Under the Health Insurance Portability and Accountability Act (HIPAA), this is a document signed by the patient that is necessary for use and disclosure of protected health information (PHI) that is not included in any existing consent form agreements.