Medicare Authorization Form and Personal Health Disclosure

The Top 20 Voices in Physical Therapy You Should Be Following for Innovation, Education, and Impact
SPRY
May 21, 2025
5 min read
medicare authorization

Table of Contents

Are you struggling with getting treatment approvals on time? A key challenge many healthcare providers, and PTs like you, face today is ensuring timely prior authorization (PA) approvals, which is important for delivering the right care to patients. Medicare mandates that providers obtain the patient's consent before starting treatment or filing a claim, safeguarding both patient rights and the approval process.

In fact, in 2023, CMS reported a 25% increase in electronic PA request denials, underscoring the critical need for thorough documentation and accurate form completion. This trend highlights the importance of properly completing the Medicare Authorization Form to secure treatment approvals. As a physical therapist, ensuring the form’s accuracy can greatly impact the speed and likelihood of securing PA approvals for your patients.

In this blog, we will explore the importance of the Medicare Authorization Form and Personal Health Disclosure in the PA process. We’ll cover how accurate completion of these forms not only ensures compliance with regulatory requirements but also plays an important role in securing timely treatment approvals for your patients.

What is Medicare Authorization?

Medicare authorization is obtaining Medicare’s approval before specific medical services, treatments, or medications are covered. This approval ensures that the requested service is medically necessary and complies with Medicare’s coverage guidelines.

What is the Medicare Authorization (CMS-10106) Form?

The Medicare Authorization Form (CMS-10106), officially titled "Authorization to Disclose Personal Health Information," is a document issued by the Centers for Medicare & Medicaid Services (CMS). It allows people with Medicare to give permission for their personal health information to be shared with certain people or organizations. This form is important because it lets you, as a PT, healthcare providers, family members, or legal representatives access the medical information they need to help with care, file claims, or fix billing problems.

The CMS-10106 form is not used for requesting Medicare approval for services or treatments. Instead, it is specifically for authorizing the disclosure of personal health information to third parties. Patients can use this form to allow Medicare to share patient information with authorized parties, but it does not directly affect the approval or coverage of therapies, treatments, or prescription drugs.

Key Components of the Medicare Authorization Form

You, as a PT must accurately fill out several crucial sections on the Medicare Authorization Form:

  • Personal Information: Including the beneficiary's name, Medicare number, date of birth, and contact details.
  • Information to Disclose: Whether to release all personal health information or limit it to specific details such as Medicare eligibility, claims, plan enrollment, or premium payments.​
  • Duration of Authorization: The time frame during which the authorization is valid, either indefinitely or for a specified period.
  • Purpose of Disclosure: The reason for granting access to the information, which can be specified by the beneficiary.​
  • Designated Recipients: The names and contact information of individuals or organizations authorized to receive the information.​

Different Types of Medicare Forms

Medicare does not have one standard form for prior authorization (PA). Instead, the forms and requirements change based on the type of Medicare plan and the service being requested.

1. Medicare Advantage (Part C) Plans

Medicare Advantage plans are run by private insurance companies. These companies can create their own prior authorization rules. This means that the forms and steps to get prior authorization can be different for each plan. You need to follow the rules and forms of each specific Medicare Advantage plan to get approval for services.

2. Medicare Part D Plans

Medicare Part D plans cover prescription drugs, and like Medicare Advantage, these plans are managed by private companies. Each Part D plan has its own process for prior authorization, so the forms and steps can vary. You must follow the guidelines of the specific Part D plan for approval.

3. Original Medicare (Parts A and B)

Most services under Original Medicare don't need prior authorization. However, some services might require it through Medicare Administrative Contractors (MACs). The forms and rules for these requests are set by the MACs and can vary based on the service and location. Providers should check with the relevant MAC for the specific details.

Please note: There is no one Medicare prior authorization form. Your patients must use the correct forms and follow the specific procedures of the Medicare plan or contractor to get approval.

The Medicare Authorization Form

The Medicare Authorization Form

Source: https://www.cms.gov/regulations-and-guidance/legislation/foia/downloads/authorizationform.pdf

By automating document submissions and cutting approval times by up to 90%, Spry streamlines the Medicare authorization process. Spry's 98% claim approval rate guarantees that Medicare authorization forms are filled out correctly, reducing mistakes and expediting the approval process.

