What an ROI actually is
A release of information (ROI) is your written permission for one party to share your protected health information (PHI) with another. Federal law — HIPAA — generally requires your written authorization before a medical or mental-health provider shares your records, and a valid release is specific: who may share, with whom, what information, for what purpose, and until when. A blank or blanket form with none of that filled in is asking for a signature, not consent.
What parents generally have the right to do
- Read before signing — slowly. Taking a form home, or to an attorney, before signing is an option. "I'd like to review this first" is a complete sentence.
- Sign narrowly. Releases can be limited: to one provider, to attendance-and-participation only, to a date range, to a specific purpose. Many parents distinguish between proving compliance ("she attends weekly and participates") and opening the full contents of therapy.
- Decline. A parent can decline to sign a release. Like every option on this site, it has trade-offs — see the honest section below.
- Revoke. A signed release can generally be revoked, in writing, going forward (it doesn't un-share what already moved). Keeping a copy of the revocation, and logging the date, makes it real.
- Get copies. A copy of every release you sign belongs in your records — and in your Evidence Organizer. If you don't remember signing something, you can ask the provider for copies of every authorization on file. Parents sometimes discover the flow of their information this way.
- See your own records. HIPAA also works in your favor: you can generally get copies of your own medical and most mental-health records directly from your providers — useful whenever someone else's summary of your treatment doesn't match your reality.
HIPAA gives a therapist's separate psychotherapy notes stronger protection than the rest of the chart — they generally require their own specific authorization. A release covering "records" doesn't automatically open the notebook. Providers know this distinction; it's fair to ask how they handle it.
The exceptions, honestly
Written consent is the general rule, not the whole story. Information can move without your signature in real situations: court orders; mandatory child-abuse reporting laws; certain provisions that give investigators access during an abuse-or-neglect assessment; and treatment-program rules of their own (substance-use treatment records actually carry extra federal protection). Which exception applies, when, and how far it reaches in Colorado is precisely the kind of question your attorney answers well — and precisely why it's worth knowing what you did and didn't authorize, so anything unexpected in the file can be traced and questioned rather than shrugged at.
The treatment-plan reality
Here's the tension this page won't hide: treatment plans routinely require "sign releases so progress can be verified," and a flat refusal to sign anything can be written up as not engaging with the plan. Parents navigate that squeeze without giving everything away:
- Signing releases scoped to what the plan actually needs — attendance, participation, completion — rather than full clinical contents.
- Asking the caseworker in writing which releases the plan requires and for what purpose; the answer becomes part of the record.
- Bringing broad or unusual release requests to their attorney before signing — a two-minute question that has saved many parents months of regret.
- Logging every release — signed, declined, or revoked — in the Documentation Log, same day.
Your health information is powerful material in a case file — and summaries of it, written by non-clinicians, don't always match what your provider actually said. Parents who keep copies of what they signed, request their own records from the source, and compare the two are the parents who catch the difference. That's not paranoia; that's bookkeeping.