---
title: "Patient authority to release health records to the patient's lawyer"
url: "https://ailawframework.com/precedents/health-and-medical-law/patient-authority-to-release-health-records"
type: "precedent"
site: "AI Law Framework"
id: "a32-patient-authority-to-release-health-records"
area_id: "A32"
kind: "form"
ai_level: "green"
version: 1
law_stated_as_at: "2026-10-18"
---

# Patient authority to release health records to the patient's lawyer

> A signed patient authority directing a health service or practitioner to give copies of the patient's health records to the patient's lawyer, with scope, sensitive-record options, format, fees and a covering request.

Canonical page: https://ailawframework.com/precedents/health-and-medical-law/patient-authority-to-release-health-records  
Law stated as at: 2026-10-18

Site index for agents: https://ailawframework.com/llms.txt

## Key facts

- Kind: Form. A form to complete, or a guide to completing an official one.
- Practice area: [Health & Medical Law](https://ailawframework.com/precedents/health-and-medical-law.md)
- Jurisdictions: Australia, New South Wales
- AI level: Green. AI can do most of the drafting. A lawyer still reviews the result.
- Law stated as at: 2026-10-18
- Status: Maintained. Checked on 2026-10-18 against the 3 authorities it cites, for Australia and New South Wales.

## When to use it

Use at the start of a medical negligence, personal injury, insurance or estate matter when the lawyer needs the client's records from a hospital, clinic or practitioner. Use a subpoena instead when the records belong to someone else or the holder will not release them on consent.

## How AI may be used

AI may complete the authority and covering letter from the intake form inside this template; the lawyer checks at setup that the scope and the sensitive-record options suit the firm's matters, and the client signs it themselves.

**AI may:**

- Fill the client's identifiers, the provider's details and the date range from the intake form
- Prepare one authority per provider from a list of treating practitioners and hospitals
- Track requests sent, follow-ups due and records received in a register

**AI must not:**

- Must not sign the authority or insert an electronic signature for the client
- Must not widen the scope (dates, record types, sensitive categories) beyond what the client has chosen
- Must not upload records received to a tool that is not on the firm's approved list for health information

**The lawyer checks:**

- The person signing is the patient, or has authority to act for them (guardian, attorney, executor or parent), with evidence on file
- The scope is no wider than the matter needs, and the client has made an informed choice about mental health, sexual health, genetic and other sensitive records
- The provider's identity and address are correct, and the authority is current (not older than the provider will accept)

## Authorities

- [Health Records and Information Privacy Act 2002 (NSW) Sch 1, HPP 11(1)(a) (disclosure for a secondary purpose with the individual's consent)](https://legislation.nsw.gov.au/view/html/inforce/current/act-2002-071)
- [Health Records and Information Privacy Act 2002 (NSW) Sch 1, HPP 7 (access to health information)](https://legislation.nsw.gov.au/view/html/inforce/current/act-2002-071)
- [Uniform Civil Procedure Rules 2005 (NSW) r 31.33 (subpoena requiring production of medical records), for records that will not be released on consent](https://legislation.nsw.gov.au/view/html/inforce/current/sl-2005-0418)

## Full text and drafting notes

The full text and the drafting notes are not part of this public page. Signed-in firm accounts can read them at https://ailawframework.com/precedents/health-and-medical-law/patient-authority-to-release-health-records and through the signed-in MCP connector https://ailawframework.com/mcp/firm.

*Practice guidance for planning and review. Confirm current primary sources and the requirements of the actual matter. This is general information, not legal advice.*