How is an authorization different than an informed consent?
An authorization is a HIPAA required document that defines only the terms and conditions of permission to use specified PHI from specified health care providers for a specified research project. Except for authorizations to use psychotherapy notes in research, which must always be stand alone documents, an authorization can be combined with the informed consent document. However, there are some features of an authorization that may be easier to handle as a separate document, including the requirements that the authorization be kept for six years following its last effective date and that it may only be revoked in writing, as well as the need to present a copy of the authorization to health care providers (or health plans or health care clearinghouses) to obtain the authorized access to PHI in their records.
