Patient Intake Form Template: What to Include (+ Copyable Form)

A patient intake form is the first piece of clinical documentation in any patient relationship. Done well, it captures the medical history, contact details, insurance, and consents you need to deliver safe care and get paid for it. Done poorly, it forces your front desk to chase paperwork, your providers to ask the same questions twice, and your billing team to fight avoidable denials.

This guide gives you a complete intake form you can copy or print today, walks through every field worth including (and a few worth cutting), shows a filled-in example, and covers the HIPAA and consent details most templates get wrong. It's written for US outpatient practices — primary care, specialty, and behavioral health.

What is a patient intake form?

A patient intake form is the structured questionnaire a patient completes before their first visit (and, in a shorter form, before follow-ups). A workable form covers six domains:

1. Patient demographics — legal name, date of birth, address, phone, email, preferred language and pronouns
2. Emergency contact — at least one, ideally two
3. Insurance — payer, plan, member ID, group number, and the policyholder if that isn't the patient
4. Medical history — current conditions, past surgeries, allergies, medications, family history
5. Reason for visit — chief complaint, when it started, what's been tried
6. Consents and acknowledgments — Notice of Privacy Practices, financial responsibility, and telehealth or communication consents where they apply

Primary care usually adds lifestyle questions (tobacco, alcohol, exercise, sleep). Specialty practices add targeted screening — a PHQ-9 or GAD-7 in behavioral health, a pain diagram in orthopedics or pain management, a menstrual and obstetric history in gynecology. The core stays the same; the clinical section flexes.

The fields every intake form must have

These are the fields that, if missing, block care, billing, or compliance. Treat them as required.

• Full legal name, matched to the insurance card
• Date of birth
• Mailing address
• Mobile phone number
• Email address
• Insurance: payer name, member ID, group number, policyholder name and DOB
• Allergies (drug, food, environmental) with the reaction, not just the substance
• Current medications: name, dose, frequency
• Reason for visit
• Emergency contact name and phone
• Preferred pharmacy (name and address)
• Signed acknowledgment of the Notice of Privacy Practices
• Signed financial responsibility / authorization to bill insurance

Two of these trip practices up. Allergies without the reaction type are nearly useless clinically — "penicillin" tells you nothing about whether the patient had a rash at age six or anaphylaxis last year. And a name that doesn't match the insurance card is one of the most common causes of a clean-claim rejection, so validate spelling against the card at check-in.

Optional fields worth collecting

These improve care quality or cut back-office friction. Add the ones that fit your practice; don't add all of them reflexively.

• Preferred name, if different from legal name
• Preferred language and whether an interpreter is needed
• Race and ethnicity (expected by many ONC-certified EHR and quality-reporting programs)
• Past surgeries with the year
• Family history for parents and siblings
• Social history: tobacco, alcohol, recreational drugs, exercise
• Vaccination history
• Prior provider name and contact, so you can request records
• Advance directive on file (Y/N)
• Referral source ("How did you hear about us?")

The complete patient intake form (copy or print)

Paste the form below into your intake tool (Jotform, Formstack, your EHR's intake module, or a Google Form), or print this section as-is. Every field maps to the required or high-value lists above.

PATIENT INTAKE FORM
Practice name: ____________________       Date: ____ / ____ / ______

SECTION 1 — PATIENT INFORMATION
Legal name (First, Middle, Last): ______________________________
Preferred name: __________________________
Date of birth: ____ / ____ / ______        Sex assigned at birth: ______
Gender identity: ______________   Preferred pronouns: ______________
Mailing address: ______________________________________________
City, State, ZIP: _____________________________________________
Mobile phone: ______________   OK to text reminders?  [ ] Yes  [ ] No
Email: _____________________   OK to email reminders? [ ] Yes  [ ] No
Preferred language: ______________   Interpreter needed? [ ] Yes [ ] No

SECTION 2 — EMERGENCY CONTACT
Name: ____________________   Relationship: ____________   Phone: ____________
Second contact (optional): __________ / ____________ / ____________

