An employer is entitled, without the express authorization of the employee, to obtain the employee's medical records containing relevant medical information. A North Carolina HIPAA authorization form is required under certain circumstances.The new law aligns state legal requirements for disclosing patient information with requirements found in federal law. Complete the Authorization for Release of Health Information Form and identify the healthcare provider to whom you want your records sent.