# Texas HIPAA release form: the AG standard form, electronic disclosures and Chapter 74

[Home](/) / [Document guides](/documents) / [HIPAA release form](/documents/hipaa-release-form) / Texas

By [Arthur Teboul](/authors/arthur-teboul), Founder, DokuTrak. Published 2026-11-03, updated 2026-11-03.

> **In brief:** A HIPAA release form in Texas must meet the federal authorization rules and the Texas Medical Records Privacy Act, which requires a separate authorization for each electronic disclosure outside treatment, payment and operations ([Texas Health and Safety Code Chapter 181 (sections 181.102 and 181.154)](https://statutes.capitol.texas.gov/Docs/HS/htm/HS.181.htm)). The Texas Attorney General publishes a standard form, but providers may accept any form that complies with both laws ([Texas Attorney General, Authorization to Disclose Protected Health Information](https://www.texasattorneygeneral.gov/sites/default/files/files/divisions/consumer-protection/hb300-Authorization-Disclose-Health-Info.pdf)).

## What is a Texas HIPAA release form?

Texas adds a state layer on top of HIPAA. The **Texas Medical Records Privacy Act** is Chapter 181 of the Health and Safety Code, and its section 181.154 governs electronic disclosures of health information ([Texas Health and Safety Code Chapter 181 (sections 181.102 and 181.154)](https://statutes.capitol.texas.gov/Docs/HS/htm/HS.181.htm)). Because most records now move electronically, that section reaches nearly every release a Texas provider makes outside routine care.

Section 181.154 also told the Attorney General to adopt a standard authorization form ([Texas Health and Safety Code Chapter 181 (sections 181.102 and 181.154)](https://statutes.capitol.texas.gov/Docs/HS/htm/HS.181.htm)). The form on the Attorney General’s site is marked effective June 2013, and its own instructions say covered entities may use it or any other form that complies with HIPAA and Texas law ([Texas Attorney General, Authorization to Disclose Protected Health Information](https://www.texasattorneygeneral.gov/sites/default/files/files/divisions/consumer-protection/hb300-Authorization-Disclose-Health-Info.pdf)).

A different Texas form applies to malpractice claims. Civil Practice and Remedies Code 74.052 prints the exact authorization a claimant must send with the pre-suit notice of a health care liability claim ([Texas Civil Practice and Remedies Code 74.051 and 74.052](https://statutes.capitol.texas.gov/Docs/CP/htm/CP.74.htm)).

## Who sends it, and when

The patient or the patient’s legally authorized representative signs it ([Texas Health and Safety Code Chapter 181 (sections 181.102 and 181.154)](https://statutes.capitol.texas.gov/Docs/HS/htm/HS.181.htm)). A Texas hospital or clinic usually hands over its own version. The **release-of-information office** is the provider department that receives these forms and sends the records; a law firm, insurer or family member can bring the Attorney General’s form or a template like the one below. The provider checks it before any electronic release, because Texas requires a separate authorization for each one ([Texas Health and Safety Code Chapter 181 (sections 181.102 and 181.154)](https://statutes.capitol.texas.gov/Docs/HS/htm/HS.181.htm)).

## Where to get a Texas HIPAA release form

1. Ask the provider’s release-of-information office which form it takes, such as its own or the Attorney General’s standard form.
2. For a general release, fill in the template below or the Attorney General’s PDF, one per provider.
3. For a health care liability claim, copy the statutory form from Civil Practice and Remedies Code 74.052 word for word ([Texas Civil Practice and Remedies Code 74.051 and 74.052](https://statutes.capitol.texas.gov/Docs/CP/htm/CP.74.htm)).
4. Sign, date, keep a copy, and send it with a note saying whether you want paper or electronic records.

## Wrong files people send instead

- Reusing one signed authorization for a second electronic disclosure, when Texas asks for a separate one each time.
- A generic release sent with a health care liability notice instead of the 74.052 form ([Texas Civil Practice and Remedies Code 74.051 and 74.052](https://statutes.capitol.texas.gov/Docs/CP/htm/CP.74.htm)).
- Leaving the initials blank for mental health, genetic, substance use or HIV records on the Attorney General’s form, so those records stay out ([Texas Attorney General, Authorization to Disclose Protected Health Information](https://www.texasattorneygeneral.gov/sites/default/files/files/divisions/consumer-protection/hb300-Authorization-Disclose-Health-Info.pdf)).
- A medical power of attorney holder signing without describing that authority on the form.

