Medical Records Release Form Template

A medical records release form is a patient’s signed authorization for you to send their health information to someone else: who sends it, who gets it, what goes, why, and until when. Copy the free form with its release log, see records sent to a new family doctor and a disability claim with counseling notes held back, and check what goes in each part.

  • Free, no account needed
  • Word and text downloads
  • Two filled examples

Blank medical records release form template

Free
MEDICAL RECORDS RELEASE FORM
Authorization to release health information

[Practice or organization name]
[Address, phone, and the fax or secure email for records requests]

THE PATIENT
Full name: [Legal name, and any other name on past records]
Date of birth: [Date]
Address and phone: [Current address and phone]
Record number: [If known]

RELEASE FROM
Practice or clinician: [Who holds the records and will send them]
Sites included: [This site only, or the other locations of this organization that hold records]

SEND TO
Person or organization: [Name, and the clinician, department, or claim number]
Address: [Mailing address]
How to send: [Secure fax, secure email, portal, or mail, with the number or address confirmed with the recipient]
Contact: [Name and phone for questions]

WHAT TO RELEASE
Dates of care: [From and to, or all dates]
Mark yes or no for each.
Visit notes and consultation letters: [Yes or no]
Test results and imaging reports: [Yes or no, and which ones]
Medication, allergy, and immunization lists: [Yes or no]
Hospital, surgery, and discharge reports: [Yes or no]
Billing and payment records: [Yes or no]
The whole record for these dates: [Yes or no]
Something else: [One report, one visit, or other records, described]

SENSITIVE INFORMATION
These records are sent only if you say yes to each one. Some laws protect them more strictly, and some ask for your written permission for each kind.
Mental health and counseling records: [Yes or no]
Substance use treatment records: [Yes or no, and the program's name if they come from a treatment program]
HIV and sexually transmitted infection tests and care: [Yes or no]
Genetic test results: [Yes or no]
Reproductive and sexual health care: [Yes or no]
Psychotherapy notes that a therapist keeps apart from the main record are not released with this form. They need a separate authorization.

WHY
Purpose: [Continuing care with a new clinician, an insurance or disability claim, a legal matter, at my request, or other]

WHEN THIS ENDS
End date or event: [A date, or an event such as when the records arrive or when the claim is decided]
This form can't be used after that date or event, or after you cancel it.

YOUR RIGHTS
Your choice: Your care here, payment for it, and any benefits you're eligible for don't depend on whether you sign. [Or, if the visit is only to produce information for this recipient, such as an insurer's exam, what happens if you don't sign]
If you sign or don't: [What signing makes possible, such as your new clinician seeing your history, and what refusing may mean, such as a claim taking longer]
To cancel: You can cancel this form at any time. Tell [Records contact, address, or email], [in writing, or the other ways we accept]. Cancelling stops future releases. It doesn't recall information already sent.
After it is sent: The recipient may share the information again, and the privacy law that protects it here may no longer apply to it.
Fees: [Any fee for copies and who pays it, or no charge]
Your copy: You will get a copy of this signed form.
Your own records: You don't need this form to get a copy of your own records. [How to ask for your own records]

SIGNATURE
Patient: [Signature, printed name, and date]
If someone signs for the patient: [Name, relationship, and the authority they sign under, such as a power of attorney for health care, a guardianship order, parent of a child, or executor of the estate, with a copy attached]
Witness or staff member: [Name and date, if your organization requires one]

FOR OFFICE USE: RELEASE LOG
Received: [Date, from whom, and how]
Identity and authority checked: [How, and by whom]
Checked on the day of release: [Every part filled in, not expired, not cancelled]
Released: [Which records, with dates, and the number of pages or files]
Held back: [What wasn't sent, and why, or nothing held back]
Sent: [Date, method, destination confirmed, and staff name]
Copy of this form: [Given to the patient, and filed in the record]
Cancelled: [Date and how, or not cancelled]

Use it for

  • Records to a new clinician
  • Disability and insurance claims
  • Lawyers and legal claims
  • Employers and fitness-for-work reviews
  • Family members and caregivers
  • Life insurance applications

Two filled examples. Every part, filled in.

Each one follows the template. Use them to judge how much detail every part needs.

