When HB 300 passed in 2011, it made changes to existing Texas privacy laws that are more stringent than those found in HIPAA and HITECH.
HB 300 also required the Texas Attorney General to develop an Authorization to Disclose Protected Health Information form that would comply with HIPAA, HB 300, and other applicable laws. The form is now available.
The use of this form is not mandatory. But if you use a different form, it must comply with the applicable privacy laws. If you have already modified your form, you may want to compare it to the attorney general's form.
Authorization is not required for disclosures related to treatment, payment, health care operations, performing an insurance or health maintenance organization function, or as may be otherwise authorized by law.
The form is also available from the Texas Attorney General's web site.