Patient intake form: what to ask
A patient intake form is the sheet a practice hands over on arrival, or sends ahead of time, before it treats somebody for the first time. Almost every argument about it is really an argument about length: the practice wants to know more, the patient wants to start, and nobody in the room is sure which of the questions is there because it is needed and which is there because it was on the last form somebody copied.
What follows settles the part that can be settled, from the rules that actually govern it, opened and linked at the point each claim is made. It also says where those rules stop, because they do not hand anybody a finished list of questions — they set a direction, and the list is a judgement the practice has to make for itself.
What is a patient intake form?
It is the record a practice collects from somebody before treating them for the first time: who they are, how to reach them, why they are coming and what they have agreed to. Its job is to move everything that can be settled in advance out of the appointment itself, so the treatment time starts when the patient sits down rather than ten minutes later.
In the United States it is also the piece of paper that carries a legal obligation, and the obligation has a deadline. The Privacy Rule gives an individual a right to adequate notice of the uses and disclosures of protected health information, and a provider with a direct treatment relationship has to hand that notice over «No later than the date of the first service delivery» and then «make a good faith effort to obtain a written acknowledgment of receipt of the notice». The first visit is the deadline, so the form somebody fills in at the first visit is the natural place for it.
That is worth separating from the rest, because it is the one part of the form that is not a practice decision. Everything else on the sheet is there because the practice chose to ask; the acknowledgment is there because the rule says so, and it is also the part most often missing from a form that somebody assembled by copying.
What should a new patient intake form ask?
Five things, and nothing the practice will not actually read before the visit. A new patient intake form earns its length by what it changes about the appointment: if an answer would not change something somebody does or says, it belongs somewhere else, or nowhere.
Here are the five, with what each one is for. The last column is this page's own operational reasoning, not a requirement, with one exception that is flagged inside the row: the consent line, where the deadline comes from the Privacy Rule quoted above. No clinical questions are prescribed anywhere below — what to ask about a body is the therapist's call, and a marketing page is not where that gets decided.
| Section | What it collects | Why the clinic needs it before the visit |
|---|---|---|
| Contact details | Full name, phone number, email, and which of the two the patient actually reads | Every later message travels down this line: the confirmation, the reminder, the change of time. One wrong digit here becomes an empty slot that nobody can explain afterwards |
| Reason for the visit | In the patient's own words, what is wrong and roughly how long it has been wrong | Lets the practice pick the right length of slot, and the right practitioner, the day before rather than at minute five of an appointment that turns out to be the wrong shape |
| Relevant history | What the therapist would ask about anyway: previous episodes, surgery, treatment currently going on elsewhere | Asked in writing first, the spoken version gets shorter rather than longer: the conversation starts from what the patient wrote instead of from nothing |
| Consent and the privacy notice | Agreement to be treated, and the patient's acknowledgment that they received the privacy notice | The one row with a source rather than a rationale: for a US provider the notice is due «No later than the date of the first service delivery», with «a good faith effort to obtain a written acknowledgment of receipt» |
| How they found the clinic | One question, with a short list of answers rather than an open box wherever that is possible | The only line on the form that is about the practice rather than the patient, and the only record of it that will ever exist: nothing downstream reconstructs it once the visit is over |
The fifth row is the one a practice drops first and misses most. It costs the patient four seconds and it is the only honest answer the practice will ever have to the question of where its patients come from — asked after the fact, at the end of a month, it becomes guesswork dressed up as a number.
What should it leave out?
Anything the practice will not use before or during that first visit. Two separate bodies of rule push in the same direction here, and neither of them is really about paperwork: both are about collecting less.
The American one is the minimum necessary standard: a covered entity «must make reasonable efforts to limit protected health information to the minimum necessary to accomplish the intended purpose of the use, disclosure, or request». Read it carefully before leaning on it, because it is written about uses, disclosures and requests rather than about what a form may print, and one of the exceptions in the same paragraph covers requests by a health care provider for treatment purposes. It does not, by itself, forbid any particular question on an intake form.
The European one speaks directly about collection, which makes it the more useful of the two for this. The GDPR requires personal data to be «adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed» — the principle it names data minimisation — and two of its neighbours on the same list bite on the same sheet of paper. Purpose limitation asks that data be «collected for specified, explicit and legitimate purposes», which is why an intake form is not a mailing-list signup and the two consents are not one consent. Storage limitation asks that data be «kept in a form which permits identification of data subjects for no longer than is necessary», which is a question about the filing cabinet, not the form.
