organization's form when possible.

Need medical care while you're sorting out your records? Book a $39 online urgent care visit with August AI. A US-licensed clinician can evaluate you online, with same-day pharmacy pickup available across all 50 states. The visit does not guarantee a prescription. For medical records requests, contact the medical records or health information management department of the organization that holds your records. August doesn't handle records transfers from other providers.

What Is a Medical Records Release Form?

A medical records release form is a written authorization that lets a healthcare provider disclose specified health information to someone else.

For example, you might sign one asking your current doctor to send your records to a new primary care physician. You could also authorize records to be sent to a specialist, another hospital, an insurance company, an attorney, a school or employer when appropriate, or a family member helping with your care.

The exact form varies by provider. Some offices use a short one-page form. Others use a more detailed HIPAA authorization. Both can be used when they meet the applicable requirements.

For a broader overview of what medical records include and how they're used, see our guide on what medical records are.

Is a Medical Records Release Form the Same as a HIPAA Authorization?

Not always, though the terms are often used interchangeably.

A "release of medical records form" is often the name a hospital or doctor's office gives its form. A "HIPAA authorization" refers more specifically to an authorization that meets the requirements of the HIPAA Privacy Rule.

The distinction matters because HIPAA doesn't require authorization for every exchange of health information. Providers can generally share protected health information with other providers for treatment purposes without a separate authorization from you.

An authorization is typically needed when you're directing a provider to share information for a purpose or with a recipient that HIPAA doesn't otherwise permit.

When Do You Need a Release of Medical Records?

Common situations include:

Changing doctors. Your new doctor may want your previous records, including test results, medication history, imaging, or notes from earlier visits.

Seeing a specialist. A specialist may need records from your primary care doctor to understand your previous treatment.

Moving to another healthcare system. Transferring records helps your new providers understand your medical history. For a broader look at what belongs in your records, see what your medical history includes.

Insurance or disability claims. Insurers or organizations may request specific health information as part of a process.

Having someone help manage your healthcare. You may want records sent to a family member, caregiver, or another authorized person.

How to Fill Out a Medical Records Release Form

Most forms are easier to complete if you work through them section by section.

1. Enter Your Personal Information

Provide the identifying information the provider uses for you. This may include your full legal name, date of birth, address, phone number, patient ID or medical record number (MRN) if you have it, and any other identifiers requested.

Use information that matches the provider's records whenever possible.

2. Identify the Provider Holding Your Records

This is the person or organization authorized to release the information. It might be your doctor's office, a hospital, a clinic, a laboratory, a specialist, or a health system.

If you're not sure which office has the records, check your patient portal, past bills, or contact the provider's medical records department directly.

3. Identify Who Should Receive the Records

Enter the name and full contact information of the person or organization that should receive your records.

For example:

Release records to:

ABC Family Medicine

123 Main Street

City, State ZIP

Phone: 555-555-5555

Fax: 555-555-5555

HIPAA requires the recipient to be identified specifically, so don't leave this section vague.

4. Specify Which Records You Want Released

You usually don't have to request your entire medical history. Most forms give you checkboxes or blank lines for specific records, such as office visit notes, lab results, imaging, medication records, hospital records, or discharge summaries.

Be specific about what you need and the date range. For example:

Office visit notes, lab results, and imaging reports from January 2025 through September 2026.

Some records need additional authorization. Federal or state law can provide additional protections for certain types of information, including substance use disorder treatment records and psychotherapy notes. Other categories may also have additional protections under federal or state law. Checking "all records" doesn't automatically override these requirements, so read the form carefully.

5. State the Purpose of the Release

Some forms ask why you're releasing the records.

Simple, accurate purposes include:

• Transfer of care
• Insurance
• Disability application
• At my request

If the form requires a purpose, keep your answer accurate and straightforward.

6. Choose How You Want the Records Delivered

Options may include a secure electronic portal, email, fax, mail, or direct transfer to another provider.

