Skip to main content
Intermediate Formal IVT

HIPAA authorization

Pronunciation: HIP-ah aw-thor-ih-ZAY-shun

Written permission allowing disclosure of protected health information beyond standard treatment purposes.

Full Definition

A HIPAA authorization is a detailed written permission that allows covered entities to use or disclose protected health information (PHI) for purposes beyond treatment, payment, or healthcare operations. In psychiatric settings, authorizations are frequently required for releasing information to family members, coordinating care with other providers, or participating in research studies. The authorization must specify what information is being disclosed, to whom, for what purpose, and include an expiration date. Unlike general consents for treatment, HIPAA authorizations must be specific to each disclosure request and can be revoked by the patient at any time. Mental health records often require additional protections under state laws beyond federal HIPAA requirements.

Usage

Usage note: Distinguish from general consent forms; must be specific to disclosure purpose and recipient.

In Context

  • "The patient signed a HIPAA authorization allowing communication with her primary care physician." — medical record
  • "Staff training emphasized the difference between HIPAA authorization and general treatment consent." — compliance education

Also known as

release of information ROI

Don't confuse with

informed consent treatment consent general authorization

Editors from these organisations have used our services since 1998

Reuters BBC Oxford University Press Penguin Random House Springer Microsoft Suncor Energy United Nations Fisher Investments IBM The Home Depot KODAK CHEVRON