The Documents Every New Optometry Practice Needs

Before your first patient walks through the door, your document system needs to be complete. Missing or inadequate paperwork doesn’t just create administrative headaches — it exposes you to HIPAA enforcement, FTC compliance penalties, and billing disputes that a signed document would have prevented. This guide covers the full document set for a new solo optometry practice, organized by function, with the regulatory hooks you need to know.

For the broader practice startup context, see How to Start a Solo Optometry Practice.

---

Patient-Facing Intake Documents

These are the forms patients complete before or at their first appointment. They capture clinical history, authorize treatment, and satisfy your HIPAA notice obligations.

Patient Registration / Intake Form

The foundational intake document collects demographics: full legal name, date of birth, address, phone, email, employer (if applicable), emergency contact, and insurance information for billing. It also captures primary care physician information for coordination of care. Design this form to be completed before the appointment — either electronically via your patient portal or as a fillable PDF sent in advance. If you accept vision plan benefits, include fields for member ID and group number; errors here delay authorization and claims.

Health and Ocular History Form

Optometry exams rely heavily on patient-reported history. A dedicated ocular history form captures current ocular complaints, prior eye conditions, previous surgeries (cataract, LASIK, retinal), current ocular medications, contact lens wear history, and relevant systemic conditions — diabetes, hypertension, and autoimmune disorders all have meaningful ocular manifestations. Document current systemic medications, since drug-induced ocular side effects (hydroxychloroquine retinopathy, for example) are routinely caught in comprehensive exams.

This form is clinical, not administrative, but it’s collected at intake and belongs in the patient record from day one.

Informed Consent to Treatment

Informed consent is a legal and ethical requirement before examination and clinical procedures. Patients must understand the nature of the exam, what procedures may be performed (dilation, tonometry, OCT, contact lens fitting), the alternatives available, and any relevant risks. Requirements vary by state — your state board of optometry sets the specifics — but every state requires some form of consent process for clinical care.

A written consent form that patients sign at intake documents that this process occurred. It should be broad enough to cover routine examination visits without requiring re-signing at every appointment, but specific enough to describe the types of procedures routinely performed. For procedures outside routine scope — therapeutic pharmaceutical applications, laser procedures in states where your license permits them — obtain separate, procedure-specific consent.

---

HIPAA-Required Documents

If you transmit any patient health information electronically in connection with billing — which includes submitting claims to any insurer, vision plan, or Medicare — you are a HIPAA covered entity under HHS rules. Virtually every optometry practice qualifies.

Notice of Privacy Practices (NPP)

The HIPAA Notice of Privacy Practices explains to patients how their protected health information (PHI) will be used and disclosed, what their privacy rights are, and how to contact your privacy officer with concerns. You must:

• Provide it to every new patient at or before the first appointment
• Make a good-faith effort to obtain a signed written acknowledgment of receipt
• Post it prominently in your office and on your practice website

As of February 16, 2026, all NPPs must comply with final rules issued in 2024, including updated language covering substance use disorder patient record protections. HHS publishes model NPP language on its website that you can adapt for your practice.

Business Associate Agreements (BAAs)

Any vendor that handles PHI on your behalf is a Business Associate under HIPAA, and you must have a signed BAA with each one before transmitting any PHI to that vendor. In a typical optometry practice, that includes:

• Your EHR or practice management software
• Your billing clearinghouse
• Cloud storage or backup providers that hold patient records
• Optical dispensary management software connected to patient records
• Telehealth platforms, if applicable

Most major EHR vendors include BAA language in their standard service agreements or provide one on request. HHS describes the required elements of a compliant BAA. Verify the BAA is executed before your go-live date — not discovered missing after your first claim is submitted.

Authorization for Release of Records

A HIPAA-compliant authorization form is required any time a patient requests that you send their records to a third party — another provider, an attorney, an insurer making a benefits determination, or the patient themselves in certain circumstances. The authorization must identify what is being released, to whom, for what purpose, and include an expiration date. It must be signed by the patient (or their authorized representative) and retained in the medical record.

---

Financial and Administrative Documents

Financial Policy / Fee Agreement

Your financial policy defines the terms of the payment relationship and makes them enforceable. It should cover: standard exam and dispensary fees, accepted payment methods, when payment is due at the time of service, your policy on vision plan copays and patient balances above plan allowances, and how unpaid balances are handled. Patients must sign this at intake. A policy that isn’t signed is a policy that doesn’t bind anyone.