## Which form fits your Texas request

Start from what you need the records for. The table maps the situation to the form and the rule behind it.

| Situation | Form to use | Rule |
| --- | --- | --- |
| Records to a lawyer, insurer, employer or relative | Any authorization with the federal elements, or the Attorney General’s standard form | 45 CFR 164.508 ([45 CFR 164.508, Authorizations](https://www.law.cornell.edu/cfr/text/45/164.508)); Tex. Health & Safety Code 181.154 ([Texas Health and Safety Code Chapter 181 (sections 181.102 and 181.154)](https://statutes.capitol.texas.gov/Docs/HS/htm/HS.181.htm)) |
| Electronic release outside treatment, payment and operations | A separate authorization for each disclosure | 181.154(b) ([Texas Health and Safety Code Chapter 181 (sections 181.102 and 181.154)](https://statutes.capitol.texas.gov/Docs/HS/htm/HS.181.htm)) |
| Notice of a health care liability claim | The statutory authorization printed in 74.052 ([Texas Civil Practice and Remedies Code 74.051 and 74.052](https://statutes.capitol.texas.gov/Docs/CP/htm/CP.74.htm)) | Civ. Prac. & Rem. Code 74.051 and 74.052 ([Texas Civil Practice and Remedies Code 74.051 and 74.052](https://statutes.capitol.texas.gov/Docs/CP/htm/CP.74.htm)) |
| Your own copy of your records | The provider’s access request, no authorization | Attorney General summary of patient rights ([Texas Attorney General, Medical privacy](https://www.texasattorneygeneral.gov/consumer-protection/file-consumer-complaint/consumer-privacy-rights/medical-privacy)) |

## The Texas rule for electronic disclosures

Under section 181.154(b), a covered entity may not disclose a person’s health information electronically without a separate authorization for each disclosure ([Texas Health and Safety Code Chapter 181 (sections 181.102 and 181.154)](https://statutes.capitol.texas.gov/Docs/HS/htm/HS.181.htm)). The authorization may be written, electronic, or oral if the entity documents it in writing ([Texas Health and Safety Code Chapter 181 (sections 181.102 and 181.154)](https://statutes.capitol.texas.gov/Docs/HS/htm/HS.181.htm)).

The rule does not apply to disclosures to another covered entity for treatment, payment, health care operations or certain insurance functions, or where other law allows it ([Texas Health and Safety Code Chapter 181 (sections 181.102 and 181.154)](https://statutes.capitol.texas.gov/Docs/HS/htm/HS.181.htm)). Covered entities must also post a general notice that health information may be disclosed electronically, for example in the office or on their website ([Texas Health and Safety Code Chapter 181 (sections 181.102 and 181.154)](https://statutes.capitol.texas.gov/Docs/HS/htm/HS.181.htm)).

## What the Attorney General’s standard form contains

The state’s form follows the federal elements and adds a few choices of its own ([Texas Attorney General, Authorization to Disclose Protected Health Information](https://www.texasattorneygeneral.gov/sites/default/files/files/divisions/consumer-protection/hb300-Authorization-Disclose-Health-Info.pdf)). Knowing them helps when you compare it with a hospital’s version.

- Separate initials for mental health records excluding psychotherapy notes, genetic information, drug, alcohol or substance abuse records, and HIV/AIDS test results or treatment ([Texas Attorney General, Authorization to Disclose Protected Health Information](https://www.texasattorneygeneral.gov/sites/default/files/files/divisions/consumer-protection/hb300-Authorization-Disclose-Health-Info.pdf)). Records from a federally assisted substance use disorder program may also need a consent that meets 42 CFR 2.31 ([42 CFR 2.31, Consent requirements for substance use disorder records](https://www.law.cornell.edu/cfr/text/42/2.31)).
- A default end point: the authorization lasts until the patient dies, a minor reaches the age of majority, permission is withdrawn, or an optional date passes ([Texas Attorney General, Authorization to Disclose Protected Health Information](https://www.texasattorneygeneral.gov/sites/default/files/files/divisions/consumer-protection/hb300-Authorization-Disclose-Health-Info.pdf)).
- Revocation by written notice to the recipient named on the form, without undoing earlier actions taken in reliance on it ([Texas Attorney General, Authorization to Disclose Protected Health Information](https://www.texasattorneygeneral.gov/sites/default/files/files/divisions/consumer-protection/hb300-Authorization-Disclose-Health-Info.pdf)).
- A line for a minor’s own signature where Texas law lets the minor consent to the care, with a reference to the Family Code ([Texas Attorney General, Authorization to Disclose Protected Health Information](https://www.texasattorneygeneral.gov/sites/default/files/files/divisions/consumer-protection/hb300-Authorization-Disclose-Health-Info.pdf)).

