Download signNow app
4.7 / 5 rating on

HIM19000 Authorization To Disclose Protected Health Information

Use a HIM19000 Authorization To Disclose Protected Health Information 2019 template to make your document workflow more streamlined.

What this authorization form does

HIM19000 Authorization To Disclose Protected Health Information is a written permission form that lets a patient authorize a named person or organization to receive specified health information. The form identifies the patient, authorized recipient, information to disclose, purpose, expiration or revocation terms, and required signatures. In a U.S. healthcare workflow, the covered entity reviews the authorization before releasing records under HIPAA. With signNow, a provider can upload the form, detect fillable fields, send it to the patient, capture an electronic signature, and retain the completed record with its audit trail.

Who uses this authorization form

Healthcare providers

Healthcare providers use the authorization to document a patient’s permission before releasing specified records to another provider, attorney, insurer, caregiver, or family member. Staff should verify the recipient, scope, purpose, expiration, and signature before disclosure.

Patients and representatives

Patients and authorized representatives use the form to direct disclosure of selected medical records. The completed authorization helps recipients request the exact information permitted without expanding access beyond the patient’s stated scope.

How the authorization workflow works

The signNow workflow follows the form from preparation through signed-record retention, while staff verify each disclosure detail before releasing information.

  • Upload form: Upload form
  • Detect fields: Detect fields
  • Send securely: Send securely
  • Store evidence: Store evidence

Complete the authorization in signNow

Follow these steps to prepare HIM19000, obtain the patient’s authorization, and preserve evidence of the completed disclosure permission.

  • Upload form:

    Upload the HIM19000 PDF to signNow.
  • Check fields:

    Review detected fields and add missing ones.
  • Add details:

    Enter the patient and recipient details.
  • Send form:

    Send the authorization to the patient.
  • Save evidence:

    Download the signed form and audit trail.
be ready to get more
Get legally-binding signatures now!
  • Best ROI. Our customers achieve an average 7x ROI within the first six months.
  • Scales with your use cases. From SMBs to mid-market, airSlate SignNow delivers results for businesses of all sizes.
  • Intuitive UI and API. Sign and send documents from your apps in minutes.

Recommended HIM19000 workflow setup

Configure HIM19000 around verified patient identity, limited disclosure scope, documented consent, and retrievable evidence for every completed authorization.

SettingRecommendation
Authentication methodEmail link with SMS OTP
Signature typePatient electronic signature
Audit trailEnabled for every completed form
Document retention6 years under HIPAA 45 CFR 164.530(j)
EncryptionTLS 1.2/1.3 and AES-256 encryption

Key features for HIM19000 workflows

signNow connects form preparation, patient signature collection, disclosure controls, and record evidence in one workflow for HIM19000 authorizations.

Field detection

Upload HIM19000 and let signNow detect fillable fields, reducing manual placement work before staff review the patient, recipient, purpose, and expiration information.

Remote signing

Send the authorization by email or signing link so patients can review and sign without an in-person appointment, subject to the organization’s consent policy.

Audit trail

Capture signer activity, timestamps, and document history in an audit trail that can accompany the completed authorization during records review.

HIPAA workflow

Use HIPAA-compliant signNow workflows with a BAA to help protect protected health information during preparation, signing, and storage.

Controlled templates

Reuse a reviewed HIM19000 template while limiting editing rights to authorized staff responsible for disclosure processing.

Mobile access

Access the form on desktop or mobile devices, allowing patients and staff to complete the authorization when an office visit is impractical.

Security for protected health information

HIPAA protection:

HIPAA compliance with BAA

Transit encryption:

TLS 1.2/1.3 data in transit

Storage encryption:

AES-256 data at rest

Independent assurance:

SOC 2 Type II certified controls

Security certification:

ISO 27001 certified security

Regional compliance:

GDPR and eIDAS support

Find and fill out the correct him19000 authorization to disclose protected health information

airSlate SignNow helps you fill in and sign documents in minutes, error-free. Choose the correct version of the editable PDF form from the list and get started filling it out.

