Authorization For Release of Information
Authorization for release of information is required from the patient for the healthcare provider or biller to share any of the patients health information to an individual or entity not directly involved in their care. The necessity for patient authorization allows for the individual to choose who has access to their records and for what purpose.
Authorization for the release of information is obtained through a form provided by the healthcare provider that details the specific information being released, what party would be receiving that data, and how long the data will be available to the aforementioned party.
If a patient fails or refuses to provide authorization, a healthcare provider or biller cannot release the data in question without facing penalties and fines. Attempting to deceive or trick a patient into authorizing the release of information is also considered a failure to comply with HIPAA.