Medical records release form: records to a new family doctor

Family practice; signed at the new clinic’s first visit, sent by the previous clinic

Patient

Robert Lindqvist, born March 14, 1958, age 68, a retired teacher. Moved in September 2026 to be near his daughter, and registered with Dr. Helen Park at Riverside Family Health. A patient of Dr. Arun Mehta at Cedar Grove Medical Clinic from 2009 to August 2026, with type 2 diabetes, high blood pressure, and atrial fibrillation on apixaban.

Release from and send to

From: Cedar Grove Medical Clinic, which has one site. To: Dr. Helen Park, Riverside Family Health, by secure fax. The Cedar Grove records clerk checked the fax number against the one on Riverside’s website and phoned to confirm it. Contact: Riverside’s records coordinator.

What to release

Dates: November 1, 2021, to his last visit on August 20, 2026. For all dates: the problem list, medication and allergy lists, immunizations, and reports of surgery and major tests. Visit notes and consultation letters: yes, including cardiology and urology. Test results and imaging reports: yes, with 5 years of HbA1c, kidney function, and cholesterol results. Hospital and discharge reports: yes, for his 2024 admission with new atrial fibrillation. Billing records: no.

Sensitive information

Mental health records: yes. He was treated for depression after his wife died in 2023, with citalopram until 2025, and wants Dr. Park to know. Reproductive and sexual health care: yes, so his tadalafil prescription and the urology letter go with the rest. Substance use treatment, HIV and STI, and genetic results: no, and none on file.

Purpose, rights, and signature

Purpose: continuing care with his new family doctor. Ends: when the records arrive at Riverside, and no later than January 31, 2027. The coordinator read the rights section with him. He asked whether anyone besides Riverside would see the records: no, only Riverside. No fee: Cedar Grove doesn’t charge for transfers to a patient’s new clinician. Signed by Robert at Riverside on October 28, 2026, witnessed by the coordinator; a copy given to him, and the form faxed to Cedar Grove the same day.

Release log

Received at Cedar Grove by fax on October 29. Matched to his chart by name, date of birth, and his old address; signature compared with the one on file. Rechecked November 3: complete, in date, not cancelled. Released November 3: a 118-page file by secure fax to Riverside’s confirmed number, and Riverside confirmed receipt that afternoon. Held back: nothing. The echocardiogram images stay at the hospital; the report went. Form scanned to his chart by the records clerk.

Authorization and access rules for releasing records. Checked November 2026.

The law where the records are held decides what a release must say, and when a patient’s own request is not a release at all. These are examples: other states, provinces, and kinds of records have their own rules.

United States, what an authorization must contain

A valid authorization describes the information in a specific and meaningful way; names who may disclose it and who may receive it; describes each purpose, where “at the request of the individual” is enough when the patient starts it and gives no other reason; gives an expiration date or event; and has the patient’s signature and date, with a description of a personal representative’s authority if one signs. It must also state the right to revoke in writing and how, whether treatment, payment, enrollment, or benefits can depend on signing, and that the recipient may redisclose the information. It must be in plain language, and when a covered entity asks for it, the patient gets a copy. An authorization for psychotherapy notes may be combined only with another one for psychotherapy notes.

United States, a patient’s own request

Patients have a right to inspect and get a copy of their information in the designated record set, except psychotherapy notes and information compiled for legal proceedings. This is access, not an authorization. The covered entity may require the request in writing if it tells patients so, must act within 30 days, with one extension of up to 30 days if it explains the delay in writing, must provide the form and format asked for if readily producible, and may charge only a reasonable, cost-based fee.

United States, substance use treatment records

Records from a program covered by 42 CFR Part 2 need written consent, on paper or electronic, naming the patient, who may disclose, a specific description of the information, the recipients, each purpose, the right to revoke in writing and how, an expiration date or event, the signature, and the date. Consent for substance use disorder counseling notes may be combined only with another consent for those notes, and consent for use in a legal proceeding can’t be combined with consent for any other purpose.

Ontario, consent to disclose

Under PHIPA, consent must be the patient’s or their substitute decision-maker’s, knowledgeable, related to the information, and not obtained by deception or coercion; knowledgeable means the patient understands the purpose and knows they can give or withhold consent. Express consent, verbal or written, is needed to disclose to someone who is not a custodian, such as an insurance company, or to another custodian for a purpose other than health care. Consent can be withdrawn at any time by notice to the custodian, but withdrawal is not retroactive.