Now that we've covered the different types of Medicare forms, let's focus on how to complete the Medicare Authorization Form (CMS-10106).

How to Complete the Medicare Authorization Form (CMS-10106)?

The Medicare Authorization Form (CMS-10106) gives Medicare permission to share your patient’s personal health information with certain people or organizations. While the Medicare Authorization Form (CMS-10106) is submitted by your patient, healthcare providers, and PTs play an important role in helping them through the process.

You can assist by making sure all the required information and documents are included, explaining any parts of the form that might be confusing, and helping your patients get the right consent. This makes the submission process easier and faster. The steps to complete the Medicare Authorization form are as follows:

1 Assist Your Patient in Filling Out Their Personal Information

Make sure the patient provides their full name, accurate Medicare number, and date of birth on the form.

2 Choose the Information to Share

Work with your patient to decide what type of information they want to share:

  • Limited Information: Specific details such as Medicare eligibility, claims, or plan enrollment.
  • All Information: Full access to their personal health information.

3 Set the Duration

Help your patient choose how long Medicare can share their information:

  • Indefinitely (forever)
  • For a Specific Time: Select a start date and an end date.

4 State the Reason for Sharing

Assist your patient in explaining why they want to share their information. If there’s no specific reason, they can simply write “at my request.”

5 List the People or Groups to Receive the Information

Help your patient list the names and addresses of those who should receive their information. If more space is needed, additional details can be added on the back of the form.

6 Sign and Add Contact Info

Ensure that your patient signs and dates the form. If someone else is signing on their behalf, they should provide their details and proof (such as a Power of Attorney).

7 Send the Form

Once the form is completed, guide your patient to submit it to:

1-800-MEDICARE

Written Authorization Dept.
PO Box 1270
Lawrence, KS 66044

Or, it can be submitted online through the Medicare account at Medicare.gov.

This authorization is voluntary and does not affect your patient's Medicare enrollment, eligibility for benefits, or the amount Medicare pays for health services. However, without it, Medicare cannot release your patient's personal health information to the designated parties. Your patient has the right to revoke the authorization at any time by submitting a written request to the address above.​

Spry streamlines Medicare authorization with its automated form submissions, with fewer errors, and faster approval times. Its digital platform ensures accurate CPT/HCPCS coding, smooth document uploads, and real-time tracking for expedited approvals.

After completing the Medicare Authorization Form (CMS-10106), it's necessary to understand how Medicare uses your patient's personal health disclosures to ensure compliance and protect your patient’s privacy.

Medicare's Use of Personal Health Disclosure

Medicare follows strict privacy rules to protect your patient’s personal health information (PHI). The Centers for Medicare & Medicaid Services (CMS) makes sure your patient’s PHI is kept safe and only shared when the law allows it.

When Medicare Can Share Your Patient’s Information?

There are some situations when CMS can share your patient’s health information without their permission, like:

  • Health Oversight: When Medicare shares your patient’s info with agencies that check how the healthcare system is working, such as for audits or investigations.
  • Legal Reasons: If the law requires it, such as answering to a subpoena or court order.
  • Public Health: When reporting information to help control diseases or prevent health problems.

For any other situations, Medicare will ask for your patient’s written permission. This is usually done through a form called CMS-10106, which is the "Authorization to Disclose Personal Health Information" form.

What are Your Patient’s Rights?

You have the following rights about your patient’s health information:

  • Access and Change Records: You can look at your patient’s health records and ask for changes if something is wrong.
  • Ask for Limits: You can ask Medicare to limit how your patient’s health info is used or shared.
  • Cancel Permission: You can withdraw your patient’s permission for Medicare to share your patient’s health info anytime, unless things have already been done based on your permission.

These rights are explained in the "Medicare & You" handbook and are protected by the law.

By following the requirements for personal health disclosure, you can ensure regulatory compliance and improved patient outcomes.

Privacy and Security Considerations with Medicare Authorization

When filling out the Medicare Authorization Form (CMS-10106), it's really important to keep your personal health information (PHI) safe. The Centers for Medicare & Medicaid Services (CMS) follow strict rules to make sure your info is protected.

