What is a release of information authorization?
A release of information authorization is a written permission allowing a person or organization that holds records to share specified information with another person or organization. The authorization can cover educational, employment, financial, insurance, housing, government, healthcare, or other records, depending on the holder’s rules and applicable privacy requirements.
The document should identify what may be released, who may release it, who may receive it, why the disclosure is requested, and when the permission ends. A general template may help organize those instructions, but it does not automatically satisfy HIPAA, banking rules, education-record requirements, government procedures, or any organization-specific policy.
Common situations where it is used
People may use an authorization to allow a school to send records to another school, an employer to confirm information, a financial institution to provide specified documents, an insurer to share claim records, or an agency to communicate with an approved representative. Families may also authorize information sharing with caregivers, advisors, attorneys, accountants, or service providers.
The record holder controls its release process and may require a secure portal, identity verification, witness, account number, special form, or direct submission. Contact the holder before preparing a general authorization.
Who typically uses it?
The person whose records are involved usually signs the authorization. A parent, guardian, personal representative, business officer, or legally authorized agent may sign only when they have authority recognized by the record holder. The releasing organization and the recipient should be identified by full legal name, department, address, email, fax, or other approved delivery information.
Information commonly included
Records, parties, and purpose
List the person whose records are being released, the record holder, the authorized recipient, and the specific records or categories covered. Include account, student, employee, claim, patient, case, or reference numbers only when necessary. Explain the purpose of the release so the holder can understand the requested disclosure.
Date range, expiration, revocation, and restrictions
State the dates of records covered, the authorization’s effective date, and a clear expiration date or event. Explain any exclusions or one-time limits. If revocation is allowed, state how the signer must notify the holder and recognize that revocation may not undo information already released in reliance on the authorization.
Privacy and organization-specific requirements
Information releases can involve sensitive personal data. Share only what is needed and use secure delivery methods approved by the holder. Healthcare providers may require a HIPAA-compliant form; schools may use education-record forms; banks and government agencies may use their own authorization systems. A general template should never be described as automatically compliant with a specialized law or policy.
Ask whether the holder requires initials for sensitive categories, a witness, a copy of identification, a specific expiration period, or direct delivery from the signer.
Is notarization required?
Notarization is not automatically required for every release authorization. A record holder may accept an electronic signature, handwritten signature, portal confirmation, witnessed signature, or notarized document. The requirement depends on the type of records, organization, jurisdiction, account, and purpose.
If notarization is requested, confirm the certificate type and whether the signer must also submit identification or proof of authority. Notarization verifies the signer and notarial act; it does not force the organization to release information.
Can it be notarized online?
Remote online notarization may be available if the signer, document, notary, and receiving organization meet applicable requirements. The signer completes identity verification and signs electronically while appearing before the notary by live video.
Before using online notarization, ask the record holder whether it accepts an electronic document and seal. Some organizations require their own online portal or original paper form even when notarization is not legally required.
Identification commonly needed
The signer generally needs an acceptable, unexpired government-issued photo ID for notarization. The record holder may separately request an account credential, employee or student ID, proof of guardianship, corporate authority, court appointment, or other evidence. Online notarization also requires email access, reliable internet, and a camera and microphone.
How to create and notarize the document with SafeNotarize
- Contact the record holder. Ask for its required form and submission instructions.
- Create the authorization. Use the builder to identify the parties, records, purpose, dates, expiration, and restrictions.
- Review privacy details. Remove unnecessary information and confirm secure delivery information.
- Leave the signature blank. Wait when the holder or notary requires signing during verification.
- Complete the online session. Upload the PDF, verify identity, and sign during the live video appointment.
- Submit it correctly. Deliver the authorization through the holder’s approved channel and keep a copy.
Important acceptance limitations
The record holder may reject a general authorization that lacks required notices, identifiers, expiration language, privacy acknowledgments, or proof of authority. Specialized legal and regulatory rules may apply to healthcare, education, financial, government, or employment information. SafeNotarize does not guarantee disclosure or legal compliance and does not provide legal advice. Confirm the organization’s exact current form and process.
Frequently asked questions
What information can a release authorization cover?
It can cover specific records or categories identified by the signer, subject to the record holder’s rules and applicable privacy requirements.
Does this general template automatically satisfy HIPAA?
No. Healthcare providers may require their own HIPAA-compliant authorization and specific notices. Use the provider’s required form when one is supplied.
Who should be named as the recipient?
Name the exact person, department, business, agency, or organization authorized to receive the records, including delivery details when requested.
Should the authorization have an expiration date?
Yes, a clear date or event helps limit the authorization. The record holder may impose its own maximum or required expiration period.
Can I revoke the authorization?
Revocation may be allowed, but the holder’s procedure controls. Revocation generally cannot undo disclosures already made in reliance on the authorization.
Is notarization always required?
No. The record holder decides whether it requires notarization, a witness, a portal signature, identification, or its own form.
Can a release authorization be notarized online?
It may be possible when remote online notarization is permitted and the record holder accepts the electronic document and seal.