HIPAA gives individuals a right to request their records in a particular form or format when the provider can readily produce them in that form.

If you're requesting records electronically, use a secure method whenever possible.

7. Check the Expiration and Revocation Sections

A HIPAA authorization needs an expiration date or event. This might be a specific date, a period such as one year from signing, or an event such as the completion of a particular process.

The authorization should also explain how you can revoke it in writing. Revocation generally stops future disclosures made under the authorization, but it does not undo disclosures that were already made in reliance on it.

8. Sign and Date the Form

Finally, sign and date the authorization.

If someone else is signing on your behalf as your personal representative, the form may ask for information about their authority to act for you.

Keep a copy of the completed form for your records.

What Should a Medical Records Release Form Include?

A valid HIPAA authorization generally includes these core elements:

The provider's form may also include a statement that information disclosed under the authorization could be re-disclosed by the recipient and may no longer be protected by HIPAA.

Can You Use a PDF or Word Blank Medical Records Release Form?

Yes, but there's an important caveat: use the provider's own form when possible.

You can find PDF printable blank medical records release forms online, and Word versions exist too. Both can potentially be used if they meet the applicable requirements. The file type itself doesn't determine whether an authorization is valid.

However, the provider holding or receiving your records may have specific requirements about:

• Required patient identifiers
• Where to send the completed form
• Acceptable delivery methods
• Which records can be requested
• Special authorizations for sensitive information

A generic form may contain the basics, but that doesn't guarantee that every provider will accept it. Start with the provider's own form when available. If they don't have one, ask the medical records department what information and format they require.

Do You Need to Notarize a Medical Records Release Form?

Usually not.

HIPAA itself doesn't require an authorization to be notarized or witnessed. However, a specific healthcare organization or state law may have additional requirements in certain cases.

If a form specifically asks for notarization, don't skip that step just because HIPAA doesn't generally require it. Follow the instructions from the organization handling your request.

How Long Does It Take to Get Medical Records?

Under HIPAA, a covered provider generally has up to 30 days to respond to an individual's request for access to their records. A limited extension can apply in certain circumstances.

Some providers respond much sooner, especially when records are available electronically.

There can be reasonable, cost-based fees for copies of records, depending on the circumstances. Providers generally cannot deny an individual's HIPAA access request simply because the individual has not paid a medical bill.

For more on how long providers keep records available in the first place, see how long hospitals and doctors keep medical records.

What If You're Requesting Your Own Records?

There's an important difference between:

• Requesting your own records: HIPAA generally gives you a right to access them.
• Authorizing a provider to send your records to someone else: a formal authorization may be required depending on the situation.

If you just want a copy for yourself, ask about the provider's patient access process. You may not need to fill out a full release form. You may simply need to submit a records request through the patient portal or medical records department.

If you want the records sent to a third party, such as a new doctor, attorney, or insurer, that's when a release of medical records form may be needed.

Common Mistakes to Avoid

• Requesting too little information. If your new doctor needs your medication history and recent labs but you request only one office visit note, you may have to submit another request.
• Using vague recipient information. Write the full name and contact information of the person or organization receiving the records.
• Forgetting to sign. An unsigned authorization generally won't accomplish what you're trying to authorize.
• Leaving the expiration section blank. If the form requires an expiration date or event, complete it as instructed.
• Sending the form to the wrong department. Larger health systems often have separate medical records or health information management departments.
• Using an outdated form. Healthcare organizations sometimes update their forms, so check for the current version before submitting it.

Conclusion

A medical records release form is mainly about giving the right people permission to share the right information.

Before you sign, check four things: what records are being released, who is sending them, who will receive them, and when the authorization expires.

If you're requesting your own records, you may have access rights under HIPAA even without a formal authorization. If you're transferring care, using the new provider's preferred release form can make the process easier.

When in doubt, contact the medical records or health information management department of the organization holding your records. They can tell you which form to use, what to include, and where to send it.