SECTION 3 — INSURANCE
Primary payer: ____________________   Member ID: ______________
Group number: ______________
Policyholder (if not patient): ____________   Policyholder DOB: __________
Secondary payer (if any): ____________________

SECTION 4 — REASON FOR VISIT
Chief complaint (why are you here today?): ____________________________
When did it start? ______________________
What have you tried so far? ______________________
Seen another provider for this? [ ] No  [ ] Yes — who / when: ____________

SECTION 5 — MEDICAL HISTORY
Current medical conditions: ____________________________________
Past surgeries (procedure / year): _____________________________
Allergies (substance / reaction): ______________________________
Current medications (name / dose / how often): _________________
_______________________________________________________________
Preferred pharmacy (name / address): ___________________________

SECTION 6 — FAMILY HISTORY
Father (conditions / living or deceased): ______________________
Mother: _______________________________________________________
Siblings: _____________________________________________________

SECTION 7 — SOCIAL HISTORY
Tobacco (never / former / current — amount): ___________________
Alcohol (drinks per week): ______   Recreational drugs: ________
Exercise (type / how often): ______________   Occupation: ________

SECTION 8 — CONSENTS
[ ] I acknowledge I received this practice's Notice of Privacy Practices.
[ ] I authorize this practice to bill my insurance and accept financial
    responsibility for any balance my plan does not cover.
[ ] I consent to receive care by telehealth when it is offered.  (initial: ___)
[ ] I consent to text/email for appointment reminders and non-urgent
    communication, and understand these channels are not encrypted.

Patient signature: ____________________________   Date: __________
Guardian signature (if patient is a minor): __________________  Date: ______

What a completed form looks like

Blank fields are easy; the value is in how patients answer. Here's Section 4 and 5 filled in for a fictional new primary-care patient, the way a useful intake actually reads:

Section 4 — Reason for visit

Chief complaint: Tired all the time for the last 2–3 months, and feet feel numb at night.

When did it start: Gradual, worse over the last month.

What have you tried: More sleep, cut back on coffee. No change.

Seen another provider: No.

Section 5 — Medical history

Current conditions: Type 2 diabetes (dx ~2019), high blood pressure.

Past surgeries: C-section, 2004. Gallbladder removed, 2016.

Allergies: Sulfa drugs — full-body rash. No known food allergies.

Medications: Metformin 1000 mg twice daily; lisinopril 20 mg once daily; occasional ibuprofen for knee pain.

Preferred pharmacy: Community Pharmacy, 4th & Main.

Notice how much a provider can do before walking in: the fatigue plus nocturnal numbness against a diabetes history flags possible neuropathy and poor glycemic control, the sulfa allergy is documented with its reaction, and the medication list is specific enough to reconcile. That's the difference between an intake form and a data-entry chore. This maps directly into the history and exam sections of a SOAP note or H&P.

HIPAA and consent: what most templates get wrong

The most common compliance mistake on intake forms is treating the HIPAA acknowledgment as a consent. It isn't.

The Notice of Privacy Practices (NPP) is a one-way disclosure to the patient — you're telling them how you use and share their information. HIPAA requires a provider with a direct treatment relationship to make a good-faith effort to obtain written acknowledgment that the patient received the NPP, at first service delivery. The patient is acknowledging receipt, not consenting to anything. Under the Privacy Rule you may already use protected health information (PHI) for treatment, payment, and health care operations without separate authorization.

Where you do need explicit, separate consent:

• Texting or emailing PHI. Standard SMS and email aren't encrypted. Get an opt-in that states the channel is unencrypted and that the patient can revoke it anytime. (Reminders that contain no clinical detail are lower-risk, but the opt-in is still good practice.)
• Releasing records to family or a third party. Use a separate Authorization to Release Records, one per recipient, with an expiration.
• Telehealth. Many states require a documented telehealth consent that names the platform and the patient's right to refuse. Check your state's rule.
• Marketing or research. Always a separate, opt-in authorization — never bundled into intake.

