You MUST choose one of the following: I specifically authorize AHCCCS to disclose all of my protected health information in its possession. Releasing medical records without a HIPAA authorization form is a HIPAA violation.In order to obtain protected health information from a DES covered entity, you will need to use a HIPAA-compliant authorization. Download an authorization form:.