Compliance · free template

HIPAA Patient Consent Form

Patient authorization for treatment, billing and named disclosures, with an expiry date and revocation notice.

A ready-to-use healthcare, legal & specialized form for teams with a niche process that generic forms don't cover: 16 questions, 4 pages, 4 conditional rules.

Questions: 16
Pages: 4
Layouts: classic · card
Conditional rules: 4
Typical time: 5 min

Preview it in the gallery

Searches this template answers

Also filed under

Live preview and test console

This is the real form. Answer it to test the 3 conditional rules — nothing is sent or stored.

Page 1 of 4 — Patient details

Every question on this page is currently visible.

What happens after submit: nothing is stored in this preview. On your own copy, every response triggers an instant email notification and lands in your response dashboard, ready to export or forward.

Happy with it? Take a copy into your workspace — every question, rule and setting comes with it.

Who this template is for

HIPAA Patient Consent Form is built for teams with a niche process that generic forms don't cover who need to capture reproducible detail on first contact.

Teams with a niche process that generic forms don't cover working in healthcare, legal & specialized.
Teams who need to capture reproducible detail on first contact without writing code or paying for a custom build.
Anyone replacing requests that need three replies before work can start with one structured record per enquiry.
Respondents are the specific group this workflow serves — the form asks them 16 questions across 4 screens.
Mobile-heavy audiences, thanks to the one-question-per-screen card layout.

Why this form is useful

It removes the cost of requests that need three replies before work can start and turns each submission into a record your team can act on immediately.

9 questions are required, so submissions arrive complete instead of needing a follow-up email.
It collects a verified email address so replies and confirmations land.
It captures a phone number for urgent follow-up.
It records a signature you can keep as proof of agreement.
It pins the request to a specific date.
It allows multiple selections without free text.
Conditional logic hides 4 questions until they are relevant — shorter forms convert better than long ones.
Splitting the form across 4 pages keeps each screen short and shows respondents how much is left.

How to use this template

From copy to live form is a few minutes of work, and every step is reversible.

1Press “Use this template” — a fresh copy of HIPAA Patient Consent Form lands in your workspace, ready to edit.
2Rename or delete any question, and change what is required. Nothing here is fixed.
3Open Notifications and add the email addresses that should be alerted on each submission; add an auto-reply to the respondent if the form collects an email address.
4Publish it, then either share the link directly or paste the embed snippet into your site — the embedded form resizes to fit and loads no marketing or advertising trackers.
5Watch responses land in Submissions, where you can filter, label and export them to CSV or PDF.

Logic and conditions blueprint

Exactly how this form behaves as it is answered — 4 conditional rules ship with it.

Features advanced show logic: if “Is there anyone else this information can be shared with?” is Yes, the form dynamically exposes “Name of the person or organization”. Otherwise that question never appears.
Features advanced show logic: if “Is there anyone else this information can be shared with?” is Yes, the form dynamically exposes “What can be shared with them?”. Otherwise that question never appears.
Features advanced show logic: if “What can be shared with them?” is Specific categories only, the form dynamically exposes “Select the categories to release”. Otherwise that question never appears.
Features conditional validation: if “Does this authorization expire?” is Yes — on a specific date, “Expiration date” becomes mandatory before the form can be sent.
All 4 rules are editable in the Logic tab, and the built-in checker warns about rules that contradict each other.

About this template

This form gives a patient a single place to authorize how their protected health information is used and, separately, who else it can be shared with. It opens with the patient's identifying details and the practice or provider name, then separates two different permissions that are often wrongly bundled together: consent to use information for the practice's own treatment, payment and operations, and a distinct authorization to disclose records to a named third party such as a family member, another provider or an insurer. The disclosure section only appears when the patient says there is someone else who should receive information, and it asks exactly what can be shared — the whole record, a summary, or specific categories such as billing, mental health notes or lab results — because the scope of a release should never default to everything. An expiry date field sets when the authorization lapses, with a fallback checkbox for an open-ended authorization the patient can revoke at any time. The form closes with plain-language revocation wording and a signature, dated at submission. Practices should have their compliance officer or counsel confirm the exact authorization language matches their notice of privacy practices before this goes live.

What this form asks

Every question is editable — rename it, make it optional, or delete it entirely.

Page 1 — Patient details

Patient full namerequired
Date of birthrequired
Email addressrequired
Phone number
Practice or provider namerequired

Page 2 — Consent for treatment, payment and operations

I consent to the practice using my health information for treatment, billing and normal practice operationsrequired
Notes or conditions on this consent

Page 3 — Sharing with someone else

Is there anyone else this information can be shared with?required
Name of the person or organization
Relationship to patient
What can be shared with them?
Select the categories to release

Page 4 — Expiration and signature

Does this authorization expire?required
Expiration date
Patient or guardian signaturerequired
Date signedrequired

16 questions in total.

