By Michael Chen · Published November 23, 2025 · Updated March 9, 2026 · 5 min read
When you send medical or health-related information by fax, you need to use a HIPAA Fax Cover Sheet. The Health Insurance Portability and Accountability Act (HIPAA) says that every time a medical office, healthcare provider, or insurance company sends a fax with patient information, they must make sure that the information stays private and safe. A fax cover sheet adds an extra layer of protection by letting the person who gets the fax know that it contains protected health information (PHI) and should be handled carefully.
A HIPAA fax cover sheet shows that you are professional and following the rules. It also protects healthcare organizations from accidentally sharing private information, which could lead to privacy violations and legal penalties.
Tip: Need a custom cover sheet? Create a professional, HIPAA-compliant fax cover sheet in seconds with our free generator.
What should be on a HIPAA fax cover sheet?
HIPAA rules don't say exactly what needs to be done, but they do say that covered entities need to do things to lower the chance of accidental disclosure. A HIPAA fax cover sheet usually has the sender's name, the organization that sent it, the sender's phone number, and the recipient's fax number. The date, time, and total number of pages being faxed should also be on it.
Most importantly, it must have a HIPAA fax disclaimer or a confidentiality fax notice. This notice says that the information being sent may include PHI and that it is against the law to use, review, or share it without permission. It also tells you what to do if the fax gets to the wrong person, like calling the sender or destroying the document right away.
What Kinds of PHI Are in a Fax?
There are many kinds of sensitive information that can be sent by fax. Names, dates of birth, addresses, phone numbers, medical record numbers, insurance policy details, billing information, and even lab results are all common examples. HIPAA law says that all of these things are private health information.
This information could be easily seen by people who shouldn't have it because fax machines are sometimes shared or in public places. A HIPAA-compliant fax cover sheet lowers that risk by letting everyone who handles the document know that the information in it is private.
What is a HIPAA Fax Cover Sheet Disclaimer?
This is an example of a HIPAA-compliant fax cover sheet that has a full confidentiality statement:
Disclaimer: “This fax has private information, such as protected health information (PHI), that is only meant for the person or business named above. If you are not the intended recipient, you are hereby told that you are not allowed to share, copy, distribute, or use this information in any way. If you got this fax by mistake, please call the sender right away and get rid of all copies of this document.”
Any business that deals with patient records or other private information needs this kind of fax cover sheet confidentiality notice.
How to Write a Fax Disclaimer That Follows HIPAA
Use clear, formal, and professional language when writing a HIPAA fax disclaimer. Use clear language that says the fax may have Protected Health Information (PHI) under HIPAA law. Your disclaimer should make it clear that the information you send shouldn't be accessed, shared, or distributed without permission.
Always tell people who get your fax by mistake what to do, like contact the sender right away and destroy the fax. Don't use vague language; be clear about your legal duties and what you expect in terms of privacy.
Put your private fax statement in bold or capital letters at the top or bottom of the page to make sure it is easy to see. It's also a good idea to put the sender's phone number in the disclaimer so that the recipient can quickly report any messages that were sent to the wrong person.
Important Things to Keep in Mind:
- Speak in a clear and professional way.
- Say that the fax might have PHI in it according to HIPAA law.
- Warn people not to access or share information without permission.
- Tell people who get the fax by mistake to call the sender and destroy it.
- Don't put in any personal information that isn't necessary in the disclaimer.
Template for a HIPAA Fax Cover Sheet
You can change this free HIPAA-compliant fax cover sheet template to fit your business. It has all the fields you need and a built-in notice of confidentiality.
Why do businesses need a HIPAA fax cover sheet?
A fax cover sheet that follows HIPAA rules protects both the patient and the business. It keeps private information private and protects healthcare organizations from possible legal problems. Sending a fax to the wrong number can even be a big HIPAA violation.
The cover sheet also protects against audits. If something goes wrong, showing that a HIPAA-compliant fax cover sheet was used shows that you tried to follow the rules about privacy. It's a simple but effective way to make sure you're following the rules and lower your risk.
What else should I do about faxes and fax cover sheets?
To fully comply with HIPAA and protect data, organizations should do more than just use a fax cover sheet. Fax machines that handle patient information should be kept in secure, private areas where the public can't see them. Before sending a fax, always double-check the recipient's fax number. If you can, call ahead to make sure that someone who is allowed to receive the fax is available.
It's also important to keep fax delivery reports as proof that your message was sent. These reports can be very helpful in case of a compliance review or a disagreement. mFax is an example of a digital or cloud-based fax system with end-to-end encryption that can give you extra protection. These platforms lower risk by not printing copies and using methods that don't store any data, which keeps your information safe and private.
Best Practices Are:
- Put fax machines in safe, private places.
- Before you send, make sure the recipient's fax number is correct.
- Call ahead to make sure the person who is supposed to get the call is available.
- For compliance records, keep fax delivery or confirmation reports.
- To lower security risks, use encrypted digital fax systems like mFax.
- Don't leave printed faxes lying around or in places where other people can see them.
Related Resources
For more complete HIPAA guidance:
- HIPAA compliant fax: full compliance guide — encryption, BAA, and workflow setup
- How to fax medical records securely — step-by-step for sending PHI
- Best HIPAA compliant fax services — service comparison with BAA details
- Fax cover sheet templates — general business templates
- Free fax cover sheets to download — printable PDF & Word templates for every situation
Find out how our mFax App can help.
The mFax App makes it easy, quick, and safe to send faxes that follow HIPAA rules. It lets doctors and nurses send documents from their phones or computers safely, without worrying about losing files or leaking paper. The platform is fully HIPAA-compliant, uses 256-bit encryption, and doesn't keep any logs. This means that every fax is safe and private.
Thousands of hospitals, clinics, and law firms trust mFax because it has real-time tracking, instant delivery, and coverage all over the world. It's not only the easiest way to fax; it's also the safest. Use the free HIPAA-compliant fax cover sheet template in the app to make your compliance process easier and keep every fax you send safe.