Florida HIPAA release form: written authorization under section 456.057

Florida has no general state-issued release form. A release that carries the federal core elements and statements works for most requests (45 CFR 164.508, Authorizations), and Florida law sets when one is needed and which records need more.

For practitioners licensed by the Department of Health, section 456.057 is the rule to know (Florida Statutes 456.057, Ownership and control of patient records). Records may not be furnished to, and the patient’s condition may not be discussed with, anyone other than the patient, the legal representative or other treating practitioners, except upon written authorization (Florida Statutes 456.057, Ownership and control of patient records). Hospitals and other licensed facilities follow a different section. Under section 395.3025(4), their patient records are confidential and are not disclosed without the consent of the patient or the legal representative, outside the cases that section lists (Florida Statutes 395.3025, Patient and personnel records).

Under Florida’s mental health law, a clinical record is the record kept for each patient of a mental health facility, and it is confidential (Florida Statutes 394.4615, Clinical records; confidentiality). Its protection is waived only by express and informed consent from the patient or a person the statute lists (Florida Statutes 394.4615, Clinical records; confidentiality).

The patient signs, or the patient’s legal representative, such as a guardian or, for a deceased patient, the personal representative of the estate (45 CFR 164.502(g), Personal representatives). Florida practices and hospitals usually supply their own form. The records custodian is the staff member or department that keeps the files and answers release requests; lawyers, insurers and family members often bring one. For a medical negligence presuit notice, the claimant signs the statutory authorization and serves it with the notice (Florida Statutes 766.1065, Authorization for release of protected health information).

1. Call the practitioner’s office or the hospital’s records department and ask whether it requires its own form; hospital records fall under section 395.3025 (Florida Statutes 395.3025, Patient and personnel records).
2. If not, adapt the letter below: name the practitioner, the records, the recipient and an end date.
3. Initial separately if mental health clinical records are included, and confirm the facility’s consent wording.
4. For a medical negligence presuit notice, copy the form printed in section 766.1065 instead (Florida Statutes 766.1065, Authorization for release of protected health information).
5. Keep a copy of what you signed and the date you sent it.

• A generic release served with a medical negligence presuit notice; without the statutory form the notice is void (Florida Statutes 766.1065, Authorization for release of protected health information).
• Revoking a 766.1065 authorization mid-claim without knowing it voids the presuit notice from the start (Florida Statutes 766.1065, Authorization for release of protected health information).
• Mental health clinical records requested on a general release with no express consent line for them.
• Waiting weeks for a legal review before sending patients their own copies, which section 456.057 does not allow (Florida Statutes 456.057, Ownership and control of patient records).

Four sections of the Florida Statutes settle most release questions. Read the one that matches the records and the reason for the request.

Patients and their legal representatives have a right to copies. On request, the practitioner must furnish copies of reports and records, including X rays and insurance information, in a timely manner and without delays for legal review (Florida Statutes 456.057, Ownership and control of patient records).

For psychiatric, psychological or psychotherapeutic records, the practitioner may provide a report of examination and treatment instead of the full copies (Florida Statutes 456.057, Ownership and control of patient records). On the patient’s written request, complete psychiatric records go directly to a later treating psychiatrist (Florida Statutes 456.057, Ownership and control of patient records).

Some disclosures need no authorization, for example to someone who arranged the care with the patient’s consent, or under a court subpoena with proper notice to the patient (Florida Statutes 456.057, Ownership and control of patient records).

A presuit notice is the written notice of intent to sue for medical negligence that Florida requires before a lawsuit is filed. It must come with an authorization in the exact form set out in section 766.1065, or the notice is void (Florida Statutes 766.1065, Authorization for release of protected health information).

The statutory form reaches records from providers who treated the injuries and from providers seen during the 2 years before the incident (Florida Statutes 766.1065, Authorization for release of protected health information). It lets the defense side interview the listed providers without the patient or the patient’s attorney present (Florida Statutes 766.1065, Authorization for release of protected health information).

It ends at the resolution of the claim or the conclusion of any litigation, whichever comes first (Florida Statutes 766.1065, Authorization for release of protected health information). Revoking it makes the presuit notice void from the date it was issued and erases any tolling of the limitations period (Florida Statutes 766.1065, Authorization for release of protected health information).

For a mental health clinical record, consent can come from the patient, the guardian or guardian advocate, or, after death, the personal representative or the next family member in line of intestate succession (Florida Statutes 394.4615, Clinical records; confidentiality). Put that consent on its own initial line.

Psychotherapy notes need a separate federal authorization of their own (45 CFR 164.508, Authorizations). For HIV test results, add an initial line too, and ask the facility whether it needs its own consent form.

Records from a federally assisted substance use disorder program also need a consent that meets 42 CFR 2.31, and SUD counseling notes need a consent of their own (42 CFR 2.31, Consent requirements for substance use disorder records).

Name the practitioner exactly as licensed and send one authorization per provider. Ask the client for a photo ID so the signature can be compared.

For any claim that might become a medical negligence case, keep the general release and the statutory presuit form separate. The attorney version covers firm-side requests, and the general HIPAA release form guide lists each federal element.

• Florida Statutes 456.057, Ownership and control of patient records: Records may not be furnished without written authorization except listed cases; copies go to the patient in a timely manner without delays for legal review; psychiatric records may be summarized in a report.
• Florida Statutes 394.4615, Clinical records; confidentiality: A mental health clinical record is confidential unless waived by express and informed consent from the patient or the persons listed.
• Florida Statutes 395.3025, Patient and personnel records: Patient records of licensed facilities are confidential and must not be disclosed without the consent of the patient or the legal representative, except in the cases the section lists.
• Florida Statutes 766.1065, Authorization for release of protected health information: A presuit notice is void without the statutory authorization; the form covers 2 years before the incident, allows interviews, expires at resolution, and its revocation voids the notice retroactively.
• 45 CFR 164.508, Authorizations: Sets the core elements and required statements, and requires a separate authorization for psychotherapy notes.
• 45 CFR 164.502(g), Personal representatives: Legal representatives and an executor or administrator of an estate are treated as the individual.
• 45 CFR 164.524, Right of access: A provider must act on an access request within 30 days, with one extension of up to 30 days.
• 42 CFR 2.31, Consent requirements for substance use disorder records: A Part 2 consent must carry its own listed elements; SUD counseling notes need a separate consent; a consent for use in legal proceedings cannot be combined with any other consent.