.svg){kind=small}
Free HIPAA consent / release form generator
Let a patient authorize the release of their health records the way HIPAA requires. This generator builds an Authorization for Release of Health Information with the core elements and statements set out in the HIPAA Privacy Rule (45 CFR §164.508). Preview it as you type, then download it as an editable Word document or PDF. Everything runs locally in your browser, so no data leaves your device and no sign-up is needed.
Authorization details
Patient
Who may release the information
Who may receive it
What information
Purpose
Expiration
Provide an expiration date or an event. Whichever you fill in appears on the form.
HIPAA AUTHORIZATION FOR RELEASE OF HEALTH INFORMATION
Patient: [Patient Name]
Date of birth: [Date of birth]
Authorization
I, [Patient Name], authorize [Provider or Organization] to release the health information described below to [Recipient Name].
Information to Be Released
The following health information may be released: [describe the records to be released, for example office visit notes from January to June 2026].
Purpose of Disclosure
The information is being released for the following purpose: [purpose of the disclosure, for example continuing care, personal use, or legal].
Expiration
This authorization expires on [expiration date or event].
Your Rights
I understand that I have the right to revoke this authorization at any time by submitting a written request to the organization named above that holds my records. Revoking it will stop any further release of my information, but it will not apply to information that was already released while this authorization was in effect.
I understand that the organization may not condition my treatment, payment, enrollment in a health plan, or eligibility for benefits on whether I sign this authorization, except where the law specifically allows it, such as research-related treatment or an evaluation performed solely to create records for a third party.
I understand that information released under this authorization may be redisclosed by the recipient and may then no longer be protected by federal privacy law.
Signature
Patient (or personal representative) signature: __________________________ Date: ________________
If signed by a personal representative, print name: __________________________
Relationship to patient and authority to act: __________________________
Generated by BlockSurvey
How the consent / release form generator works
01
Fill in the details
Enter the patient, who may release the records, who may receive them, the information to be shared, the purpose, and an expiration in a short guided form.
02
Review the live preview
Watch the authorization assemble in real time, with the HIPAA-required elements and statements written in plain language.
03
Download and sign
Export a ready-to-sign PDF or an editable Word file. Nothing you enter ever leaves your device.
Free, secure, and HIPAA-standard by default
Releasing records should not mean paying for a template or handing patient details to someone else's server. Every form this tool produces follows the authorization requirements of 45 CFR §164.508:
01
100% in-browser
The form is built on your device; nothing is uploaded.
02
No account required
No sign-up, no email wall, no tracking.
03
Free, real download
The complete form as Word or PDF at no cost, not a watermarked sample.
What a valid HIPAA authorization must include
Under 45 CFR §164.508(c), a valid authorization has to contain, in plain language:
- A specific and meaningful description of the information to be released.
- The name of the person or organization allowed to release the information.
- The name of the person or organization allowed to receive the information.
- The purpose of the requested disclosure.
- An expiration date or an expiration event that relates to the patient or the purpose.
- The patient's signature and the date, or the signature and authority of a personal representative.
- Three required statements: the right to revoke, whether treatment or payment can be conditioned on signing, and the risk that released information may be redisclosed.
Built For Every Healthcare Organization
Records move between providers, patients, attorneys, and insurers every day. This tool helps you capture clean, compliant permission before anything is shared, and it works alongside HIPAA-compliant survey software when you collect health data through forms.
01
Clinics sending records to specialists
Get written permission before you refer a patient and forward their chart.
02
Patients requesting their own records
Direct a copy of your records to a new doctor, family member, or app.
03
Attorneys & insurers
Collect a signed release before you request records for a claim or case.
04
Behavioral health practices
Handle the extra care that mental health and psychotherapy records require.
05
Dental & vision offices
Release imaging and treatment history to other providers on request.
06
Billing companies & MSOs
Authorize claims and payment records for the practices you support.
Collecting PHI through forms or surveys?
HIPAA-compliant survey software from BlockSurvey signs a BAA with you, so the tool you use to gather health data is covered too.
More free HIPAA tools
Explore more →
These tools help you document compliance. When you need to collect PHI itself, you need a BAA and encryption in the product: HIPAA-compliant survey software.
Frequently Asked Questions
- It is a written form a patient signs to let a provider share their protected health information with a specific person or organization. HIPAA generally requires this signed authorization before a covered entity discloses health records for anything other than treatment, payment, or routine health care operations. The form has to identify what information may be shared, who may share it, who may receive it, the purpose, an expiration date or event, and the patient's signature and date, under 45 CFR 164.508. This generator prompts you for each of those elements.