How the form changes as it's filled in

This template ships with 4 conditional rules, grouped into 3 behaviours driven by 3 questions. Everything below is already set up — edit or delete any rule once the template is in your workspace.

Driven by “Is there anyone else this information can be shared with?”

Reveals questions
If “Is there anyone else this information can be shared with?” is Yes, the form reveals “Name of the person or organization” and “What can be shared with them?”.

Driven by “What can be shared with them?”

Reveals questions
If “What can be shared with them?” is Specific categories only, the form reveals “Select the categories to release”.

Driven by “Does this authorization expire?”

Makes answers required
If “Does this authorization expire?” is Yes — on a specific date, “Expiration date” becomes required before the form can be submitted.

Set it up step by step

1
Have counsel confirm the wording
This is a starting structure, not a compliance certification — have your privacy or compliance officer check it against your notice of privacy practices before use.
2
Keep treatment consent separate from disclosure
Don't let a signature on page two silently authorize sharing with a third party; the disclosure section is intentionally its own step.
3
Default to specific categories, not the whole record
Encourage patients to select categories rather than the full record unless there's a clear reason to release everything.
4
File the signed copy with an expiry reminder
Set a reminder against the expiration date so an old authorization isn't relied on after it has lapsed.

Mistakes to avoid

Treating the practice-operations consent and a third-party disclosure as the same signature.
Leaving the authorization open-ended by default instead of asking the patient to choose.
Not recording a signature date, which makes an expiry date impossible to enforce later.

What it pairs with

Most teams don't run this form on its own. These are the forms and systems it sits next to.

What to do with the responses

Store the signed form in the patient's chart, log any third-party disclosure with the date it was acted on, and flag the file for re-consent ahead of the expiration date.

Works in both layouts

Browse classic templates Browse card templates

Forms that overlap this one

These pages cover the same subject ground as the hipaa patient consent form, matched on the words people actually search for.

Privacy & compliance

This form collects health information. Keep access limited to the people who need it, turn on encrypted answers for the clinical questions, and set a retention window so records don't sit in the dashboard forever.

Frequently asked questions

Does using this form make our practice HIPAA compliant?

No. This is a structured starting point for a consent form, not a compliance certification — your privacy officer or counsel should confirm the language matches your actual notice of privacy practices and disclosure procedures.

Can one signature cover both treatment consent and sharing with a family member?

It can, but it is clearer for the patient — and easier for you to defend later — to separate the two, which is why they sit on different pages here.

What happens if a patient leaves the expiration question blank?

Add a validation rule requiring an answer before submission; an authorization with no clear expiry or revocation basis is difficult to rely on.

Can we reuse this for a telehealth-only practice?

Yes — add a specific line about recorded video sessions if applicable, and check with counsel whether your state adds any telehealth-specific consent requirements.

Is the HIPAA Patient Consent Form template free to use?

Yes. You can preview and test HIPAA Patient Consent Form on this page without an account, and take a copy into your own HelloForms workspace on the free plan. There is nothing to install and no card required to publish it.

What does the HIPAA Patient Consent Form template ask for?

It asks 16 questions across 4 pages, 9 of which are required. Every question is listed in full further down this page, and each one can be renamed, reordered, made optional or deleted after you copy the template.

Can I edit the HIPAA Patient Consent Form form after copying it?

Yes — the copy is entirely yours. Change wording, add or remove questions, switch between the classic and card layouts, restyle it to match your brand, and set who gets notified on each submission.

How does the conditional logic in this healthcare, legal & specialized form work?

4 conditional rules ship with the template: Features advanced show logic: if “Is there anyone else this information can be shared with?” is Yes, the form dynamically exposes “Name of the person or organization”. Otherwise that question never appears. Features advanced show logic: if “Is there anyone else this information can be shared with?” is Yes, the form dynamically exposes “What can be shared with them?”. Otherwise that question never appears. Features advanced show logic: if “What can be shared with them?” is Specific categories only, the form dynamically exposes “Select the categories to release”. Otherwise that question never appears. All rules are editable in the Logic tab.

Where do responses to the HIPAA Patient Consent Form form go?

Submissions land in your workspace under Submissions, where you can search, filter, label and export them to CSV or PDF. You can also email a notification to your team on every submission and send the respondent an auto-reply.

Can I embed the HIPAA Patient Consent Form form on my own website?

Yes. Publish the form and paste the embed snippet into any page or share the direct link. The embedded form resizes to fit its container and loads no advertising or marketing trackers inside the iframe.

Is the signature on this form legally usable?

The template captures a drawn signature and stores it with the submission, along with the timestamp, so you keep evidence of who agreed and when. Whether that is sufficient depends on your jurisdiction and the agreement itself.

More forms teams pair with the hipaa patient consent form.

Related categories

All Healthcare, Legal & Specialized templates