A patient authorization for disclosure of PHI must include the purpose of the disclosure and what information is to release if PHI relates?

A patient authorization for disclosure of PHI should include the purpose of the disclosure, what information is to be released, who is authorized to receive the information, and the expiration date of the authorization. If the PHI relates to specific sensitive information such as mental health or substance abuse treatment, additional specific language may be required to comply with regulations such as HIPAA.