At almost every healthcare visit you will be handed the same core set of documents to sign: an intake and medical history packet, a consent for treatment, a notice of privacy practices, a financial responsibility agreement, and, depending on the situation, an authorization to release records, an advance directive acknowledgment, an arbitration clause, or a No Surprises Act notice. Each form does something different, and a few of them carry real financial or legal weight. These are the forms patients must sign at the doctor, and knowing what each one commits you to is the difference between routine paperwork and a decision you may regret.
Intake and Medical History
The first packet at a new provider collects your demographics, emergency contacts, current medications, allergies, past illnesses and surgeries, family history, and lifestyle factors like smoking or drinking. Everything you put here becomes the foundation of your medical record. A missed allergy or an omitted medication can produce a dangerous interaction or a duplicate prescription.
You are not legally required to answer every question, but gaps can limit what your provider can safely do for you. If a question feels too personal, ask why the provider needs it before deciding whether to answer.
Consent for Treatment
Consent comes in two flavors, and they are not interchangeable.
General Consent
A general consent form covers routine care: basic exams, standard lab work, and common diagnostic tests. It establishes that you showed up voluntarily and agree to be seen. It is deliberately broad, and it does not authorize anything high-risk or invasive.
Informed Consent for Specific Procedures
When a procedure carries meaningful risk, you sign a separate informed consent. This applies to surgeries, anesthesia, biopsies, chemotherapy and radiation, blood transfusions, high-risk medications such as opioids, and procedures that enter the body like an endoscopy. Before you sign, your provider must explain your diagnosis, what the procedure involves, the risks and their likelihood, the expected benefits, what happens if you wait, and what alternatives exist.1National Library of Medicine. Informed Consent – Adults
Informed consent is a conversation, not a signature. If terms confuse you, stop and ask. You can request time to think, or to talk it over with family. Signing under pressure or without real understanding can undermine the consent itself, and providers who rush the step create liability for themselves — most will slow down if you ask.
Blood transfusion typically requires its own consent form, separate from any surgical consent, because it carries distinct risks and some patients refuse on religious or personal grounds.
Refusing Treatment and the AMA Form
Federal regulations give every hospital patient the right to refuse care and to make informed decisions about treatment.2eCFR. 42 CFR 482.13 – Condition of Participation: Patient’s Rights If you leave a hospital before your doctor recommends it, you will usually be asked to sign an Against Medical Advice form. That document records that the risks were explained and you left anyway.
The AMA form protects the provider more than it protects you. It does not waive your right to sue later, and it does not automatically cause your insurance to deny the visit. What it does is create a record that you were warned.
Notice of Privacy Practices
Federal law requires every provider to hand you a Notice of Privacy Practices and make a good-faith effort to obtain your written acknowledgment.3eCFR. 45 CFR 164.520 – Notice of Privacy Practices for Protected Health Information The notice explains how the provider can use and share your health information. Providers may share records for treatment, payment, and healthcare operations without asking your permission each time.4eCFR. 45 CFR 164.506 – Uses and Disclosures to Carry Out Treatment, Payment, or Health Care Operations Your doctor can send records to a specialist, your insurer can process a claim, and the practice can run quality reviews, all without a separate signature.
The notice also lays out your rights: to inspect and copy your records, request corrections, ask for restrictions on how information is shared, receive an accounting of disclosures, and get a paper copy of the notice itself.3eCFR. 45 CFR 164.520 – Notice of Privacy Practices for Protected Health Information
Here is the part most patients miss. Signing the acknowledgment confirms only that you received the notice. It does not mean you agreed to anything, and the provider’s authority to use your information for treatment, payment, and operations exists under federal law whether or not you sign.4eCFR. 45 CFR 164.506 – Uses and Disclosures to Carry Out Treatment, Payment, or Health Care Operations Refusing to sign simply means the provider documents that they tried. Your care should not change.
Authorization to Release Records
An authorization is not the same as the privacy notice acknowledgment. Authorizations give the provider permission to share your records for purposes outside routine treatment and billing, such as sending them to an employer, a life insurance company, or an attorney.5U.S. Department of Health and Human Services. What Is the Difference Between Consent and Authorization
A valid authorization must describe the information being released, name who releases it and who receives it, state the purpose, carry an expiration date, and include your signature. It must tell you that you can revoke it in writing and whether the provider can refuse care if you decline to sign. In most cases, treatment cannot be conditioned on signing an authorization.6eCFR. 45 CFR 164.508 – Uses and Disclosures for Which an Authorization Is Required
Read the expiration date carefully. Vague language like “until revoked” gives the recipient open-ended access. If you are releasing records for one purpose, such as a workers’ compensation claim, match the expiration to that purpose.
Records from substance use disorder treatment carry extra protection under a separate federal regulation and generally cannot be shared without your specific written consent.7eCFR. 42 CFR Part 2 – Confidentiality of Substance Use Disorder Patient Records Counseling session notes always require their own separate consent, and consent to release these records for legal proceedings must be kept separate from any other authorization.8U.S. Department of Health and Human Services. Fact Sheet: 42 CFR Part 2 Final Rule
Financial Responsibility Agreement
The financial responsibility form spells out what you owe. It typically covers co-payments, deductibles, and any charges your insurance does not pay. Many of these forms include an assignment of benefits clause, which authorizes your insurer to pay the provider directly. That speeds up billing but leaves you personally responsible for the gap between what your insurer pays and what the provider charged.
Watch the collection language. Some agreements state that if your account goes to collections, you agree to pay the collection agency’s fees or the provider’s attorney costs on top of the balance. That clause can substantially increase what you owe. Ask whether it is negotiable.