Alberta

Under the Health Information Act, consent to disclose to someone other than the patient is valid only if the custodian tells the patient the information to be disclosed, the purpose, who will receive it, the risks and benefits of consenting or refusing, the date consent takes effect and any expiry date, and that it can be revoked at any time. Consent may be written, electronic, or oral: written or electronic consent is signed, and oral consent is recorded. The disclosure must follow the consent’s terms; a revocation may be written, electronic, or oral, and the custodian records it.

Canada, federal private-sector law

Where PIPEDA applies, consent must be meaningful: people must understand what information is shared, with whom, for what purposes, and the risks of harm. Express consent is generally needed for sensitive information. People can withdraw consent at any time, subject to legal or contractual restrictions and reasonable notice, and must be told what withdrawing means.

What goes in each part.

The patient and who releases

Enough to find the right chart, and the practice or clinician who holds it and will send it.

  • Legal name, and any former name on older records
  • Date of birth, address, phone, and record number if known
  • The practice, clinician, or sites that will send the records

Avoid: Matching on name alone. Two patients can share a name; check the date of birth and address too.

Send to

Who gets the records, and exactly where they go. The recipient and the destination are two separate checks.

  • The person or organization, with the clinician, department, or claim number
  • The mailing address
  • The fax number, secure email, or portal, confirmed with the recipient
  • A contact name and phone for questions

Avoid: Faxing to a number printed on the request without checking it. Confirm it from a source you trust, such as the recipient’s published number.

What to release

The records and the dates, specific enough that two staff members would send the same pages.

  • The dates of care
  • Each kind of record with its own yes or no
  • A whole-record choice for those dates
  • Anything else, described: one report, one visit

Avoid: “Any and all records.” Patients rarely mean billing, every portal message, and 20 years of notes. Ask what the recipient needs.

Sensitive information

Records that many laws protect more strictly. Ask about each one on its own, so a yes to the whole record doesn’t sweep them in.

  • Mental health and counseling records
  • Substance use treatment records, with the program’s name
  • HIV and sexually transmitted infection tests and care
  • Genetic test results, and reproductive and sexual health care
  • A line saying psychotherapy notes kept apart from the record need their own authorization

Avoid: Reading a blank answer as a yes. Treat it as a no, and ask the patient.

Purpose and end date

Why the records are going, and when the permission stops. Both limit what you can send.

  • The purpose in plain words, or “at my request” when the patient gives no other reason
  • An end date, or an event tied to the patient or the purpose
  • That the form can’t be used after it ends or is cancelled

Avoid: Leaving the end date blank. Some laws treat a form with no end date or event as invalid.

Your rights

What the patient needs to know before signing, in words they can follow.

  • That their care doesn’t depend on signing, or the exception that applies
  • What signing or refusing may mean for them
  • How to cancel, and that cancelling stops future releases only
  • That the recipient may share the information again
  • Any fee, their copy of the signed form, and how to get their own records without it

Avoid: Small print the patient can’t follow. Read the rights aloud when needed, and offer an interpreter.

Signature and authority

Who signed, on what date, and what gives them the right to sign if they aren’t the patient.

  • The patient’s signature, printed name, and date
  • For anyone else: name, relationship, the authority they sign under, and a copy of the document
  • A witness or staff member, if your organization requires one

Avoid: Taking “I’m his wife” as authority. Ask for the power of attorney, guardianship order, or other document, and keep a copy.

Release log

What you did with the form. It answers “what did we send, to whom, and when?” months later.

  • When the form arrived, and how
  • How identity and authority were checked
  • A recheck on the day of release
  • What was released and what was held back, with the reason
  • The date, method, destination, and who sent it; the patient’s copy; any cancellation

Avoid: Checking the form only when it arrives. It can expire or be cancelled while it waits in the queue.

Common mistakes, and how to avoid them.

A release form for the patient’s own copy

Patients asking for their own records are making an access request, not authorizing a disclosure. Don’t make them give a purpose or an end date; ask only what you need to find the records, and answer within the time the law where you practice sets.

