No. You do not have to sign a blank medical records release form to receive workers’ compensation benefits in Virginia.

But refusing to sign a general medical authorization does not prevent the insurance company from obtaining medical records relevant to your claim.

Once you file a workers’ compensation claim, Virginia law allows all parties to obtain medical reports concerning your claimed injury and treatment. The physician-patient privilege that applies in civil cases under Virginia Code § 8.01-399 no longer protects your treatment records. Virginia Code § 65.2-607 makes that privilege inapplicable in workers’ compensation proceedings, and § 65.2-604 controls how the parties exchange medical reports. The insurer can also use discovery and, when appropriate, subpoenas to obtain medical records without relying on a blanket authorization from you.

So the real question usually isn’t whether the insurance company will see any of your medical records. It will.

Rather, the question is:

Which records can the insurer get, how far back can it go, and should you voluntarily give it unrestricted access to your medical history?

Those are very different questions.

And the difference can affect whether the insurer finds evidence it can use to deny your claim, challenge your disability, attack your credibility, or reduce what it is willing to pay in a workers’ compensation settlement.

Does the insurance company want you to sign a medical authorization?

Call me before you sign it. The form may include language that concerns me because of how it could affect your case. Richmond: 804-251-1620. Hampton Roads: 757-810-5614.

What Is a Medical Authorization Form?

A medical authorization – sometimes called a general medical records release or a HIPAA authorization – is a document allowing someone else to get your medical records directly from your healthcare providers.

In a workers’ compensation case, that third party is usually your employer, its workers’ comp insurance carrier, a third-party administrator such as Sedgwick or Gallagher Bassett, or an attorney representing the employer and insurer.

The problem isn’t necessarily the request to sign the authorization.

The problem is its scope.

The generic forms insurance companies send injured workers are rarely narrow. A typical medical records release from an adjuster may give the insurer access to:

Every healthcare provider you have seen;
Records for medical conditions unrelated to your work injury;
Records going back decades ;
Sensitive medical information, such as mental health records when you do not seek benefits for psychiatric impairments, or sexual history; and
Future records for treatment you receive after signing the form.

Some medical authorization forms go even further and authorize the adjuster or insurance defense attorney to speak with your doctors directly, without you present.

That is much more access than providing the records reasonably tailored to investigate your workers’ compensation claim.

Doesn’t HIPAA Stop the Insurer from Getting My Medical Records?

I get this question a lot because many injured workers have heard about HIPAA and assume it applies to their case.

The answer is: Not necessarily.

HIPAA does not block a workers’ compensation insurer or self-insured employer from obtaining your medical records. The Privacy Rule at 45 C.F.R. Section 164.512(l) permits disclosure of protected health information to workers’ comp carriers, employers, and administrative agencies when authorized by workers’ compensation laws.

Virginia’s health records privacy statute does not block the insurer either. Virginia Code Section 32.1-127.1:03 explicitly states that this law does not apply to the status of and release of information governed by the Virginia Workers’ Compensation Act.

So Do I Have to Sign the Insurance Company’s Medical Release?

No. You do not have to sign the blank or unrestricted medical records release simply because an adjuster sends one to you.

But the employer and insurer have other ways to obtain your relevant medical information.

After you file a claim, they may use formal discovery to uncover medical information:

Interrogatories asking you to identify past and current providers;
Requests for production asking you to turn over medical records you possess;
Questions under oath at your deposition;
Rule 4.2 of the Rules of the Workers’ Compensation Commission requires you to produce medical records as you receive them; and
Subpoenas to your healthcare providers, issued by the employer’s attorney (allowed in Virginia) or the Commission at the employer’s request.

Here’s what matters: Discovery in a workers’ comp case is limited to treatment and records relevant to the claim.

When the insurer uses formal discovery to demand records you believe are irrelevant or broad, you can object and require the insurer to justify its request. If a disagreement remains, the Workers’ Compensation Commission will intervene and decide the issue.

If you voluntarily sign an unrestricted authorization, you give up that opportunity before you know what the insurer is looking for to build its defense.

How Far Back Can the Workers’ Comp Insurer Look at My Medical History?

Virginia workers’ compensation has no bright-line rule that makes every medical record from a particular number of years automatically discoverable.

In practice, insurers frequently seek decades of pre-injury medical records, particularly records involving the same body part or symptoms involved in the workers’ compensation claim.

Prior treatment or injury to the same body part is likely to be discoverable no matter how far back. For example, if you had a lumbar fusion for a back injury 15 years ago, refusing to sign a blank release does not mean you can withhold the records concerning that earlier back injury.

Records for unrelated medical conditions are a different matter. The further back the insurer reaches for treatment records that have nothing to do with the injured body part, the harder time it has explaining why those records are relevant. In my experience, demands for unrelated medical history from 10 years prior to the work accident are unlikely to get a favorable reception from deputy commissioners if you object or fight a motion to compel.

The point of limiting a medical authorization is not to hide relevant medical history. It is to prevent the insurer from using a broad release to invade your privacy without having to establish why it is relevant to the claim.

