HIPAA Authorization Form - Connecticut
AUTHORIZATION TO USE OR DISCLOSE HEALTH INFORMATION
Connecticut — General HIPAA Form with State-Law Gate
Complete every required field. This form does not decide whether Connecticut
requires a different form, additional wording, initials, witnesses,
notarization, expiration, representative authority, or recipient restriction.
Resolve Section 1 before signature.
1. STATE AND SPECIAL-RECORD OVERLAY
| Review item | Result |
|---|---|
| Releasing entity and HIPAA status | [________________________________] |
| Record custodian and location | [________________________________] |
| Current Connecticut law or official form checked | [________________________________] |
| State-required form or addendum attached | ☐ Yes ☐ No ☐ Not required |
| Mental-health or psychotherapy records | ☐ No ☐ Yes — separate review/form completed |
| Substance-use-disorder records | ☐ No ☐ Yes — separate review/form completed |
| HIV, genetic, reproductive-health, or other specially protected records | ☐ No ☐ Yes — separate review/form completed |
| Minor, deceased person, guardian, or other representative | ☐ No ☐ Yes — authority verified |
| Research, marketing, sale, remuneration, or conditioned service | ☐ No ☐ Yes — special authorization reviewed |
| Court, subpoena, employment, school, insurance, or government use | ☐ No ☐ Yes — purpose-specific rules reviewed |
| Additional federal or local rule | [________________________________] |
Reviewer and date: [________________________________] / [__/__/____]
Attached authority/form: [________________________________]
2. INDIVIDUAL
| Item | Information |
|---|---|
| Full name | [________________________________] |
| Date of birth | [__/__/____] |
| Address | [________________________________] |
| Telephone/email | [________________________________] |
| Record or account number, if used | [________________________________] |
3. PERSON OR CLASS AUTHORIZED TO DISCLOSE
I authorize the following person(s) or specifically identified class to make the
use or disclosure described below:
| Name or class | Address/contact |
|---|---|
| [________________________________] | [________________________________] |
| [________________________________] | [________________________________] |
4. INFORMATION TO BE USED OR DISCLOSED
Describe the information in a specific and meaningful fashion.
Provider, facility, plan, or source: [________________________________]
Date range: [__/__/____] through [__/__/____]
- ☐ Billing records
- ☐ Medication list
- ☐ Laboratory results
- ☐ Diagnostic imaging and reports
- ☐ History and physical
- ☐ Progress or office notes
- ☐ Operative/procedure reports
- ☐ Discharge summary
- ☐ Immunization records
- ☐ Other specifically described information: [________________________________]
Records excluded: [________________________________]
Do not use “all records” unless that scope is intended, legally permitted, and
approved under Section 1.
5. PERSON OR CLASS AUTHORIZED TO RECEIVE
| Recipient or specifically identified class | Address/contact |
|---|---|
| [________________________________] | [________________________________] |
| [________________________________] | [________________________________] |
6. PURPOSE
- ☐ At my request
- ☐ Continuing care
- ☐ Insurance or benefits matter
- ☐ Legal matter identified as: [________________________________]
- ☐ Other specific purpose: [________________________________]
If the individual initiated the authorization and elects not to state another
purpose, “at my request” may be used. A special-purpose authorization may
require different wording.
7. EXPIRATION
This authorization expires on one completed date or event related to me or the
purpose of the disclosure:
☐ Date: [__/__/____]
☐ Event: [________________________________]
Revocation is separate from expiration and does not replace this required field.
8. RIGHT TO REVOKE
I may revoke this authorization at any time by sending a written revocation to:
Name/office: [________________________________]
Address, email, or approved route: [________________________________]
Revocation will not affect action already taken in reliance on this
authorization. If the authorization was obtained as a condition of insurance
coverage, revocation is also subject to any other law giving the insurer a
right to contest a claim or the policy.
9. CONDITIONING NOTICE
Select the accurate statement:
☐ The covered entity may not condition treatment, payment, enrollment, or
eligibility for benefits on whether I sign this authorization.