Keep the NPP as an acknowledgment and pull anything outside treatment-payment-operations into its own consent. On the collection side, HIPAA's minimum-necessary standard is the useful test for what to ask: if a field doesn't serve care, billing, or a documented operational need, it's liability without benefit. That's the practical reason to drop Social Security number from routine intake — most payers use the member ID, and an SSN on file mostly enlarges what a breach exposes.

Storing intake data safely

The form is only half of compliance; how you hold the answers is the other half.

• Encrypt PHI in transit and at rest. Any digital intake tool should use HTTPS and encrypt stored data. Confirm it, don't assume it.
• Sign a Business Associate Agreement (BAA) with every vendor that touches the form — the intake platform, its hosting, and any analytics or support tool with access. No BAA, no PHI. Note that consumer Google Forms is not covered by a BAA; Google Workspace can be, if configured for HIPAA.
• Limit access to minimum necessary. Front desk needs demographics and insurance; not everyone needs the clinical history. Use role-based permissions.
• Retain per your state's medical-record law, then dispose securely — shred paper, and make sure deletions in your system are real deletions.
• Don't email PHI to yourself or the patient. Use a portal or secure link. Scanned intake PDFs sitting in an inbox are a classic quiet breach.

None of this is legal advice for your specific situation — your compliance officer or counsel owns the final call — but these are the practical controls that keep an intake workflow defensible.

New patients vs. established patients

Reusing one long form for everyone is the fastest way to tank completion rates. New patients need the full form. Established patients need a short update form that asks only what's likely to have changed since last time: medications, new conditions or hospitalizations, insurance, address, and emergency contact. A 90-second update form gets filled out; a re-do of the full intake gets skipped or rushed.

Paper vs. digital, and what actually gets completed

Most practices have moved to digital intake, yet many still end up printing forms because their digital tool fights the patient. Three things separate forms patients finish from forms they abandon:

1. Mobile-first. Patients often complete intake on their phone, sometimes in the parking lot minutes before the appointment. If the form needs pinch-zoom or breaks into unreadable columns on a small screen, completion falls off a cliff.
2. Save and resume. People get interrupted. If the form times out and loses their answers, they won't start over.
3. Pre-population. Returning patients should never re-type their address, insurance, or medication list. If your tool can't pre-fill from the last visit, that's a reason to switch tools.

Paper still has a place — a backup for patients who want it, and for practices without reliable tablets — but a paper-first workflow means someone re-keys every field, which is both slow and a transcription-error risk.

A shorter form, plus history captured in the room

One workflow worth knowing: keep the pre-visit form to demographics, insurance, and consents, and capture the medical history conversationally during the visit instead of making the patient type it. The provider asks the questions naturally and an AI medical scribe like PatientNotes transcribes and organizes the answers straight into the note, so the intake data and the visit documentation are the same record rather than two things to reconcile. It fits best when visits run at least 15–20 minutes and your EHR can accept structured output. The consent and insurance fields still belong on the pre-visit form — those you want signed before anyone walks in.

FAQ

Is a patient intake form legally required?

There's no law mandating a single document called an "intake form." But you are required to make a good-faith effort to obtain NPP acknowledgment, you need authorization to bill, and you need documented history to treat safely. An intake form is simply the most efficient way to capture all three at once.

Should I collect a Social Security number?

Generally, no. Most payers identify patients by member ID, so an SSN adds breach exposure without a billing or clinical payoff. Collect it only if a specific payer or program actually requires it.

Can I use the same intake form for new and returning patients?

You can, but completion suffers. Give established patients a short update form covering only what tends to change — medications, conditions, insurance, contacts — and reserve the full form for new patients.

How long should an intake form take?

Aim for something a patient can finish in roughly 8–12 minutes for primary care. If it runs past 20, expect rushed or blank answers. Cut anything that isn't required and ask the rest in the room.

What's the difference between an intake form and a medical history form?

The medical history form is one section of a full intake form. Intake also captures demographics, insurance, emergency contacts, and consents. Some specialty practices use the terms interchangeably, but the intake form is the broader document.