## Health care liability claims: the Chapter 74 authorization

A claimant must give written notice by certified mail to each physician or provider at least 60 days before filing suit, with the 74.052 authorization attached ([Texas Civil Practice and Remedies Code 74.051 and 74.052](https://statutes.capitol.texas.gov/Docs/CP/htm/CP.74.htm)). Without it, proceedings against that provider are abated until 60 days after the provider receives the authorization ([Texas Civil Practice and Remedies Code 74.051 and 74.052](https://statutes.capitol.texas.gov/Docs/CP/htm/CP.74.htm)). **Abatement** means the case is put on hold against that provider, so nothing moves until the form arrives.

The statutory form covers records from providers who treated the injuries, and from providers seen during the five years before the incident ([Texas Civil Practice and Remedies Code 74.051 and 74.052](https://statutes.capitol.texas.gov/Docs/CP/htm/CP.74.htm)). The patient may list providers whose records are not relevant and initial exclusions for HIV/AIDS, substance abuse, mental health and genetic information ([Texas Civil Practice and Remedies Code 74.051 and 74.052](https://statutes.capitol.texas.gov/Docs/CP/htm/CP.74.htm)).

It expires when the claim is resolved or the litigation ends, whichever comes first ([Texas Civil Practice and Remedies Code 74.051 and 74.052](https://statutes.capitol.texas.gov/Docs/CP/htm/CP.74.htm)). Use the statute’s current text as printed; a homemade version invites a fight over compliance.

## Getting your own records in Texas

You do not need an authorization to see your own file. A provider with an electronic health records system able to fill the request must provide your electronic record no later than the 15th business day after your written request ([Texas Attorney General, Medical privacy](https://www.texasattorneygeneral.gov/consumer-protection/file-consumer-complaint/consumer-privacy-rights/medical-privacy)). It sends it in electronic form unless you agree to another form ([Texas Health and Safety Code Chapter 181 (sections 181.102 and 181.154)](https://statutes.capitol.texas.gov/Docs/HS/htm/HS.181.htm)).

Providers may charge reasonable copying and mailing costs, but not a retrieval fee ([Texas Attorney General, Medical privacy](https://www.texasattorneygeneral.gov/consumer-protection/file-consumer-complaint/consumer-privacy-rights/medical-privacy)). To send records to someone else, use the authorization; the general [HIPAA release form](/documents/hipaa-release-form) guide explains each federal element.

## The template: Texas authorization to disclose health information

**Not advice.** This page is general information, not tax, legal or HR advice. Rules change: check the cited source and ask your own professional before you rely on it. Last reviewed October 25, 2026.

For general releases from a Texas provider, not for Chapter 74 claims. One form per provider; the patient initials each sensitive category to include and checks whether electronic delivery is allowed.

```text
AUTHORIZATION TO RELEASE HEALTH INFORMATION (TEXAS)
Patient name: [Last, first, middle] | Other names: [ ] | Date of birth: [MM/DD/YYYY]
Address: [Street, city, TX ZIP] | Phone: [ ]
Released by: [Texas provider or facility name and address]
Released to: [Name of person or organization], [address], [phone]

Records covered
Records dated [start] through [end]: [ ] progress notes [ ] discharge summary [ ] operative and consultation reports [ ] lab and pathology reports [ ] radiology reports and images [ ] billing information [ ] other: [ ].

Initials required for these records
[Initials] mental health records, not psychotherapy notes. [Initials] genetic information and test results. [Initials] drug, alcohol or substance use records (a federally assisted program may require its own 42 CFR Part 2 consent; SUD counseling notes are not included). [Initials] HIV/AIDS test results or treatment. Records on lines without initials are excluded.

Why the records are needed
[ ] My own request [ ] Insurance: [policy or claim] [ ] Legal matter: [description] [ ] Other: [ ].

Electronic delivery
I [do / do not] authorize the provider to send these records to the recipient electronically. This authorization covers this one disclosure only.

End date
This authorization ends on [date], or earlier if [event], or when I withdraw it in writing.

Withdrawing permission
I can withdraw this authorization by written notice to [provider and records address]. Anything done in reliance on it before the provider receives my notice stays valid. If I signed it to obtain insurance coverage, other law may still give the insurer the right to contest a claim under the policy or the policy itself.

Your rights
Signing is voluntary. My care, payment, health plan enrollment and eligibility for benefits do not depend on it. Once released, the recipient could share the information again, and federal privacy rules might not protect it anymore. I may have a copy of this form.

Representative (optional)
Signed by [name], acting for the patient as [parent / guardian / medical power of attorney / executor], proof attached.

X ____________________________  Date: [MM/DD/YYYY]
Signature of patient or legally authorized representative
Printed name: [ ]
```

