1. (a) Oklahoma Department of Human Services (OKDHS) Form HIPAA-3, Authorization to Disclose Medical Records, is completed when a client requests protected health information disclosure to a third party.
(b) A copy of the valid authorization is provided to the client.
(c) Valid authorizations are kept in the client's file for at least six years.
2. A copy of the written revocation is attached to the original authorization and placed in the client's file.