Be explicit about vision plan coverage limits: state clearly that patients are responsible for any amount owed beyond their plan benefit, including upgrades and non-covered services. Vague language here is a source of disputes.

Assignment of Benefits

An assignment of benefits form authorizes you to bill the patient’s insurer or vision plan directly and receive payment on the patient’s behalf. Without it, some payers send reimbursement directly to the patient rather than to your practice. This is a one-page authorization patients sign at intake, separate from their insurance card and coverage verification.

No-Show and Cancellation Policy

A written cancellation policy — specifying the required notice period, the fee charged for late cancellations or no-shows, and any exceptions — is the only thing that makes charging a missed-appointment fee enforceable when a patient contests it. Include it in your financial policy or as a standalone addendum. Patients must sign it at intake.

---

FTC-Required Prescription Documents

Federal Trade Commission rules impose specific prescription release obligations on optometrists. These are separate from HIPAA, carry their own enforcement penalties, and must be reflected in your patient workflow.

Spectacle Prescription Release and Confirmation

Under the FTC Eyeglass Rule, you must provide patients with a free copy of their spectacle prescription automatically at the conclusion of each refractive exam — before offering to sell eyeglasses, without requiring the patient to ask, and at no additional charge. The 2024 rule revision, effective September 24, 2024, added a confirmation requirement: practices with a direct or indirect financial interest in the sale of eyeglasses must request a patient signature confirming receipt of the prescription and retain that confirmation for at least three years. The FTC’s compliance guidance explains the specifics. Violations can result in civil penalties of up to $53,088 per occurrence.

Electronic delivery is permitted under the updated rule if the patient provides verifiable affirmative consent to that delivery method, and you retain that consent record for at least three years.

Contact Lens Prescription and Fitting Documentation

The FTC Contact Lens Rule requires that you give patients a copy of their contact lens prescription at the conclusion of the fitting — immediately and without waiting to be asked. You must request a signed acknowledgment of receipt and retain it for at least three years. If a patient refuses to sign, document the refusal in writing, sign it yourself, and retain it in the record.

Your contact lens documentation should also include a fitting agreement that records lens parameters, care and handling instructions provided, and the fitting process — both for clinical completeness and to support the prescription if it is later disputed.

---

The Complete Document Set at a Glance

Document	When Executed
Patient Registration / Intake Form	Before or at first appointment
Health and Ocular History Form	Before or at first appointment
Informed Consent to Treatment	Before or at first appointment
HIPAA Notice of Privacy Practices (signed acknowledgment)	At first appointment
Financial Policy / Fee Agreement	At first appointment
Assignment of Benefits	At first appointment
No-Show / Cancellation Policy	At first appointment
Authorization for Release of Records	When records are requested
Spectacle Prescription Release & Confirmation	End of each refractive exam
Contact Lens Prescription & Fitting Agreement	End of each contact lens fitting
Business Associate Agreements (each vendor)	Before transmitting any PHI

The prescription release documents are ongoing obligations — they apply at every relevant exam, not just at initial intake. BAAs must be updated when you add new vendors or change the scope of existing vendor services.

For the credentialing sequence that runs alongside your document buildout, see Optometry Credentialing: NPI, CAQH, Medicare & Panels in Order. For the full HIPAA compliance picture, see HIPAA Basics for a New Allied-Health Practice.

---

Frequently Asked Questions

Do all these documents need to be on paper?

No. Electronic documents are legally equivalent to paper under the federal ESIGN Act and most state laws, provided patients affirmatively consent to electronic delivery and e-signatures. Most practice management systems support electronic intake via patient portals or secure form links. The FTC Eyeglass Rule specifically permits electronic prescription delivery if you first obtain verifiable patient consent to that delivery method.

Can I combine these into a single intake packet?

Yes. Many practices combine the registration form, ocular history, informed consent, financial policy, and HIPAA acknowledgment into one multi-page intake packet that patients complete before their first visit. The HIPAA acknowledgment must be a distinct, clearly identified signed section — not buried in dense text. The FTC prescription documents must remain separate from the intake packet, since they are executed at the end of the exam rather than at intake.

What if my HIPAA Notice of Privacy Practices hasn’t been updated since 2024?

If your NPP doesn’t reflect the 2026 final-rule updates — particularly the substance use disorder record protection language that took effect February 16, 2026 — you are out of compliance with HHS requirements. Update the NPP, re-post it in your office and on your website, and provide the updated version to all new patients going forward. Provide it to established patients upon request.