Sending what the cover letter asks for

An insurer’s or lawyer’s letter asking for the “complete file” doesn’t widen what the patient signed. Send what the form covers, and tell the recipient what it leaves out.

One yes for every kind of record

A single box for “all records” sweeps in counseling notes, HIV results, and genetic tests the patient may not want shared. Ask about each sensitive kind on its own.

No end date

A form with no date or event when it ends may not be valid, and an open-ended one keeps working long after the transfer or the claim is over. Tie the end to the purpose.

Talk through the release. Review the form.

Vero Scribe drafts the release form in your template from the visit, with the patient’s consent, or from your dictation: the recipient, the records and dates, each sensitive kind they said yes or no to, the purpose, and the end date. You review and edit every section, then copy it into your record or export it to Word or PDF. Vero works in 60+ languages.

Try Vero free

Frequently asked questions.

What should a medical records release form include?

The patient’s details; who releases the records and who receives them, with where they go; what to release and for which dates; a yes or no for each sensitive kind of record; the purpose; an end date or event; the patient’s rights, including how to cancel and that the recipient may share the information again; and the signature and date, with the signer’s authority if it isn’t the patient.

Who can sign a medical records release form?

The patient, if they can make the decision. Otherwise, someone with legal authority: a substitute decision-maker or attorney for health care, a guardian, a parent for a young child, or the executor of a deceased patient’s estate. Ask for the document, keep a copy, and note the authority on the form. An older child may control the records of care they agreed to on their own.

Do patients need a release form to get their own records?

No. That is an access request, and many laws give patients a right to their records with a set time to respond, often 30 days, with limited extensions. You can ask for the request in writing, but don’t make the patient give a purpose or an end date.

Do I need a signed release to send records to another doctor?

Not always. Many privacy laws let you share information with clinicians who are treating the patient without a signed authorization, unless the patient has said no. Many practices still use a release when a patient moves to a new clinician, because it settles what goes and leaves a clear record. Some records, such as psychotherapy notes or substance use treatment records, can need written permission either way.

How long is a medical records release valid?

Until the date or event written on it, or until the patient cancels it. Pick an end that fits the purpose, such as when the records arrive or when a claim is decided. Some laws and organizations set a maximum, and some treat a form with no end date or event as invalid.

Can a patient cancel a medical records release?

Yes, at any time. Cancelling stops future releases; it can’t recall what was already sent. Some laws ask for the cancellation in writing, and others accept it in other ways. Record the date, stop anything waiting in the queue, and tell anyone who sends records on your behalf.

Which records need separate permission?

It depends on where you practice, but mental health and counseling records, substance use treatment records, HIV and sexually transmitted infection results, genetic test results, and reproductive and sexual health care often have stricter rules. Ask yes or no for each. Psychotherapy notes kept apart from the main record often need their own authorization.

Is this medical records release form template free?

Yes. Copy it, or download it as a Word or text file. No account needed.

More templates, and guides.

Against medical advice form template

A patient leaving or refusing care: the recommendation, capacity, risks in plain words, alternatives, signature or refusal to sign, and the care still given.

Open the template

Informed consent form template

Consent to a procedure or treatment: benefits, risks, alternatives, capacity, signatures, and the discussion note.

Open the template

Medical consent form for a minor template

A parent names another adult to consent to their child’s care: dates, what it covers, health details, and signatures.

Open the template

Vaccine consent form template

Screening questions, consent or declination, and a record of each dose: lot, expiry, site, observation, and the next dose due.

Open the template

Photography consent form template

Consent to clinical photos, video, or audio: what is recorded, each use chosen separately, the device, storage, and withdrawal.

Open the template

Medical release form guide

The full release workflow this page leaves out: telling access from authorization, checking signers and destinations, privacy controls, and software.

Learn more about Medical release form guide

Release of information with Vero

A six-step checklist and records-request examples for the team that handles releases.

Learn more about Release of information with Vero

Telehealth consent form

Consent to care by video, phone, or message, with its privacy limits.

Learn more about Telehealth consent form

Your template. Filled in from the visit.

Vero writes your notes and letters in the templates you choose, so you review instead of type.

Try Vero free

No credit card required. 10 free actions every month.