The insurer often has legitimate reasons for wanting the widest possible file – prior injuries, degenerative findings, an offhand comment to your doctor about money, which the insurer may use when determining how much you would accept in a workers’ compensation settlement. I have written separately about what the insurance company is looking for in your medical records, and I recommend reading that article before you decide whether to object.

But these reasons do not necessarily mean the insurer should receive every medical record from every doctor you’ve seen.

What Does an Acceptable Medical Authorization Form Look Like?

By now, you know my stance: Do not sign a blank medical authorization.

But not every insurance-company move is a trap. As long as the insurer narrows the form and includes the provisions discussed below, I usually recommend that my client sign it.

A properly limited release can lead to a faster resolution by reducing discovery disputes, encouraging the exchange of relevant medical evidence, and helping you build your case.

Before I recommend signing a medical authorization, the form must comply with 45 C.F.R. Section 164.508(c) and define what the insurer may obtain.

What Should a Limited Medical Authorization Include?

A reasonable medical authorization in a workers’ comp case should identify:

The information to be disclosed to the insurer. Object to language that says, “all medical records.”
Which provider may disclose information. Do not sign a form that leaves this line blank. Otherwise, the insurer can fill in this line later with the name of a doctor treating you for unrelated medical conditions.
Who may receive the records. You should know who gets your file, and it should only be a party to the claim.
Why the records are being requested. The authorization should state that the insurer is requesting these records for a workers’ compensation claim and include the incident date.
The applicable date range. Push to limit the request to records from the accident date forward. If the insurer insists on looking at records that predate the work injury, negotiate a defined number of years for the injured body part.
When the authorization expires. One year from the date of signing is a reasonable period. An open-ended or multiple-year release is not.
Your right to revoke the authorization. A statement that you can revoke your consent to the form at any time.
Your signature and date.

Finally, under no circumstances should you sign a form that permits the adjuster, your employer, or insurance defense counsel to speak with your treating providers. That is a separate problem that I address here: Can the insurer talk to my treating doctor?

If You Sign a Limited Release, Get Free Copies of Everything the Insurer Receives Through Your Medical Authorization

If you do sign a narrowed authorization that limits the scope of the medical records the insurer can receive, make sure the form says that you receive a copy, at no cost, of every document the insurer obtains under it.

You need medical evidence to win a trial or to negotiate a fair settlement. Records the insurer gathers are records you would otherwise have to request and pay for. There is no reason to do this. Insurers must send you copies under the applicable rule.

What Happens if I Refuse to Sign a Blanket Release?

Usually, the dispute continues.

The insurer will either comply with your request for a narrowly tailored release, or it will serve formal discovery, then subpoena records directly from your medical providers and question you about your past medical treatment under oath at a deposition. How far the insurer goes with this questioning and discovery determines how likely it is to succeed.

However, having to answer these questions is not a reason to sign a blank form. It is a reason to have counsel protect your interests. These different routes may put the request before a deputy commissioner, where you must be prepared to defend your objections and protect your rights.

Refusing to sign a blank release is not the same thing as refusing to participate in legitimate discovery.

Failure to comply with legitimate discovery obligations can cause serious problems in your case. Do not ignore interrogatories, requests for production, subpoenas, Commission orders, or deposition questions because you believe your medical history is private.

The better approach is to object through counsel, on the record, and produce what is genuinely relevant.

I Already Signed a Medical Release. Can I Revoke It?

Maybe you found this article after signing a blank release and now have regrets.

Fortunately, the answer is generally yes: a HIPAA authorization or medical records release is revocable in writing.

To do so, send a letter revoking consent to obtain records to the following people:

The claim adjuster assigned to your case;
The nurse case manager, if one has attended your appointments or reached out to you;
Defense counsel, if one has appeared on behalf of the employer and insurer; and
Each healthcare provider named on the release.

And remember: keep proof of delivery, such as an email read receipt or return receipt from certified mail.

Revoking a blank medical authorization is important, but has limits: it only stops future disclosures of your records. It does not recall records already released by the provider or anything the insurer has received or reviewed.

If records have already gone out to the insurer, tell your attorney. They may want to order other records to provide context for what the reports show, or move to exclude certain reports from evidence.

Before You Sign Anything

A medical authorization looks like routine paperwork.

It isn’t.

Signing one may give the insurance company access to years of medical information before you have considered whether those records are relevant to your work injury claim.

At the same time, refusing to give relevant medical information is not a winning strategy. Virginia workers’ compensation law gives employers and insurers legitimate ways to investigate the medical issues in your claim.

The goal is not to hide relevant medical records.

The goal is to prevent the insurance company from overreaching.

If you have a medical authorization form in front of you right now, call before you sign it. I have spent more than 15 years handling Virginia work injury claims, including time defending them for insurance carriers, and I know what these forms are built to find.

Richmond: 804-251-1620 · Hampton Roads: 757-810-5614.

Free consultation.