How to Fax a Medical Records Release to Sutter Health
Sutter Health is a network of affiliated hospitals and medical groups across Northern California, and each affiliate releases a patient's chart against a signed HIPAA authorization handled by its own Health Information Management staff. Because the records live with the treating affiliate, the release goes to that site — not to a single network line. This guide walks through what the authorization needs, how to identify the treating affiliate's fax number, and how to keep proof of your request.
Does Sutter Health accept a fax?
Yes — Sutter Health's affiliated hospitals and clinics accept a signed HIPAA authorization by fax through their Health Information Management staff. Because a faxed release is a written, dated request, it gives the treating affiliate a clear record of exactly what the patient authorized and who may receive the records.
Finding the official fax number
Sutter is a network of affiliated Northern California hospitals and medical groups, so the release goes to the Health Information Management office of the affiliate that actually treated the patient — not a single network-wide fax line. Identify the treating site first, then confirm its number on that affiliate's medical-records page or on its authorization form before you send.
What to include on every page
- The patient's full legal name and date of birth
- The Sutter affiliate or facility where the care was provided
- The records requested, the date range, and where they should be sent
- The patient's signature and the date, plus representative authority if applicable
How to fax Medical Records Release Authorization (HIPAA Authorization Form) to Sutter Health
- 1Fill out the HIPAA authorization, naming the Sutter affiliate and the records requested
- 2Have the patient or legal representative sign and date the release
- 3Determine which Sutter affiliate treated the patient and confirm its HIM fax number
- 4Save the signed authorization as a clear, high-contrast PDF
- 5Sign in to Send FAX Mail, upload the PDF, enter the confirmed fax number, and send
- 6Keep the dated confirmation as evidence of when the request was submitted
Confirming it arrived
Once the fax reaches the affiliate's line, Send FAX Mail returns a dated confirmation you should keep with the signed authorization. Fulfillment timelines differ by affiliate, so if the records are slow to arrive, contact that site's Health Information Management office and use the confirmation to show your submission date.
What’s current · as of July 2026
- HIPAA large-breach reporting threshold
- 500+ individuals — reported to HHS OCR without unreasonable delay Source: HHS Office for Civil Rights
- HIPAA documentation retention period
- 6 years from creation or last-effective date Source: HHS — HIPAA Administrative Requirements (45 CFR 164.316)
Recent updates
Federal interoperability rules keep pushing healthcare past the fax machine
CMS has advanced a series of interoperability rules that press hospitals, payers, and providers toward electronic data exchange and standardized claims attachments. The direction of travel is clear: paper and analog fax workflows are being replaced by digital transmission that carries an auditable record — which is exactly what a cloud fax with delivery confirmation provides for offices not yet on a full EHR pipeline.
CMS →Healthcare breach reporting keeps document handling under scrutiny
Ongoing reporting on HIPAA breaches and OCR settlements underscores how much scrutiny falls on how medical documents are stored, sent, and received. Sending records through a controlled, access-logged channel rather than an unmanaged machine reduces the mishandling risks that show up repeatedly in breach analyses.
HIPAA Journal →HHS OCR continues enforcing HIPAA safeguards on how PHI is transmitted
The HHS Office for Civil Rights enforces the HIPAA Security Rule's requirement that covered entities apply administrative, physical, and technical safeguards to protected health information in transit. Faxing PHI is permitted, but the sending practice is responsible for confirming the destination and controlling access — the reason healthcare senders favor a channel that logs each transmission and its recipient.
HHS Office for Civil Rights →
Faxing Medical Records Release Authorization (HIPAA Authorization Form) to Sutter Health — FAQ
Sutter Health's affiliated hospitals and clinics accept a signed HIPAA authorization by fax through their Health Information Management staff. Since a faxed release is a written, dated request, it gives the affiliate a clear record of exactly what the patient authorized and who may receive the chart.
Sutter is a network of affiliated Northern California hospitals and medical groups, so the release goes to the Health Information Management office of the affiliate that actually treated the patient — not to one network-wide line. Identify the treating site, then confirm its current number.
A patient can authorize someone else — an attorney, a family caregiver, or another treating provider — to receive the records by naming that person or organization on the signed authorization. Sutter's HIM staff release only to whoever the patient specifically designated on the form.
The dated confirmation Send FAX Mail produces once the fax reaches Sutter's line is your evidence of the send date. Save it alongside your copy of the signed authorization so you can document when the request went in, separate from however long the affiliate takes to fulfill it.
Ready to fax Medical Records Release Authorization (HIPAA Authorization Form) to Sutter Health?
Upload your completed document and send it in seconds — no fax machine required.
7-day free trial · No credit card required