Patient intake form template: sections, questions and documents to request

A patient intake form is the first record a practice holds on a new patient. It gathers who the patient is, how to reach them, who pays, and the health background a clinician needs before walking into the exam room. Practices also call it a new patient form, a registration form or a patient information sheet.

Most intake packets bundle several papers that look alike but do different jobs. The questionnaire itself, a financial policy, a consent to treat, and the acknowledgment that the patient received the Notice of Privacy Practices often share one clipboard. Keeping them as separate pages makes each one easier to update.

A Notice of Privacy Practices is the provider’s written explanation of how it may use and share health information; a provider with a direct treatment relationship must hand it over no later than the first service delivery (45 CFR 164.520, Notice of privacy practices).

The practice writes and hands out the form, usually the front desk or practice manager, and the patient or a parent or guardian completes it. Many offices send it a few days before the first appointment so the visit starts on time; others hand it over at check-in. Returning patients update it when something changes, such as a new insurance plan.

1. Start from the template below and delete the modules your specialty does not need.
2. Add your practice name, address and phone at the top, and a version date in the footer.
3. Attach your Notice of Privacy Practices and an acknowledgment line as a separate page.
4. Send the packet with the appointment confirmation, and list the documents the patient should bring.
5. At check-in, compare the name and date of birth on the form with the photo ID and the insurance card.

• Only the front of the insurance card: the back usually carries the claims address and the phone numbers for eligibility checks.
• A medication list with drug names but no dose or frequency.
• A records release for third parties buried inside the intake signature, instead of a separate authorization.
• An emergency contact with no relationship or phone number.
• A minor’s form signed by someone who is not the parent or legal guardian.

Keep the core the same for every patient and add specialty modules at the end. The table follows the order of the template below.

The questionnaire tells you what the patient says; the documents let the front desk confirm it. Ask for them when you send the packet, so nobody photocopies cards at the counter.

• A government photo ID, such as a driver’s license or passport, issued by the state DMV or the State Department.
• Both sides of each insurance card, issued by the health plan; a secondary plan needs its own card.
• A referral or authorization number if the plan requires one for specialists.
• Recent outside records or imaging reports the patient already has at home.
• A current medication list, or the bottles themselves for a complex regimen.

Intake packets often blur three different HIPAA pieces into one signature. Each has its own rule, and each belongs on its own line or page.

1. Privacy notice acknowledgment: the provider makes a good-faith effort to get written acknowledgment that the patient received the notice, and documents why if it could not (45 CFR 164.520, Notice of privacy practices).
2. People involved in care: a short list of family members or caregivers the patient is comfortable with lets the office share what is relevant to their role, after the patient has a chance to object (45 CFR 164.510(b), Involvement in the individual’s care).
3. Authorization: needed only for disclosures outside treatment, payment and operations, and it must carry the federal core elements, so it stays a separate form (45 CFR 164.508, Authorizations).

Under the Privacy Rule, a practice may ask for consent to use records for treatment, payment and operations, but it is not required to (HHS, Difference between consent and authorization under the Privacy Rule). Many offices still include one. Consent to treat is the patient’s signed agreement to be examined and treated, and it comes from state law and clinic policy rather than HIPAA.

What a consent cannot do is replace an authorization when the rule calls for one (HHS, Difference between consent and authorization under the Privacy Rule). If the patient wants records sent to a lawyer or an employer, hand over a separate HIPAA release form.

A short core with a module per specialty keeps the form readable. For example, a pediatric office adds birth history and growth, and a dental office adds dental history and its own insurance fields.

• Women’s health: pregnancy status, last menstrual period, obstetric history.
• Pediatrics: birth history, developmental milestones, school, immunization record.
• Behavioral health: prior counseling, current stressors, screening questionnaires.
• Physical therapy and chiropractic: injury date, how it happened, claim or case number.

• 45 CFR 164.520, Notice of privacy practices: A provider with a direct treatment relationship gives the notice no later than the first service delivery and makes a good-faith effort to obtain written acknowledgment of receipt.
• 45 CFR 164.510(b), Involvement in the individual’s care: A provider may share information directly relevant to a family member’s or caregiver’s involvement, subject to the patient’s opportunity to object.
• 45 CFR 164.508, Authorizations: An authorization must contain the core elements and required statements and may not be combined with other documents except as the rule allows.
• HHS, Difference between consent and authorization under the Privacy Rule: The Privacy Rule permits but does not require consent for treatment, payment and operations, and consent is not sufficient where an authorization is required.