hipaa-release
Drafts a HIPAA Release Authorization form compliant with 45 CFR § 164.508 for authorizing disclosure of protected health information. Use when drafting HIPAA authorizations, PHI release forms, medical records releases, or healthcare privacy waivers alongside healthcare powers of attorney or advance directives.
Best use case
hipaa-release is best used when you need a repeatable AI agent workflow instead of a one-off prompt.
Drafts a HIPAA Release Authorization form compliant with 45 CFR § 164.508 for authorizing disclosure of protected health information. Use when drafting HIPAA authorizations, PHI release forms, medical records releases, or healthcare privacy waivers alongside healthcare powers of attorney or advance directives.
Teams using hipaa-release should expect a more consistent output, faster repeated execution, less prompt rewriting.
When to use this skill
- You want a reusable workflow that can be run more than once with consistent structure.
When not to use this skill
- You only need a quick one-off answer and do not need a reusable workflow.
- You cannot install or maintain the underlying files, dependencies, or repository context.
Installation
Claude Code / Cursor / Codex
Manual Installation
- Download SKILL.md from GitHub
- Place it in
.claude/skills/hipaa-release/SKILL.mdinside your project - Restart your AI agent — it will auto-discover the skill
How hipaa-release Compares
| Feature / Agent | hipaa-release | Standard Approach |
|---|---|---|
| Platform Support | Not specified | Limited / Varies |
| Context Awareness | High | Baseline |
| Installation Complexity | Unknown | N/A |
Frequently Asked Questions
What does this skill do?
Drafts a HIPAA Release Authorization form compliant with 45 CFR § 164.508 for authorizing disclosure of protected health information. Use when drafting HIPAA authorizations, PHI release forms, medical records releases, or healthcare privacy waivers alongside healthcare powers of attorney or advance directives.
Where can I find the source code?
You can find the source code on GitHub using the link provided at the top of the page.
SKILL.md Source
# HIPAA Release Authorization Drafts a 45 CFR § 164.508-compliant authorization for disclosure of protected health information, typically executed alongside healthcare powers of attorney or advance directives. Output is a single execution-ready form with all client-specific fields marked in `[BRACKETS]`. ## Prerequisites Gather before drafting: 1. **Patient info** — full legal name, DOB, address 2. **Healthcare agent(s)** — names and relationships (primary + successor) 3. **Cross-reference document** — Healthcare POA or Advance Directive 4. **Jurisdiction** — state witness/notary rules, sensitive-category consent requirements 5. **Scope instructions** — whether to include mental health, substance abuse, HIV/AIDS, genetic info ## Form Sections Generate all sections in order: | # | Section | Key Content | |---|---------|-------------| | 1 | Title | "Authorization for Release of Protected Health Information Pursuant to HIPAA" | | 2 | Patient Identification | Full legal name, DOB, address; statement: "I authorize the use and disclosure of my PHI as described in this authorization." | | 3 | Authorized Recipients | Each agent by name and role: `[Agent Name], designated as my Healthcare Agent`; include successors | | 4 | Disclosing Parties | Broad: "Any health plan, physician, healthcare professional, hospital, clinic, laboratory, pharmacy, medical facility, or other covered entity that has provided payment, treatment, or services to me or possesses my PHI." | | 5 | Scope of Information | Default comprehensive: complete medical record, mental health, substance abuse treatment, HIV/AIDS, genetic info. Flag state carve-outs needing separate consent. | | 6 | Purpose | "To enable my designated healthcare agent(s) to make informed healthcare decisions on my behalf, communicate with my providers, and access all information necessary to execute their duties under my Healthcare POA or Advance Directive." | | 7 | Duration & Expiration | Effective immediately; remains until written revocation or death. State whether authorization survives incapacity. | | 8 | Revocation Rights | Required § 164.508 statements — see checklist below | | 9 | Additional Statements | Right to refuse; treatment not conditioned on signing; right to copy | | 10 | Execution Block | Patient signature, printed name, date; personal representative block (name, signature, relationship, authority); witness/notary lines per state law | ## § 164.508 Compliance Checklist Every authorization must include all six statements: - [ ] Right to revoke in writing at any time - [ ] Revocation does not affect actions taken in reliance before receipt - [ ] Disclosed information may be re-disclosed and no longer federally protected - [ ] Right to refuse to sign - [ ] Treatment/payment not conditioned on authorization (unless exception applies) - [ ] Right to receive a copy of the signed authorization ## Sensitive Category Carve-Outs Some categories require **separate consent** beyond the general HIPAA authorization: | Category | Federal Rule | State Variation | |----------|-------------|-----------------| | Mental health / psychotherapy notes | Separate authorization required (§ 164.508(a)(2)) | Many states add restrictions | | Substance abuse treatment | 42 CFR Part 2 requires separate consent | Stricter re-disclosure rules | | HIV/AIDS | No federal carve-out beyond HIPAA | ~35 states require specific consent | | Genetic information | GINA covers employment/insurance | State genetic privacy laws vary | Flag applicable state rules and draft supplemental consent language where needed. ## Drafting Rules - All placeholders use `[BRACKETS]` with descriptive labels - Cross-reference named agents against the client's Healthcare POA - Plain language with legal precision; use numbered/lettered sections - Include personal representative authority documentation fields (court appointment, POA) - Footer: "This is a legal document. Review by qualified legal counsel is recommended before execution." - Do not include regulatory explanations in the form — keep it execution-ready - If jurisdiction known, tailor witness/notary and sensitive-info requirements; if unknown, include optional blocks with guidance notes
Related Skills
auditing-hipaa-compliance
Conducts HIPAA compliance assessments with Privacy Rule, Security Rule, and Breach Notification analysis. Use when auditing HIPAA compliance, assessing privacy practices, or reviewing security controls.