VersionsForm popularityFillable & printable
*2019 UCHealth HIM19000 [2019-03] 20224.8 Satisfied (66 Votes)
*2019 UCHealth HIM19000 [2019-03] 20194.8 Satisfied (156 Votes)

What the audit trail records

The audit trail provides separate evidence from the form fields, showing how the patient’s authorization was authenticated, completed, sealed, and retrieved.

01

Authenticate signer:

Record signer identity evidence
02

Timestamp events:

Capture each event timestamp
03

Hash document:

Record document history
04

Seal record:

Seal completed record
05

Log actions:

Preserve signer actions
06

Export trail:

Export audit evidence

Record retention and audit practices

Preserve the signed authorization, disclosure scope, and supporting audit evidence according to HIPAA retention and internal records policies.

Retain authorization records for six years

HIPAA requires covered entities to retain the authorization documentation for 6 years from creation or the last effective date. Set a retention rule that preserves the signed form and related evidence for at least this period under 45 CFR §164.530(j).

Export the audit trail with the form

Export the completed form and signNow audit trail together, preserving signer identity evidence, timestamps, actions, and the final document. Store the export in an access-controlled repository with a documented retrieval process for compliance reviews.

Restrict access to completed forms

Limit access to staff involved in authorization review, disclosure, or records management. Use role-based permissions and remove access when duties change, because the completed form contains patient-related information and disclosure instructions.

Preserve changes and revocations

Document any revocation, expiration, correction, or replacement authorization alongside the original record. Do not overwrite the signed form; preserve the original and record the later event with its date and responsible user.

Retention schedule for signed authorizations

Keep the completed HIM19000 authorization and its supporting evidence according to the applicable HIPAA documentation rule; unrelated record classes do not control this form.

01

6 years from creation or date

HIPAA requires authorization documentation retention under 45 CFR §164.530(j).
02

Not applicable to health records

IRS rules do not govern this health-information authorization.
03

Not applicable to employment records

I-9 rules do not govern this health-information authorization.
04

Not applicable to brokerage records

SEC broker-dealer rules do not govern this authorization.
05

Not applicable to safety records

OSHA rules do not govern this authorization.

Privacy and disclosure pitfalls

  • Sending the completed form through unsecured email can expose names, diagnoses, dates of service, or other protected health information.
  • A missing patient signature, date, purpose, recipient, or expiration term can prevent the covered entity from honoring the authorization.
  • Selecting an overly broad record category may disclose more protected health information than the patient intended.
  • Leaving shared templates or completed forms accessible to unauthorized staff can create an avoidable access-control failure.

Managing users and permissions

  • Health information managers can maintain a controlled HIM19000 template, assign staff permissions, and require authorized senders to collect patient signatures. Shared templates reduce changes to recipient, purpose, expiration, and disclosure fields while preserving an auditable workflow for each completed authorization.
  • Clinic administrators can delegate sending without granting every employee broad document access. signNow user administration, templates, audit trails, and mobile apps help separate preparation, signature collection, review, and retention responsibilities for protected health information workflows.

Troubleshooting authorization workflows

Use these answers to resolve signature, scope, privacy, plan, and retention questions before releasing protected health information.

HIM19000 has no patient signature. How should it be corrected?

A HIPAA authorization includes an unclear recipient. What should staff do?

Does signNow support HIPAA workflows for this authorization?

Which signNow plan includes this document’s audit trail?

Can a patient sign this authorization from a phone?

How long should the completed authorization be retained?

ROI at a Glance

Key performance indicators that demonstrate SignNow's proven track record.

28M+Documents signed
13+Years in business
4.6/5Average G2 rating

BE READY TO GET MORE

Get this form now!

If you believe that this page should be taken down, please follow our DMCA take-down process.