So what comes off the sheet in practice: the second contact method nobody uses, the questions about family and occupation that are interesting rather than load-bearing, the free-text box that gets read once and filed forever, and anything the practice is collecting because it might be useful later. It is also the honest answer to why this page carries no patient intake form template to download: a template is a set of questions somebody chose for a different practice, and the only test that matters — would this answer change what we do — can only be applied by the people who would do it.
Paper or online patient intake form?
Paper is easier to start and harder to keep; an online patient intake form is the other way round. What decides it is less about convenience than about which of the two the practice can actually secure, and about whether anybody reads the answers before the patient walks in.
Once the answers are electronic they are electronic protected health information, and a different part of HIPAA applies. The security standards require a covered entity to «Ensure the confidentiality, integrity, and availability of all electronic protected health information the covered entity or business associate creates, receives, maintains, or transmits» and to «Protect against any reasonably anticipated threats or hazards to the security or integrity of such information». That is a real obligation and it arrives the moment a form stops being paper.
None of which makes paper the safe option. A sheet left face-up on a reception counter, or filed in a drawer that does not lock, is exposed in a way no rule needed to spell out; the electronic case is governed more explicitly, not more heavily. The practical difference is elsewhere: a form that arrives the evening before can be read before the appointment, and a form handed over on arrival cannot, which removes most of the reason for having asked.
Who reads the form, and when?
Whoever needs it to do their part, and before the patient arrives rather than during the appointment. The Privacy Rule is unusually concrete about the first half of that, and unexpectedly kind to small practices.
It asks a covered entity to identify «Those persons or classes of persons, as appropriate, in its workforce who need access to protected health information to carry out their duties» and, for each of them, «the category or categories of protected health information to which access is needed and any conditions appropriate to such access» — then to «make reasonable efforts to limit the access of such persons» accordingly. In a large organisation that is a project. In a practice of two or three people it is a list that takes a minute to write and settles an argument that otherwise recurs: the person booking appointments needs the name, the phone number and the slot, and does not need the history.
The «when» has no rule behind it and matters just as much. Reading the form before the visit is the entire return on having asked — it is what turns five answers into a slot of the right length, a practitioner who is expecting the right problem, and an opening question that is not «so, what brings you in». A form read for the first time while the patient is already sitting down has cost everybody time and bought nothing.
How is it different from the enquiry that came before it?
One comes from a stranger who is still deciding, the other from a patient who has already booked. They get read by different people for different reasons, and keeping them apart is what stops a practice from asking somebody for their medical history before that person has agreed to anything at all.
The enquiry belongs to the acquisition side of the practice, where the only questions worth asking are the ones that decide whether there is an appointment to be made: what the problem is, where the person is, and when they can come. That is the job of a crm for medical clinics, and the distinction between somebody who wrote in and somebody who booked is exactly the one we set out separately. The intake form sits on the other side of that line: it is the first thing a practice asks of a person who has already said yes.
Alberto Dalmasso is the case we point to for the step that comes before the form. A massage therapist with a practice of his own for over ten years in the province of Novara, he had been through several agencies — one specialist outfit that worked until it stopped offering the service, then a handful of generalists — and then a stretch of running the campaigns himself after taking a course, with results he describes as never quite arriving. What changed, in his words, was the kind of enquiry that showed up: «target clients who book by themselves, without having to chase them».
That is the order these two things come in, and it is worth stating plainly: a better intake form improves an appointment that already exists. It does not create one. A practice whose diary has gaps has a problem one step upstream of the paperwork, and no amount of work on the form reaches it.
An honest note on what this page cannot tell you. Nothing above says how many questions is the right number, because no published rule does: the Privacy Rule and the GDPR both set a direction and leave the list to you, and any page offering a definitive set of questions chose them for a practice that is not yours. What the sources do settle is narrower and more useful — what you owe the patient at the first visit, by when, who in the practice may read what, and what changes the moment the form stops being paper.
If the part you would rather change is the step before the form — the diary with gaps in it, rather than the sheet somebody fills in on arrival — you can Apply as a customer.
