A new patient form is the registration page of intake: who the patient is, how to reach them, and who pays. Practices search for one constantly ("new patient form" gets 590 searches a month at about $17.44 a click, "patient registration form" 320 and "patient information form" 210; Google Ads Keyword Planner data via DataForSEO, US, 12-month average to Sep 2026), and most free versions ask for far more than the front desk uses. The template below keeps to the fields that matter and can be copied straight into your form builder.
New patient form vs a full intake form
A registration form answers administrative questions. A full intake form adds the clinical history, specialty questions and consents. Keeping them apart has practical benefits:
- Registration can be completed by a parent, spouse or assistant; clinical history often can't.
- The front desk can verify insurance before the clinical team ever sees the chart.
- You can update registration at every visit without asking patients to redo their history.
If you need the clinical sections too, start from the master outline in our patient intake form templates and the specialty versions linked there.
Registration fields: demographics and contact details
Collect what you need to identify the patient, match their insurance and reach them:
- Legal name exactly as on their insurance card, plus a preferred name field so staff use the right one
- Date of birth, which most payers need to match a member
- Sex and gender fields formatted the way your EHR and payers require
- Mailing address and, if different, home address
- Mobile phone and email
- Preferred language and whether an interpreter is needed
About Social Security numbers. Many practices no longer ask for one unless a payer or program requires it. Insurance claims run on the member ID printed on the card, and CMS has removed Social Security–based numbers from Medicare cards (opens in a new tab), replacing them with Medicare Beneficiary Identifiers that CMS says should be "protected as Personally Identifiable Information." Every Social Security number on file is identity-theft exposure your practice must protect. If you keep the field, make it optional and say why you ask.
Asking only for what the visit needs is good design and good privacy practice; see collect only what you need.
Insurance and responsible party
- Primary insurance: plan name, member ID, group number, payer phone
- Subscriber (policyholder): name, date of birth, relationship to patient
- Secondary insurance, if any, with the same fields
- Responsible party for the bill, if not the patient: name, relationship, address, phone
- Self-pay checkbox for patients without coverage
Ask patients to bring the card itself, and have the front desk check the member ID against the form, because a mistyped ID is easy to miss until a claim comes back.
Canadian clinics. Replace US insurance fields with the provincial health card: province of issue, health card number, any version code printed on the card, and expiry date. Add private or employer extended-health coverage as a separate optional section. Provincial privacy law governs how you collect and use health numbers; see PHIPA for Ontario clinics.
Emergency contact and communication preferences
Emergency contact: name, relationship, phone. Make clear this person is for emergencies; it doesn't authorize you to discuss the patient's care with them. If the patient wants a family member involved, record that separately.
Communication preferences belong on every new patient form, because HIPAA gives patients a say. A covered provider "must accommodate reasonable requests by individuals to receive communications of protected health information … by alternative means or at alternative locations," and "may not require an explanation" (45 CFR 164.522(b) (opens in a new tab)).
On email specifically, HHS said in the 2013 Omnibus Final Rule (opens in a new tab) (78 FR 5634) that providers may send unencrypted email if they've advised the patient of the risk and the patient still prefers it. A short risk note next to the email checkbox covers that.
Consent and acknowledgments
Keep this section short and administrative:
- Notice of Privacy Practices. Providers must make "a good faith effort to obtain a written acknowledgment of receipt" by the first visit, and document why if they can't (45 CFR 164.520(c)(2) (opens in a new tab)).
- Financial policy. Payment at time of service, missed-appointment fees, assignment of benefits. Wording comes from your practice and attorney.
- Signature, date and signer. If a parent, guardian or other representative signs, capture their name and relationship. Who counts as a minor's personal representative depends on state law (45 CFR 164.502(g) (opens in a new tab)).
Consent to treat, telehealth consent and photo releases go in their own documents. A HIPAA authorization, such as a photo release for marketing, can't be combined with other forms.
Free new patient registration form template
Copy the template below into your word processor, form builder or EHR. It is a starting point: have your attorney review the acknowledgment and financial-policy wording, and keep clinical questions in a separate section approved by your clinical lead.
Section 1: Patient information
- Legal first, middle and last name
- Preferred name
- Date of birth
- Sex and gender (use the options your EHR requires)
- Street address, city, state, ZIP
- Mobile phone; other phone
- Preferred language; interpreter needed: yes / no
Section 2: Insurance
- Primary plan name; member ID; group number
- Subscriber name, date of birth, relationship to patient
- Secondary plan (same fields)
- I don't have insurance and will self-pay
Section 3: Responsible party (if not the patient)
- Name; relationship to patient
- Address; phone
Section 4: Emergency contact
- Name; relationship; phone
Section 5: How may we contact you?
- Phone calls to my mobile
- Text messages to my mobile
- Email (email may not be encrypted; there is some risk it could be read by others)
- You may leave a detailed voicemail
- Preferred way to reach me (one choice)
Section 6: Acknowledgments
- I received the practice's Notice of Privacy Practices
- I have read the financial policy
- Signature; printed name; date
- If signed by someone other than the patient: name and relationship
Sending the form before the first visit
- Send it after booking, not before. A prospective patient asking for a time only needs an appointment request form.
- Send a secure link two to three days ahead, through a tool that signs a business associate agreement (BAA). Comparing tools? See online intake options.
- Keep the paper version for patients who can't or won't complete it online.
- Verify at check-in: compare the card, confirm the phone number, and ask whether anything changed.
Where Medfy fits. Medfy provides HIPAA-compliant website forms: submissions go to an access-controlled patient CRM and inbox, patient information is stored in separate, encrypted HIPAA databases in the US or Canada, and Medfy signs a BAA with each practice. Medfy does not offer e-signatures, insurance-card capture or full digital intake packets; for those, use a dedicated intake tool that signs a BAA. Read how Medfy protects patient data, or get a free marketing audit to see how your website's forms and tags handle patient data today.
Frequently asked questions
What information goes on a new patient registration form?
Legal and preferred name, date of birth, address, phone and email; insurance details and the responsible party for the bill; an emergency contact; communication preferences for calls, texts, email and voicemail; and acknowledgments such as receipt of the Notice of Privacy Practices and your financial policy, with a signature and date. Clinical history belongs in a separate section that your clinicians write.
Should a practice ask for a Social Security number?
Only if a payer or program actually requires it for your patients. Most insurance is billed with the member ID on the card, and Medicare replaced Social Security–based numbers with Medicare Beneficiary Identifiers. Every Social Security number you store is identity-theft risk you must protect, so many practices make the field optional or drop it. Check payer requirements with your billing lead.
Can new patients fill out forms online before their visit?
Yes. Send a secure link after the appointment is booked, through a form or intake tool that signs a business associate agreement and encrypts submissions. Keep ad pixels and analytics tags off the form pages, and make sure submissions don't land in an ordinary email inbox. Keep the same form on paper or a tablet for patients who can't complete it online.