Whose authority is needed for a health care provider to disclose health care information?

Generally, the patient himself has to sign an agreement allowing the health care provider to share health care information about himself with another person. Thus, for example, if the patient was going to a specialist, the patient would sign allowing his primary care doctor to give the specialist information.

If the patient is under age 18, then the patient's parent or guardian would sign. Some adults may have a guardian -- adults who are mentally incompetent typically have a legal guardian.

Insurers get information from providers about patient care and services billed. When the patient is at the office, he (or his guardian) signs allowing the provider to share information with the insurer. When you "sign out" at the doctor's office, you are signing a form that allows them to bill the insurer and give whatever related information is needed.