volunteer-waiver-release
Drafts a Volunteer Waiver and Release of Liability Agreement covering assumption of risk, liability release, indemnification, medical authorization, and minor/guardian provisions. Enforces conspicuous formatting and state-law compliance. Use when drafting volunteer waivers, assumption-of-risk agreements, or volunteer liability releases for nonprofits or corporate volunteer programs.
ucc-lien-release
Drafts Evidence of UCC Lien Release documents proving termination of security interests perfected under the Uniform Commercial Code. Extracts UCC-1 filing numbers, party information, and collateral descriptions from uploaded documents for compliant drafting. Use for UCC lien releases, UCC-3 termination evidence, security interest discharge certificates, or asset purchase closings requiring proof of clear title.
ucc-lien-release-evidence
Drafts an Evidence of UCC Lien Release documenting termination of a UCC-1 financing statement for U.S. transactional closings. Trigger when the user needs a UCC-3 termination certificate, secured-party release letter, payoff evidence, or clear-title closing deliverable. Keywords: "UCC-1", "UCC-3 termination", "lien release", "secured party release", "clear title", "payoff letter".
release-of-claims
Drafts enforceable Release of All Claims documents for personal injury settlement resolution. Produces general releases with broad discharge language, unknown-claims waivers (including Cal. Civ. Code § 1542), consideration recitals, protective representations, and execution formalities. Use when drafting settlement releases, general releases, claim waivers, discharge agreements, or mutual release documents in personal injury litigation.
hipaa-release-form
Drafts HIPAA Release Authorization forms compliant with 45 CFR 164.508 for disclosure of protected health information. Typically used in estate planning or healthcare decision-making packets. Use when a client needs a HIPAA authorization, medical records release, PHI disclosure consent, healthcare agent access form, or advance directive bundle.
hipaa-release-authorization
Drafts HIPAA-compliant PHI release authorizations for estate-planning workflows under 45 CFR §164.508. Use when drafting release forms, healthcare POA support documents, or record-access instruments. Triggers: HIPAA release, PHI authorization, healthcare agent access, advance directive support, medical record release.
hipaa-privacy-notice
Drafts a HIPAA-compliant Notice of Privacy Practices per 45 CFR § 164.520 for covered entities. Produces patient-accessible documents covering permitted PHI uses/disclosures, individual rights, breach notification, and complaint procedures. Use when drafting HIPAA privacy notices, NPP documents, patient privacy disclosures, or covered entity privacy practice notices.
hipaa-baa
Drafts HIPAA/HITECH-compliant Business Associate Agreements governing PHI/ePHI handling between covered entities and business associates. Covers Privacy Rule and Security Rule obligations, breach notification, subcontractor flow-downs, individual-rights support, and state-law overlays. Use when drafting or updating a BAA, negotiating vendor PHI access, or attaching HIPAA terms to a services agreement. Trigger keywords: BAA, business associate agreement, HIPAA contract, PHI vendor agreement, HITECH breach notice.
franchise-release
Drafts a General Release for termination or expiration of a franchise agreement with broad release language, unknown-claims waivers (Cal. Civ. Code § 1542), covenants not to sue, and carve-outs preserving post-termination obligations. Use when finalizing franchise relationships, drafting termination or expiration releases, or settling franchise disputes.
employee-separation-release
Drafts U.S. employee separation and release agreements exchanging severance consideration for a comprehensive release of employment-related claims, with OWBPA/ADEA compliance, COBRA terms, confidentiality, and post-employment obligations. Use when preparing separation agreements, severance packages, termination releases, or settling employment claims.
managing-earnings-releases
Structures earnings release preparation with GAAP/non-GAAP reconciliation and forward guidance documentation. Use when preparing earnings releases, reconciling non-GAAP measures, or drafting press releases.