7 Best Authorization Letters to Collect Medical Records (Free Templates)

  Updated: September 4, 2025  |  Published: September 4, 2025

  By Andre Bradley

Collecting your medical records often requires a precise, legally valid authorization letter that clearly identifies who may access your information and why. The right format prevents delays, ensures HIPAA-aware consent, and helps providers release records quickly. Below are seven customizable templates you can copy, personalize, and use for caregivers, spouses, parents, and personal use.



1. General Authorization to Collect Medical Records

[Your Full Name]
[Street Address]
[City, State ZIP]
[Phone] | [Email]
Date: [Month Day, Year]

Health Information Management Department
[Facility or Provider Name]
[Facility Address]
[City, State ZIP]

Subject: Authorization to Release and Allow Pickup of Medical Records

Patient: [Full Legal Name]
Date of Birth: [MM/DD/YYYY]
Medical Record Number or Last 4 of SSN: [Optional]

I authorize [Authorized Person’s Full Name], my [Relationship], to pick up and receive copies of my medical records from [Facility or Provider Name]. Acceptable identification will be presented at pickup.

Records requested: [Type of records such as complete chart, physician notes, lab results, imaging, billing statements], covering dates of service from [Start Date] to [End Date]. Purpose of disclosure: [Personal use, continuity of care, insurance, legal review].

Delivery preference: Paper copies for in person pickup by the authorized person. If available, you may also provide a secure electronic copy to [Secure Email] or via patient portal.

I understand this authorization is voluntary and remains effective until [Expiration Date, usually 90 days from signature], unless revoked in writing earlier. I understand that treatment, payment, enrollment, or eligibility for benefits is not conditioned on my signing this authorization. I understand that information disclosed may be subject to redisclosure and may no longer be protected by HIPAA.

Signature of Patient: _________________________ Date: __________
Printed Name: ________________________________

If signed by personal representative, describe authority: __________________________

Enclosures: Copy of patient photo ID; copy of authorized person photo ID

2. Parent Authorization to Collect a Minor’s Medical Records

[Parent or Legal Guardian Name]
[Address]
[City, State ZIP]
[Phone] | [Email]
Date: [Month Day, Year]

Health Information Management Department
[Facility or Provider Name]
[Address]
[City, State ZIP]

Subject: Authorization for Release and Pickup of Minor’s Records

Minor Patient: [Child’s Full Name]
Date of Birth: [MM/DD/YYYY]
Parent or Legal Guardian: [Your Name]
Relationship: [Mother, Father, Legal Guardian]

I authorize [Authorized Person’s Full Name], my [Relationship to child], to pick up and receive copies of the medical records for the above named minor from [Facility or Provider Name]. The authorized person will present valid photo identification at pickup.

Records requested: [Well visits, immunization records, specialist notes, lab results], for dates of service [Start Date] to [End Date]. Purpose: [School enrollment, camp, second opinion, continuity of care].

This authorization remains valid until [Expiration Date], unless revoked in writing. I certify that I am the parent or legal guardian with authority to authorize this release. I understand the disclosures may include sensitive information permitted under applicable law.

Signature of Parent or Legal Guardian: _____________________ Date: ________
Printed Name: __________________________
Legal authority if guardian: [Court order, guardianship papers]

Enclosures: Copy of parent or guardian photo ID; proof of guardianship if applicable; copy of authorized person photo ID

3. Spouse Authorization to Collect Medical Records

[Patient Name]
[Address]
[City, State ZIP]
[Phone] | [Email]
Date: [Month Day, Year]

Health Information Management Department
[Facility or Provider Name]
[Address]
[City, State ZIP]

Subject: Authorization for Release and Pickup by Spouse

Patient: [Full Legal Name]
Date of Birth: [MM/DD/YYYY]

I authorize my spouse, [Spouse’s Full Name], to pick up and receive my medical records from [Facility or Provider Name]. A government issued ID will be provided at the time of pickup.

Records requested: [Type of records], for dates of service [Start Date] to [End Date]. Purpose: [Insurance appeal, tax documentation, care coordination].

This authorization is effective on the date signed and expires on [Expiration Date]. I understand I may revoke this authorization at any time by sending a written request to your Health Information Management Department, except to the extent that action has already been taken in reliance upon it.

