Do the core elements of an Authorization differ from a medical records release form?
Probably. A Privacy Rule Authorization may be a more detailed document than what physicians and hospitals are accustomed to using as a release of medical records. Medical records release forms usually are phrased very generally, but Authorizations are much more specific with regard to what information is being released, to whom, for what purpose, and for how long. An Authorization must also inform patients of certain rights they have in relation to their PHI. An Authorization may contain more information than required by the Privacy Rule, as long as the additional information is not inconsistent with the information required for the Authorization. See section 164.508 for the specific requirements for a Privacy Rule Authorization. Q: Does the Authorization form need to have a termination date for research? A: No. An Authorization for research uses and disclosures need not have a fixed expiration date or state a specific expiration event; the form can list “none” or “the end of the resea
