A sample form to be provided by an individual to a covered entity under the Health Insurance Portability and Accountability Act of 1996 (HIPAA) (for example, a group health plan or health provider) authorizing the covered entity to use or disclose the individual's protected health information (PHI) for certain purposes. This authorization is designed to comply with HIPAA's requirements, but does not address applicable state law requirements. This Standard Document has integrated notes and important explanations and drafting tips.