Signature of Patient: _________________________ Date: __________
Printed Name: ________________________________

Enclosures: Copy of patient photo ID; copy of spouse photo ID

4. Adult Child Authorization to Collect Records for Elderly Parent

[Parent Patient Name]
[Address]
[City, State ZIP]
[Phone] | [Email]
Date: [Month Day, Year]

Health Information Management Department
[Facility or Provider Name]
[Address]
[City, State ZIP]

Subject: Authorization for Adult Child to Pick Up Medical Records

Patient: [Parent’s Full Name]
Date of Birth: [MM/DD/YYYY]

I authorize my adult child, [Adult Child’s Full Name], to pick up and receive my medical records from [Facility or Provider Name]. The authorized individual will present photo identification at pickup.

Records requested: [Primary care notes, medication list, discharge summaries, imaging], for dates [Start Date] to [End Date]. Purpose: Care management and transition planning.

This authorization is valid through [Expiration Date] unless revoked in writing. I understand that once information is disclosed, it may be redisclosed by the recipient and may no longer be protected by HIPAA.

Signature of Patient: _________________________ Date: __________
Printed Name: ________________________________

If signed by personal representative, describe authority: __________________________

Enclosures: Copy of patient photo ID; copy of adult child photo ID

5. Authorization for Trusted Friend or Caregiver to Collect Records

[Patient Name]
[Address]
[City, State ZIP]
[Phone] | [Email]
Date: [Month Day, Year]

Health Information Management Department
[Facility or Provider Name]
[Address]
[City, State ZIP]

Subject: Authorization for Caregiver to Pick Up Medical Records

Patient: [Full Legal Name]
Date of Birth: [MM/DD/YYYY]

I authorize [Caregiver or Friend Full Name], my [Relationship], to collect and receive my medical records from [Facility or Provider Name]. The authorized individual will present a valid photo ID.

Records requested: [Medication list, treatment plan, care instructions, therapy notes], for dates of service [Start Date] to [End Date]. Purpose: Home care coordination and follow up.

This authorization remains effective until [Expiration Date] and may be revoked at any time by written notice. I acknowledge that once disclosed, information may be subject to redisclosure.

Signature of Patient: _________________________ Date: __________
Printed Name: ________________________________

Enclosures: Copy of patient photo ID; copy of caregiver photo ID

6. Attorney or Legal Representative Authorization to Collect Records

[Client Patient Name]
[Address]
[City, State ZIP]
[Phone] | [Email]
Date: [Month Day, Year]

Health Information Management Department
[Facility or Provider Name]
[Address]
[City, State ZIP]

Subject: Authorization for Attorney to Obtain Medical Records

Patient: [Full Legal Name]
Date of Birth: [MM/DD/YYYY]

I authorize my attorney, [Attorney Full Name], of [Law Firm Name], to obtain and pick up my medical records from [Facility or Provider Name]. The firm may designate staff or a courier to collect the records upon presentation of identification and this authorization.

Records requested: Complete chart including intake notes, progress notes, operative reports, imaging and radiology reports, pathology, laboratory results, billing ledger, and itemized statements for dates of service [Start Date] to [End Date]. Purpose: Legal evaluation and claim documentation.

This authorization is effective immediately and expires on [Expiration Date]. I understand I may revoke this authorization in writing at any time. Please disclose records even if they contain information regarding alcohol or drug treatment, mental health, or communicable diseases to the extent permitted by law.

Signature of Patient: _________________________ Date: __________
Printed Name: ________________________________

Enclosures: Copy of patient photo ID; attorney business card or letter of representation; copy of courier photo ID if applicable

7. Self Authorization for Courier Pickup or Electronic Delivery

[Patient Name]
[Address]
[City, State ZIP]
[Phone] | [Email]
Date: [Month Day, Year]

Health Information Management Department
[Facility or Provider Name]
[Address]
[City, State ZIP]

Subject: Authorization for Courier Pickup or Secure Electronic Release

Patient: [Full Legal Name]
Date of Birth: [MM/DD/YYYY]

I authorize [Courier or Service Name] and its agent [Agent Full Name] to pick up my medical records from [Facility or Provider Name] on my behalf. A copy of this authorization and government issued ID will be presented at pickup. You may alternatively provide a secure electronic copy to [Secure Email or Portal] or fax to [Secure Fax Number], attention [Recipient].

Records requested: [Specific record types], for dates [Start Date] to [End Date]. Purpose: Personal records retention and continuity of care.

