Purpose:
Document individual consent for PHI uses or disclosures not otherwise permitted under HIPAA under §164.508.
Instructions:
Include scope, expiration, and signature requirements.
Retain authorizations securely for six years.
Provide a copy to the individual upon request.