HIPAA Authorization Form - Texas
AUTHORIZATION TO USE OR DISCLOSE HEALTH INFORMATION
Texas — General HIPAA Authorization
Complete every required field. Do not use this form for a specially protected
record or purpose until Section 1 identifies and clears the additional law
and form. A blank, expired, revoked, impermissibly combined, or materially
false authorization is not valid under 45 C.F.R. § 164.508.
1. RELEASE ROUTING — COMPLETE BEFORE SIGNATURE
1.1 Person and record
| Item | Information |
|---|---|
| Individual/patient full name | [________________________________] |
| Date of birth | [__/__/____] |
| Address | [________________________________] |
| Telephone/email | [________________________________] |
| Medical-record or account number, if used | [________________________________] |
1.2 Applicable route
| Question | Result and required action |
|---|---|
| Is the releasing person a HIPAA covered entity or business associate? | ☐ Yes ☐ No ☐ Unresolved |
| Is the releasing or receiving person covered by Texas Health & Safety Code Chapter 181? | ☐ Yes ☐ No ☐ Unresolved |
| Is this an electronic disclosure requiring separate authorization under § 181.154? | ☐ No ☐ Yes — use the current Texas Attorney General standard authorization form and attach it |
| Are physician records governed by Texas Occupations Code Chapter 159 included? | ☐ No ☐ Yes — Section 3 must satisfy § 159.005 |
| Are mental-health records governed by Chapter 611 included? | ☐ No ☐ Yes — obtain record-specific legal/privacy review before release |
| Are psychotherapy notes included? | ☐ No ☐ Yes — do not use this ordinary combined authorization; prepare a permitted separate authorization |
| Are substance-use-disorder, HIV, genetic, reproductive-health, research, school, minor, deceased-person, court, workers' compensation, or other specially regulated records included? | ☐ No ☐ Yes — identify and attach the required current authority/form: [________] |
| Does marketing, sale, or remuneration apply? | ☐ No ☐ Yes — complete a separately reviewed authorization containing every required statement |
Privacy officer or counsel routing decision: [________________________________]
Additional form or authority attached: [________________________________]
2. PERSON OR CLASS AUTHORIZED TO DISCLOSE
I authorize the following person(s) or class of persons to make the use or
disclosure described in this form:
| Name or specifically identified class | Address/contact |
|---|---|
| [________________________________] | [________________________________] |
| [________________________________] | [________________________________] |
The description must identify the discloser specifically enough for the
releasing entity to determine who is authorized.
3. INFORMATION AUTHORIZED FOR USE OR DISCLOSURE
Describe the information in a specific and meaningful fashion. Do not use
“all records” unless that scope is intended, legally permitted, and approved.
Provider, facility, plan, or source: [________________________________]
Date range: [__/__/____] through [__/__/____]
Records included
- ☐ Billing records
- ☐ Medication list
- ☐ Laboratory results
- ☐ Diagnostic imaging and reports
- ☐ History and physical
- ☐ Progress or office notes
- ☐ Operative/procedure reports
- ☐ Discharge summary
- ☐ Immunization records
- ☐ Other specifically described information: [________________________________]
Records excluded
[____________________________________________________________]
Additional Texas physician-record description, if applicable: [________________________________]
4. PERSON OR CLASS AUTHORIZED TO RECEIVE
I authorize disclosure to:
| Recipient or specifically identified class | Address/contact |
|---|---|
| [________________________________] | [________________________________] |
| [________________________________] | [________________________________] |
For physician records governed by Tex. Occupations Code § 159.005, the written
consent must identify the person to whom the information is released.
5. PURPOSE
Select or describe each purpose:
- ☐ At my request
- ☐ Continuing care
- ☐ Insurance or benefits matter
- ☐ Legal matter identified as: [________________________________]
- ☐ Other specific purpose: [________________________________]
If the individual initiated the authorization and elects not to state another
purpose, “at my request” may be used. Special-purpose authorizations require
separate review.
6. EXPIRATION
This authorization expires on one completed date or event related to me or the
purpose of the disclosure:
☐ Date: [__/__/____]
☐ Event: [________________________________]
Revocation is addressed separately in Section 7. Do not use revocation as a
substitute for the required expiration date or event.
7. RIGHT TO REVOKE
I may revoke this authorization at any time by sending a written revocation to:
Name/office: [________________________________]
Address, email, or approved delivery route: [________________________________]
Revocation will not affect action already taken in reliance on this
authorization. If this authorization was obtained as a condition of insurance
coverage, revocation is also subject to any other law giving the insurer a
right to contest a claim or the policy.
For physician records governed by Tex. Occupations Code § 159.005, withdrawal
does not affect information disclosed before written notice of withdrawal.
8. CONDITIONING NOTICE
Select the accurate statement:
☐ The covered entity may not condition treatment, payment, enrollment, or
eligibility for benefits on whether I sign this authorization.
