Last updated September 18, 2026
What the federal rule requires (45 C.F.R. §164.508)
A HIPAA authorization is valid only if it contains the elements the privacy rule lists: a specific description of the information, who may disclose it, who may receive it, the purpose ("at my request" is enough), an expiration date or event, your right to revoke in writing, a statement that treatment cannot be conditioned on signing, a note that re-disclosed information may no longer be protected, and your signature and date. A release missing an element is one a hospital’s privacy officer may refuse.
Florida’s extra layers (§456.057, §381.004, §394.4615, §760.40)
Florida treats certain categories as specially protected and requires a specific, separately stated authorization for each: HIV test results (§381.004), mental health records (§394.4615), substance-use treatment records, sexually transmissible infection records, and genetic testing results (§760.40). Our release presents each as a sign-or-initial line so the categories you include are your decision in your own ink, and it excludes psychotherapy notes, which federal law handles separately. Florida’s records statute (§456.057) governs how practitioners disclose records on a patient’s written authorization.
The incapacity-certificate direction
The most practical clause in the release directs your providers to give the people you name the physician certificates that a durable power of attorney or a revocable trust uses to establish incapacity. Without that direction, an agent or successor trustee can hold a valid document and still be unable to obtain the letter that lets them act.
Who to name, and for how long
Most people name the health care surrogate, the agent under the power of attorney, the successor trustee, and the family members who would be at the bedside. The release states an expiration event rather than a short date, because a release that has expired when it is needed is no release at all, and it supersedes any prior restrictions you placed on your records so the new list controls. It is an information-access document only: it authorizes disclosure and never makes a medical decision for you.
The HIPAA release we prepare
- The Florida master grounded in final South Florida hospital forms and the verified federal and Florida text — the all-providers discloser class, the information description, the five sensitive-category elections, the psychotherapy-notes exclusion, the recipient list, the incapacity-certificate direction, the supersede clause, the compliant expiration event, the required statements, and the execution block with an optional notary.
- Florida signing instructions and the after-signing distribution page (who gets copies).
- Your answers fill the blanks; the master text never changes.
- Also inside every Will-Based and Trust-Based plan.
$99 as a single document, or from $199 inside the Will-Based Plan.
Start a Florida HIPAA releaseSoftware, not a law firm. The document is prepared from your answers on a locked Florida master; it is not reviewed by anyone, and a licensed Florida attorney of your choosing can review it before you sign.
Related reading
- Florida living will and health care surrogate →
- The Florida durable power of attorney →
- Florida advance directives, explained →
- The Will-Based Plan package →
General information about Florida law, not legal advice.
Frequently asked questions
Is a HIPAA release the same as a health care surrogate designation?
No. The surrogate designation names who decides your care. The HIPAA release names who may receive your information. Estate plans carry both, and the release usually reaches more people than the surrogate.
Does a HIPAA release need to be notarized in Florida?
The federal rule requires a signature and date, not a notary. A witnessed or notarized signature makes the release harder to challenge, which is why our master offers the notary block.
Why does the release ask me to initial the sensitive categories?
Florida law requires a specific authorization for HIV results, mental health, substance-use, sexually transmissible infection, and genetic records. Initialing each line is what makes the disclosure of that category lawful.
Can I revoke it?
Yes, in writing, at any time; the release says so because the federal rule requires it. Revocation does not undo disclosures already made in reliance on it.
General information about Florida law, not legal advice.