☐ The covered entity may condition [________________________________] on this
authorization under 45 C.F.R. § 164.508(b)(4). If I refuse to sign, the
consequence is: [________________________________].
Do not select the second option without approval of the exact regulatory
exception.
10. REDISCLOSURE NOTICE
Information disclosed under this authorization may be redisclosed by the
recipient and may no longer be protected by the HIPAA Privacy Rule. Other
federal or Connecticut confidentiality law may continue to restrict the recipient.
11. ACKNOWLEDGMENTS
By signing, I confirm that:
- the information, discloser, recipient, purpose, and expiration are complete;
- I understand the revocation, conditioning, and redisclosure statements;
- I have had an opportunity to ask questions; and
- I am entitled to a copy of this signed authorization.
This authorization is the individual's permission. It does not create a
three-party contract; impose recipient warranties, indemnity, default, cure,
attorney-fee, arbitration, forum, insurance, force-majeure, or liability-cap
terms; or authorize a disclosure prohibited by other law.
12. SIGNATURE
Individual
Signature: __________________________________
Printed name: [________________________________]
Date: [__/__/____]
Personal representative — complete only if applicable
Representative signature: __________________________________
Printed name: [________________________________]
Authority to act: [________________________________]
Supporting document reviewed/attached: [________________________________]
Date: [__/__/____]
The releasing entity must verify the representative's authority for every
identified record.
13. RELEASING ENTITY CONTROL
| Control | Completion |
|---|---|
| Identity verified | ☐ Yes ☐ No |
| Representative authority verified | ☐ Yes ☐ No ☐ N/A |
| Every federal core element complete | ☐ Yes ☐ No |
| Expiration valid | ☐ Yes ☐ No |
| No known revocation | ☐ Yes ☐ No |
| Compound/conditioning rules checked | ☐ Yes ☐ No |
| Connecticut overlay and required form checked | ☐ Yes ☐ No |
| Special-record rules checked | ☐ Yes ☐ No |
| Disclosure limited to authorized scope | ☐ Yes ☐ No |
| Signed copy provided to individual | ☐ Yes ☐ No |
| Signed authorization retained under applicable policy | ☐ Yes ☐ No |
Reviewed by: [________________________________]
Date: [__/__/____]
Disclosure log/reference: [________________________________]
About this template
- Last updated
- August 29, 2026
- Citations checked
- August 29, 2026
- Jurisdiction
- Connecticut
- Category
- Healthcare & Medical
Legal authority
- 45 C.F.R. § 164.508 (HIPAA authorization requirements)
These templates cover the everyday paperwork that happens between patients, providers, and health plans: consent forms, medical record authorizations, directives for end-of-life care, and requests to approve or deny treatment. Getting them right matters because they document medical decisions, release sensitive health information, and often have to meet both federal privacy rules and state-specific requirements. A form that is missing a required disclosure can be rejected by a provider or challenged later in court.
Not legal advice
This template is provided for informational purposes. We recommend having an attorney review any legal document before signing, especially for high-value or complex matters.
Checked against the law it cites
A reviewer verified this template's legal citations against the official source on August 29, 2026.
45 C.F.R. § 164.508(c)(1) (checked August 29, 2026): "A valid authorization under this section must contain at least the following elements: . . . An expiration date or an expiration event that relates to the individual or the purpose of the use or disclosure. . . . Signature of the individual and date."
45 C.F.R. § 164.508(c)(2)-(4) (checked August 29, 2026): "In addition to the core elements, the authorization must contain statements adequate to place the individual on notice of . . . [t]he individual's right to revoke . . . [t]he ability or inability to condition treatment, payment, enrollment or eligibility . . . [and] [t]he potential for information disclosed pursuant to the authorization to be subject to redisclosure."
Draft your HIPAA Authorization Form - Connecticut in the editor
Answer a few questions, let the AI editor draft each section from your answers, review it, and download Word and PDF. $99 one time, or $249 per month for every document and every Ezel app.