Download: [Word](https://dokutrak.com/downloads/pseo-v2/f6-document-guides/hipaa-release-form/texas.docx) · [PDF](https://dokutrak.com/downloads/pseo-v2/f6-document-guides/hipaa-release-form/texas.pdf)

## Questions people ask

### Is there an official Texas HIPAA release form?

The Attorney General adopted a standard Authorization to Disclose Protected Health Information under section 181.154(d) ([Texas Attorney General, Authorization to Disclose Protected Health Information](https://www.texasattorneygeneral.gov/sites/default/files/files/divisions/consumer-protection/hb300-Authorization-Disclose-Health-Info.pdf)). Providers may use it or any other form that complies with HIPAA and Texas law, so it is not the only valid one.

### Does a Texas HIPAA release need to be notarized?

Neither the federal elements nor the Attorney General’s standard form call for a notary; the form ends with the signature and date ([Texas Attorney General, Authorization to Disclose Protected Health Information](https://www.texasattorneygeneral.gov/sites/default/files/files/divisions/consumer-protection/hb300-Authorization-Disclose-Health-Info.pdf)). A provider can still ask for identification before releasing records.

### Do I need a HIPAA release if I have a medical power of attorney?

A person with legal authority to make health care decisions is treated as the patient for HIPAA purposes ([45 CFR 164.502(g), Personal representatives](https://www.law.cornell.edu/cfr/text/45/164.502)). That person signs the release in the patient’s place and states the authority on the form.

### Which release form do Texas lawyers use for a malpractice claim?

The authorization printed in Civil Practice and Remedies Code 74.052, sent with the pre-suit notice ([Texas Civil Practice and Remedies Code 74.051 and 74.052](https://statutes.capitol.texas.gov/Docs/CP/htm/CP.74.htm)). See the attorney version for other matters.

## Sources

- [Texas Health and Safety Code Chapter 181 (sections 181.102 and 181.154)](https://statutes.capitol.texas.gov/Docs/HS/htm/HS.181.htm): A covered entity needs a separate authorization for each electronic disclosure outside the listed exceptions; the authorization may be written, electronic or documented oral; the Attorney General adopts a standard form; electronic records go to the patient in electronic form unless the patient agrees otherwise.
- [Texas Attorney General, Authorization to Disclose Protected Health Information](https://www.texasattorneygeneral.gov/sites/default/files/files/divisions/consumer-protection/hb300-Authorization-Disclose-Health-Info.pdf): Standard form effective June 2013 with initials for sensitive categories, a default expiration, written revocation, and a note that any compliant form may be used.
- [Texas Attorney General, Medical privacy](https://www.texasattorneygeneral.gov/consumer-protection/file-consumer-complaint/consumer-privacy-rights/medical-privacy): Providers with a capable electronic health records system must provide records by the 15th business day after a written request, and may charge copying and mailing costs but no retrieval fee.
- [Texas Civil Practice and Remedies Code 74.051 and 74.052](https://statutes.capitol.texas.gov/Docs/CP/htm/CP.74.htm): Pre-suit notice at least 60 days before filing must be accompanied by the statutory authorization, which covers five years before the incident and expires at resolution or the end of litigation.
- [45 CFR 164.508, Authorizations](https://www.law.cornell.edu/cfr/text/45/164.508): Sets the core elements and required statements of a valid HIPAA authorization.
- [45 CFR 164.502(g), Personal representatives](https://www.law.cornell.edu/cfr/text/45/164.502): A person with authority under applicable law to make health care decisions for an adult is treated as the individual.
- [42 CFR 2.31, Consent requirements for substance use disorder records](https://www.law.cornell.edu/cfr/text/42/2.31): A Part 2 consent must carry its own listed elements; SUD counseling notes need a separate consent; a consent for use in legal proceedings cannot be combined with any other consent.

## More on this topic

- [HIPAA release form](/documents/hipaa-release-form)
- [Patient intake form](/documents/patient-intake-form)

## About the author

Arthur Teboul (Founder, DokuTrak) is building DokuTrak after watching professionals lose hours chasing clients for documents over email. [Arthur Teboul](/authors/arthur-teboul).

How this page was made (methodology): it is built from the primary sources listed under Sources, and every rule and figure on it links to the source it comes from. Last updated October 25, 2026. Spotted an error or a rule that changed? [Contact us](/contact).