No Surprises Act Notice
If you are receiving care from an out-of-network provider at an in-network facility, or getting post-stabilization care at an emergency facility, federal law requires a specific written notice before you can be billed at out-of-network rates. The notice must tell you the provider is out of network, that you will likely pay more, and that signing waives federal billing protections.9Centers for Medicare & Medicaid Services. Standard Notice and Consent Forms Under the No Surprises Act
Timing is strict. For appointments made at least 72 hours in advance, the notice must arrive at least 72 hours before service. For shorter-notice appointments, it must come the day the appointment is scheduled. Walk-in or post-stabilization situations require it no later than three hours before service.9Centers for Medicare & Medicaid Services. Standard Notice and Consent Forms Under the No Surprises Act The form must be physically separate from every other document, and someone from the office must be available to answer questions. A provider who buries this notice in a stack of intake paperwork has broken the rule, and signing under those circumstances gives up protections you were meant to keep.
Good Faith Estimate for Self-Pay Patients
If you do not have insurance or choose not to use it, the provider must give you a good faith estimate of expected charges before your scheduled service. For appointments booked at least 10 business days out, the estimate is due within three business days of scheduling. For appointments booked three to nine business days out, it is due within one business day.10eCFR. 45 CFR 149.610 – Requirements for Provision of Good Faith Estimates You can also request an estimate at any time, and the provider then has three business days to deliver it.
The estimate must itemize each service with its billing code, description, and expected charge. If the final bill exceeds the estimate by $400 or more, you have the right to dispute it through the federal patient-provider dispute resolution process. The deadline to file is 120 calendar days after receiving the bill.11Centers for Medicare & Medicaid Services. Good Faith Estimate and Patient-Provider Dispute Resolution Requirements This is one of the most underused patient protections in healthcare. If you are self-pay and the bill lands well above the quote, the formal dispute process exists for exactly this situation.
Advance Directives, POLST, and DNR Forms
Hospitals, nursing homes, and home health agencies that participate in Medicare must, under the Patient Self-Determination Act, give you written information about advance directives when you are admitted, explain your right under state law to accept or refuse treatment, ask whether you already have a directive, and record the answer. A facility cannot discriminate against you based on whether you have one.12Indian Health Service. Patient Self-Determination and Advance Directives
Advance directives typically have two parts. A living will records your preferences about life-sustaining treatment if you cannot communicate — mechanical ventilation, feeding tubes, and similar decisions. A healthcare power of attorney names someone to make medical decisions for you when you cannot. In practice, the power of attorney tends to be more useful, because a living will cannot anticipate every scenario, while a designated decision-maker can respond to what is actually happening.
A POLST (Physician Orders for Life-Sustaining Treatment) or a DNR (Do Not Resuscitate) form is different. These are actual medical orders and require a provider’s signature. A DNR instructs emergency personnel not to perform CPR. A POLST covers a broader set of end-of-life treatment decisions. State rules vary on who can sign and how many witnesses or notarizations are required.
Arbitration Agreements
Some providers include an arbitration agreement in the intake packet. By signing, you agree that any dispute about your care will be resolved through private arbitration rather than a lawsuit. The U.S. Supreme Court has upheld these agreements in healthcare settings under the Federal Arbitration Act, so they carry real legal force.
Arbitration is not automatically bad, but know what you give up: the right to a jury trial, broader discovery, and the transparency of a courtroom. Many agreements include an opt-out window, often 30 to 60 days, during which you can revoke by written notice. Opting out should not affect your access to care.
This is where patients most often sign without reading. Unlike most healthcare forms, an arbitration agreement is frequently optional. Look for the words “voluntary” or an opt-out clause. If you cannot find either and have concerns, ask the front desk whether signing is required to receive treatment. Often it is not.
Emergency Department Paperwork
Emergency rooms follow different rules. Under EMTALA, any hospital emergency department that participates in Medicare must provide a medical screening exam to anyone who arrives, regardless of ability to pay, and must stabilize any emergency condition before discussing transfer or discharge.13Centers for Medicare & Medicaid Services. Emergency Medical Treatment and Labor Act (EMTALA)
The practical consequence: a hospital cannot require you to sign financial forms or provide insurance information before the initial screening. Registration paperwork may be handed to you while you wait, but it cannot be a precondition for being seen. Anyone telling you that billing forms must be completed before a doctor evaluates you is describing a violation of federal law.13Centers for Medicare & Medicaid Services. Emergency Medical Treatment and Labor Act (EMTALA)
After stabilization you will see the same forms discussed above, plus a conditions-of-admission form in most hospitals. That document covers the legal relationship between you and the facility, notes that physicians may be independent contractors rather than hospital employees, limits liability for lost personal belongings, and confirms your agreement to pay. Read it, but in a genuine emergency the stabilization comes first and the paperwork comes second.
Telehealth Consent
Virtual visits typically require a separate consent form addressing risks unique to remote care: technology failures, limits on physical examination, and privacy considerations when health information travels over the internet. Requirements vary by state, but federal guidance directs providers to explain what to expect during the visit, confirm your responsibility for privacy on your end, and disclose whether anyone else is observing.14Telehealth.HHS.gov. Obtaining Informed Consent
If your provider uses a third-party telehealth platform, review the platform’s own privacy policy. HIPAA protects information held by your healthcare provider, but data processed through a technology platform may be governed by the platform’s terms. Some platforms reserve the right to collect and use session data for their own purposes. Before your first virtual visit, check how your data is stored, whether it can be shared with third parties, and whether you can request deletion.