Taking back permission you have already given
Consent is not a one-way door. You may withdraw a HIPAA authorisation at any time and in almost all circumstances — but revocation operates forwards only, and understanding that asymmetry is what makes it a useful tool rather than a disappointing one.
Before and after
What changes the moment a revocation is received
While the authorisation stands
Named recipients may be sent the specified information
Verification requests from that recipient are answered
Further copies may be issued within the stated scope
The authorisation runs until its expiry date
Once it is revoked
No further disclosures are made under it
Verification under that authorisation stops
The revocation is recorded on your file
Disclosures already made cannot be recalled
What revocation cannot do
It cannot reach a disclosure already made in good faith while the authorisation was valid. A letter already in your landlord’s hands stays there, and no instruction from you obliges them to delete it — they are not bound by HIPAA in the first place.
Nor does it undo a disclosure made under one of the narrow legal exceptions, such as a court order, which never depended on your authorisation at all.
When it is worth doing anyway
- You have moved and the old landlord no longer needs anything
- An application was withdrawn or refused
- You signed something broader than you intended
- A property changed management and you never authorised the new agent
- A dispute has ended and the authorisation is still open
A revocation that works
“I am revoking the authorisation I signed on [date] permitting disclosure of my assistance animal documentation to [named recipient]. Please make no further disclosures under that authorisation from the date you receive this notice, and confirm in writing that it has been recorded. I understand this does not affect disclosures already made while the authorisation was valid.”
Send it in writing, keep the sent copy, and ask for written confirmation. A revocation you cannot prove you sent is difficult to rely on later.
Asking a landlord to destroy a copy
This is a separate request to a separate party, and it is a courtesy rather than a right. Your landlord is not a covered entity, so neither HIPAA nor your revocation compels them to delete anything.
Ask anyway — many will agree once a tenancy application is closed — but frame it as a request, and where a state privacy or tenancy statute does impose a retention limit, cite that instead.
Frequently asked
Can I withdraw consent after my letter has been sent?
You can revoke the authorisation, which stops further disclosures from the moment it is received. It cannot recall a letter already delivered.
Does revoking consent invalidate my ESA letter?
No. The letter remains a valid clinical document. Revocation governs who may be sent information, not whether the evaluation stands.
Do I have to give a reason for revoking?
No. A revocation does not require justification; it needs only to be in writing, identify the authorisation and be dated.
Can my landlord be made to delete my letter?
Not under HIPAA, because landlords are not covered entities. You can ask, and some state privacy or tenancy laws impose retention limits worth citing.
How quickly does a revocation take effect?
On receipt. That is why sending it in writing and keeping proof of sending matters more than the wording itself.
Can I revoke only part of an authorisation?
Yes. You can narrow it to exclude a particular recipient or category of information while leaving the rest in place, provided you say so clearly.
Your privacy is not an afterthought here
Start a free evaluation and see exactly what your landlord will — and will not — receive.
Start free evaluation All privacy topics