☐ The covered entity may condition the following service or eligibility on
this authorization under 45 C.F.R. § 164.508(b)(4):
[________________________________]. If I refuse to sign, the consequence is:
[________________________________].
Do not select the second option without privacy-officer or counsel approval of
the exact regulatory exception.
9. REDISCLOSURE NOTICE
Information disclosed under this authorization may be redisclosed by the
recipient and may no longer be protected by the HIPAA Privacy Rule. Other
federal or Texas confidentiality law may continue to restrict the recipient.
10. INDIVIDUAL ACKNOWLEDGMENTS
By signing, I confirm that:
- I have read this authorization and it is written in language I understand;
- the information, discloser, recipient, purpose, and expiration are complete;
- I understand the revocation, conditioning, and redisclosure statements;
- I have had an opportunity to ask questions; and
- I am entitled to a copy of this signed authorization.
This authorization does not create a contract among the individual, releasing
entity, and recipient; does not supply indemnity, damages, attorney fees,
arbitration, forum selection, or a liability cap; and does not authorize
anything prohibited by other law.
11. SIGNATURE
Individual
Signature: __________________________________
Printed name: [________________________________]
Date: [__/__/____]
Personal representative — complete only if applicable
Representative signature: __________________________________
Printed name: [________________________________]
Authority to act for the individual: [________________________________]
Supporting document reviewed/attached: [________________________________]
Date: [__/__/____]
The releasing entity must verify the representative's authority and whether
the representative may authorize release of every identified record.
12. RELEASING ENTITY USE
| Control | Completion |
|---|---|
| Identity verified | ☐ Yes ☐ No |
| Representative authority verified | ☐ Yes ☐ No ☐ N/A |
| Every required field complete | ☐ Yes ☐ No |
| Expiration valid | ☐ Yes ☐ No |
| No known revocation | ☐ Yes ☐ No |
| Combination/conditioning rules checked | ☐ Yes ☐ No |
| Texas § 181.154 route checked | ☐ Yes ☐ No |
| Special-record rules/forms checked | ☐ Yes ☐ No |
| Disclosure limited to authorized scope | ☐ Yes ☐ No |
| Signed copy provided to individual | ☐ Yes ☐ No |
| Signed authorization retained under applicable policy | ☐ Yes ☐ No |
Reviewed by: [________________________________]
Date: [__/__/____]
Disclosure log/reference: [________________________________]
About this template
- Last updated
- August 29, 2026
- Citations checked
- August 29, 2026
- Jurisdiction
- Texas
- Category
- Healthcare & Medical
Legal authority
- 45 C.F.R. § 164.508 (HIPAA authorization requirements)
- Tex. Health & Safety Code § 181.001 (Texas covered-entity scope)
- Tex. Health & Safety Code § 181.004 (state and federal compliance)
- Tex. Health & Safety Code § 181.154 (electronic-disclosure authorization)
- Tex. Occupations Code § 159.005 (physician-record consent)
- Tex. Health & Safety Code § 611.004 (mental-health record disclosure)
These templates cover the everyday paperwork that happens between patients, providers, and health plans: consent forms, medical record authorizations, directives for end-of-life care, and requests to approve or deny treatment. Getting them right matters because they document medical decisions, release sensitive health information, and often have to meet both federal privacy rules and state-specific requirements. A form that is missing a required disclosure can be rejected by a provider or challenged later in court.
Not legal advice
This template is provided for informational purposes. We recommend having an attorney review any legal document before signing, especially for high-value or complex matters.
Checked against the law it cites
A reviewer verified this template's legal citations against the official source on August 29, 2026.
45 C.F.R. § 164.508(c)(1) (checked August 29, 2026): "A valid authorization under this section must contain at least the following elements: . . . An expiration date or an expiration event that relates to the individual or the purpose of the use or disclosure. . . . Signature of the individual and date."
45 C.F.R. § 164.508(c)(2)-(4) (checked August 29, 2026): "In addition to the core elements, the authorization must contain statements adequate to place the individual on notice of . . . [t]he individual's right to revoke . . . [t]he ability or inability to condition treatment, payment, enrollment or eligibility . . . [and] [t]he potential for information disclosed pursuant to the authorization to be subject to redisclosure."
Tex. Health & Safety Code § 181.001 (checked August 29, 2026): "Covered entity means any person who . . . engages, in whole or in part, and with real or constructive knowledge, in the practice of assembling, collecting, analyzing, using, evaluating, storing, or transmitting protected health information."
Tex. Health & Safety Code § 181.004 (checked August 29, 2026): "A covered entity, as that term is defined by 45 C.F.R. Section 160.103, shall comply with the Health Insurance Portability and Accountability Act and Privacy Standards."
Draft your HIPAA Authorization Form - Texas in the editor
Answer a few questions, let the AI editor draft each section from your answers, review it, and download Word and PDF. $99 one time, or $249 per month for every document and every Ezel app.