Skip to main content
U.S. flag

An official website of the United States government

Return to Search

FAQ 1508 What type of documentation of parental agreement is needed to disclose immunizations?

This is HIPAA Guidance for school immunizations disclosures.


Issued by: Office for Civil Rights (OCR)

What type or form of documentation of parental agreement is required under the Privacy Rule in order for a health care provider to be permitted to disclose proof of a child’s immunizations to a school that is subject to a school entry law? For how long must such documentation be maintained?


The Privacy Rule does not prescribe the nature and form of the documentation, allowing covered entities the flexibility to determine what is appropriate for their purposes and to address the varied circumstances in which parental agreement may be obtained.  The documentation must only make clear that agreement was obtained as required by 45 CFR 164.512(b)(1)(vi) of the Privacy Rule.  For example, if a parent or guardian submits a written or email request to a covered entity to disclose proof that his or her child has been immunized to the child’s school, a copy of the request would suffice as documentation of the agreement.  Likewise, if a parent or guardian calls the covered entity and requests over the phone that proof of his or her child’s immunization be disclosed to the child’s school, a notation in the child’s medical record or elsewhere of the phone call would suffice as documentation of the agreement.  The documentation for these purposes need not include the signature of a parent or guardian or any of the other elements required under the Privacy Rule for a written HIPAA authorization.  As with other documentation required under the Privacy Rule, documentation of parental agreement for these purposes must be maintained for six years.  See 45 CFR 164.530(j).

HHS is committed to making its websites and documents accessible to the widest possible audience, including individuals with disabilities. We are in the process of retroactively making some documents accessible. If you need assistance accessing an accessible version of this document, please reach out to the

DISCLAIMER: The contents of this database lack the force and effect of law, except as authorized by law (including Medicare Advantage Rate Announcements and Advance Notices) or as specifically incorporated into a contract. The Department may not cite, use, or rely on any guidance that is not posted on the guidance repository, except to establish historical facts.