The patient must fill out, sign, and date the Authorization. Generally, a patient needs to sign a HIPAA authorization form to disclose their protected health information.Unless there's an exception. Authorizations Required. Health Information Management provides copies of authorization forms that can be completed in person at our Main Campus location. Just fill out a Patient Request For Access to Protected Health Information Form and include the doctor's name, mailing address, phone number and fax number. Members can request a copy of their health care records as outlined in (45 CFR § 164.524). This means members can ask for their medical records. You MUST choose one of the following: I specifically authorize AHCCCS to disclose all of my protected health information in its possession.