This authorization expires on [Expiration Date] unless revoked earlier in writing. I acknowledge the possibility of redisclosure by the recipient. Please contact me at [Phone or Email] if fees apply or if additional consent is required.

Signature of Patient: _________________________ Date: __________
Printed Name: ________________________________

Enclosures: Copy of patient photo ID; courier authorization letter; courier photo ID

FAQ: Authorization Letters to Collect Medical Records

1) What must my authorization letter include to be accepted?

List the patient’s full name and DOB, what records you want, the purpose, who may receive/pick them up, how you want them delivered, an expiration date, and a signed/dated consent. These elements mirror HIPAA’s required “core elements” for authorizations. GovInfo

2) Is a handwritten or typed letter okay, or do I have to use the provider’s form?

Most facilities accept a clear written or typed request. They may prefer their own form, but they cannot impose unreasonable hurdles that delay your access (for example, burdensome verification steps). HHS.gov

3) How long should I expect to wait?

Under HIPAA, providers must act on your request within 30 calendar days of receipt, with one additional 30-day extension allowed if they give you written notice and a reason. HHS.gov

4) Can the provider charge me?

Yes, but only a reasonable, cost-based fee for copying, supplies, and postage. Searching for or retrieving records cannot be charged to you. HHS.gov

5) Can I direct the records to a third party or have someone pick them up for me?

Yes. You can designate a person or entity to receive your records and authorize in-person pickup by naming them in your letter and providing identification instructions. HHS.gov

6) Who counts as a “personal representative”?

A personal representative is someone legally authorized to act for the patient and generally has the same right of access as the patient for information relevant to that representation. Examples include someone with a valid health care power of attorney. HHS.gov

7) Do parents automatically have access to a minor’s records?

Usually yes, because a parent or legal guardian is typically the minor’s personal representative, unless state law or specific exceptions apply. HHS.gov

8) Are there any records I cannot get even with an authorization?

Yes. Psychotherapy notes and certain materials prepared for legal proceedings are excluded from the HIPAA right of access; providers may also redact or partially deny when permitted by law. HHS.goveCFR

9) Can I get an electronic copy instead of paper?

If the records are readily producible in the format you request, HIPAA requires the provider to accommodate it, or otherwise agree on a readable alternative (e.g., secure email, portal). HHS.gov

10) What identification should my designee bring to pick up the records?

Facilities must take reasonable steps to verify identity, but the specific method is up to them so long as it does not create barriers or unreasonable delays. Bring government-issued ID and a copy of the signed authorization. HHS.gov

11) Can I revoke my authorization after I send it?

Yes. You may revoke a HIPAA authorization at any time by sending a written revocation to the provider; it is not effective until received and does not undo disclosures already made in reliance on your prior authorization. HHS.gov

12) Do special rules apply to substance use disorder records?

Yes. 42 CFR Part 2 adds extra protections for SUD treatment records. These often require specific consent language and carry redisclosure limits even after release. HHS.goveCFR

Final Thoughts

A precise, plain-language authorization letter speeds up releases, reduces back-and-forth with Health Information Management, and helps you control what is shared, to whom, and how. When in doubt, attach a copy of your photo ID, specify a narrow date range and record types, and give an expiration date that fits your timeline. If your request involves minors, mental health, or SUD treatment, expect extra verification and be ready with any state-specific documentation the provider requests.

Sources

  1. HHS OCR — Individuals’ Right under HIPAA to Access Health Information. HHS.gov

  2. HHS OCR FAQ — Timeliness: access within 30 days, with one allowable 30-day extension. HHS.gov

  3. HHS OCR FAQ — Reasonable, cost-based fees only. HHS.gov

  4. HHS OCR Guidance — Personal Representatives. HHS.gov

  5. HHS OCR FAQ — Parents’ access to a minor’s records. HHS.gov

  6. eCFR — 45 CFR §164.524, Access to Protected Health Information. eCFR

  7. HHS — Psychotherapy Notes and Right of Access (Mental Health Guidance). HHS.gov

  8. HHS & SAMHSA — 42 CFR Part 2 Final Rule overview (SUD records). HHS.gov

Disclaimer

This content is for general information and educational purposes only and is not legal advice. HIPAA and 42 CFR Part 2 interact with state laws that may impose additional requirements. Always confirm a facility’s current release procedures and consult an attorney for advice about your specific situation.