1 Authorization Requirement

Medicare needs your patient’s written permission to share their PHI. It is sensitive data, and to comply with HIPAA regulations, its disclosure necessitates patient consent. Without this permission, CMS can only use your patient’s info in certain ways, according to laws like the Health Insurance Portability and Accountability Act (HIPAA) and the Privacy Act.

2 Limited Disclosure

Your patient can choose exactly what information can be shared. On the form, you can select to share everything or just certain things, like Medicare eligibility, claims, or plan enrollment. This way, only the necessary info is shared with the right people or organizations.

3 Duration of Authorization

You can decide how long your patient’s authorization lasts. It could be for a set period or for as long as you want. This lets you control how long your patient’s PHI can be shared.

4 Revocation of Authorization

If you change your mind, you can take back your permission at any time. Just send a written request to the address on the form. Once they process it, Medicare won’t share your patient’s info anymore, except for what’s already been shared before you withdrew your permission.

5 Secure Submission

When you send the completed form, make sure it's submitted safely to the address on the form. Don't send sensitive information through unsecured ways to protect your patient’s PHI.

By following these steps when filling out the Medicare Authorization Form, you can help make sure your patient’s health information stays safe and secure.

Conclusion

Medicare claims can be processed more quickly and with fewer delays or denials if the patient provides all necessary information, relevant documentation, and secure consent. You can assist by ensuring HIPAA compliance, reducing unnecessary disclosures, and protecting patient privacy. Using secure submission methods and staying updated on Medicare’s coverage requirements will further improve the process's efficiency.

Spry simplifies Medicare authorization by automating documentation, reducing claim processing time by 30%  and achieving a 98% claim approval rate, With Spry’s secure submissions and real-time tracking, the entire process becomes more efficient, ensuring adherence and minimizing delays. Schedule a demo with Spry today to experience how it can streamline your practice’s Medicare authorization process..

FAQs on Medicare Authorization and Personal Health Disclosure

1 In the Medicare authorization process, what function does patient consent serve?

A: Patient consent is required for Medicare to receive a patient’s personal health information (PHI). Healthcare professionals cannot share essential medical records or submit authorization requests without it. The patient's agreement to release PHI must be explicitly stated in the signed consent form for service approval.

2 How can I ensure that I’m protecting my patient’s health information during authorization?

A: When transmitting PHI, always use secure methods like encrypted emails or electronic health record (EHR) systems to protect patient privacy. Avoid using unprotected channels to share private information. Additionally, ensure your practice complies with HIPAA regulations and that only those involved in the authorization process can access patient data.

3 What steps should I take if my patient’s Medicare authorization request is denied?\

A: If your patient’s request is rejected, review the rationale and determine if additional evidence or clarification can be provided to support the medical necessity of the service. Consider filing an appeal with the necessary documentation or referring to Medicare’s coverage guidelines.

4 Which supporting documents should be included on the Medicare Authorization Form?

A: Include only the paperwork that demonstrates the requested service is medically necessary. This can include clinical notes, progress reports, treatment plans, and diagnostic test results. To avoid delays, ensure the documents are complete, relevant, and up to date.

5 Can someone explain the Medicare Authorization Form and the requirements for health disclosures?

A: Medicare offers comprehensive guidance on completing the authorization form. Compliance officers, billing departments, and healthcare organizations can also assist in navigating the process. Additionally, you can use practice management software with built-in support or seek expert assistance from Medicare contractors.

6 How can I find out how my patient’s Medicare authorization request is progressing?

A: You can check the status of your patient’s authorization request by contacting the Medicare Administrative Contractor (MAC) directly or by using the MAC portal. Monitoring the request will help you respond quickly if additional information or supporting documentation is needed to proceed with the approval process.

Did you like our content?

Reduce costs and improve your reimbursement rate with a modern, all-in-one clinic management software.

Get a Demo

Ready to Maximize Your Savings?

See how other clinics are saving with SPRY.

Why settle for long hours of paperwork and bad UI when Spry exists?

Modernize your systems today for a more efficient clinic, better cash flow and happier staff.
Schedule a free demo today