SESKStuff Everyone Should Know
SESK: Stuff Everyone Should Know · sesk.info/hipaa-auth-revoke

How can a patient take back a HIPAA authorization they signed?

Revoke it in writing, at any time.

Start playing free

  1. Revoke it in writing at any time ✔
  2. They can't, it's permanent
  3. Only by calling HHS

Why: A patient may revoke an authorization at any time, in writing. Revoking doesn't undo what the covered entity already did while relying on it.

Huh, didn't know that: Every valid authorization must include an expiration date or an expiration event.

The dad joke
Why did the eraser win the argument? It took everything back.
Like this card?
Play the game

References

Answer: Revoke it in writing at any time. A patient may revoke an authorization at any time, in writing. Revoking doesn't undo what the covered entity already did while relying on it.

  1. 45 CFR 164.508 (eCFR) www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-E/section-164.508
    An individual may revoke an authorization provided under this section at any time, provided that the revocation is in writing
    Checked 2026-10-10.
  2. 45 CFR 164.508 (eCFR) www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-E/section-164.508
    An expiration date or an expiration event that relates to the individual or the purpose
    Checked 2026-10-10.

Think this answer is wrong? Tap "Challenge this answer" on the card in the game and tell us why.

Test yourself in the game

Work SkillsWhat does a covered entity generally need before disclosing a patient's psychotherapy notes?Work SkillsWhich of these is NOT part of a patient's psychotherapy notes under HIPAA?Work SkillsA drug company pays a clinic to mail its patients ads for a new product. What does the clinic need?

That's stuff everyone should know.