A new patient intake checklist is the exact set of forms, IDs, insurance cards, medical histories, and consents your practice needs before the first appointment. Get it right and the first visit runs on time. Get it wrong and your front desk spends 20 minutes at check-in scanning cards and chasing signatures while the schedule slips.
Below is the checklist you can use as-is, plus adaptations for dental, primary care, chiropractic, mental health, and specialty practices.
The new patient intake checklist
Send everything at once, at least three days before the first appointment. Use a portal or secure link, not paper. Patients complete it once, from their phone, and your front desk starts the visit instead of running it.
- Registration form. Legal name, date of birth, address, phone, email, preferred contact method, emergency contact.
- Government-issued photo ID. Driver’s license, passport, or state ID. Upload both sides.
- Insurance card, front and back. Primary and secondary if applicable. Ask for the subscriber’s name and DOB if different from the patient.
- Medical history questionnaire. Conditions, surgeries, hospitalizations, family history, current symptoms. Practice-specific — adapt for what you treat.
- Current medications and supplements. Name, dose, frequency, prescribing provider. Include vitamins and OTCs — they interact.
- Allergies. Drug, food, environmental, latex. Reaction type and severity.
- HIPAA Notice of Privacy Practices acknowledgment. Signed and dated. Required at first visit, then again if the notice changes.
- Consent for treatment. General consent covering exams, standard procedures, and communication. Specialty consents come separately per procedure.
- Financial responsibility form. Patient understands they owe balances not covered by insurance. Signed before services.
- Assignment of benefits. Authorizes the insurer to pay you directly.
- Release of records (if transferring from another provider). Signed request the previous practice can act on.
- Communication preferences. Voicemail OK? Text reminders? Email results? Written consent for each channel.
- Advance directives / healthcare proxy (adult primary care, specialty, and pre-op only). Optional but ask.
- Photo release (if you use before/afters or testimonials). Separate opt-in, never bundled with treatment consent.
- Card on file authorization (if you charge copays or no-show fees automatically). PCI-compliant, not a photo of the card in your EHR.
That’s the base. Everything below adapts it to your practice type.
Intake checklist by practice type
Different practices need different forms. Trim or add from the base checklist below.
Dental practice new patient intake
- Registration, ID, insurance (dental + medical if you bill medical for TMJ/sleep)
- Dental history: last cleaning, last X-rays, prior dentists, cosmetic history, current pain, sensitivity, grinding, orthodontic history
- Medical history relevant to dentistry: blood thinners, bisphosphonates, antibiotic prophylaxis needs, pregnancy status
- X-ray consent (bitewings, panoramic, or FMX depending on chart)
- Financial policy covering estimates vs. actuals, when preauth is required
- HIPAA acknowledgment and communication preferences
Time saved when this arrives before the visit: 15-25 minutes per new patient. Multiply by your new-patient volume.
Primary care / family medicine
- Registration, ID, insurance (primary + secondary)
- Full medical history: PMH, PSH, family history, social history (tobacco, alcohol, substances, occupation, exercise)
- Reproductive history where relevant
- Immunization records — request them from prior provider or state registry
- Medication reconciliation (attach a photo of pill bottles if patients aren’t sure)
- Advance directive — DNR, healthcare proxy, POLST if applicable
- Preventive care history: last mammogram, colonoscopy, dental, eye exam
Chiropractic and physical therapy
- Registration, ID, insurance
- Pain intake: location, onset, mechanism of injury, VAS scale, aggravating/relieving factors, prior treatments
- Auto or work injury forms if MVA or workers’ comp
- Prior imaging: MRI, X-ray, CT reports and disks
- Referral or prescription for insurance-covered PT
- Informed consent for manipulation (chiropractic-specific)
Mental health / therapy
- Registration, ID, insurance
- Presenting concerns questionnaire
- Screeners: PHQ-9, GAD-7, or practice-standard tools
- Consent for telehealth if applicable, with state-specific language
- Consent for release of information — schools, PCPs, previous therapists
- Financial policy and cancellation policy — mental health cancellation rates are high
- Emergency plan — crisis contact, preferred hospital, safety plan for higher-risk patients
Specialty practice (dermatology, cardiology, orthopedics, etc.)
- Base checklist plus
- Referring provider name and fax
- Specialty history questionnaire — skin cancer history for derm, cardiac events for cardio, joint history for ortho
- Prior imaging and labs — bring or send ahead of visit
- Procedure-specific consent if the visit itself involves a procedure
- Photo consent where relevant (derm before/afters, plastic surgery)
Legal essentials: HIPAA, consent, and record retention
Skip the legal boilerplate and here’s what actually matters at intake.
HIPAA Notice of Privacy Practices. Every new patient signs an acknowledgment that you offered it. You don’t need their explicit consent to use PHI for treatment, payment, or operations — the acknowledgment is enough. Save it in the chart.
Consent for treatment. General consent covers the standard visit. Every procedure with material risk needs its own consent conversation and signature — not a bundled catch-all.
Communication preferences. Under HIPAA, patients can request how you contact them. If they say "no voicemails," don’t leave one. Written preferences at intake save later complaints.
Record retention. Federal minimum for HIPAA is six years from creation or last use. Many states require longer — Texas is seven years for adults, ten for minors past age of majority. Check your state board and your malpractice carrier. Retain intake forms as long as the chart.
Card on file. If you store a card to auto-charge copays or no-show fees, use a PCI-compliant payment processor. Storing card numbers in your EHR is a compliance violation and a breach waiting to happen.
If you handle protected health information, your intake process needs to be HIPAA-compliant end to end — the forms themselves are only half the picture. Encryption in transit, encryption at rest, audit logs, and business associate agreements with your intake vendor all matter.
Send it before the visit, not at check-in
The biggest mistake in patient intake is timing. If patients arrive at 9:00 for a 9:00 appointment and start filling forms in the waiting room, you’re already behind by 9:20. Front desk staff scanning IDs and typing insurance data by hand adds another five minutes. First-visit no-shows and reschedules compound the problem.
Move all of it to before the visit. Three days before the appointment, send the full checklist. Patients complete it from home, on their phone, in the time it takes to watch one episode of anything. At check-in, your team confirms the file is complete, verifies eligibility if needed, and rooms the patient on time.
The tools that make this work:
- A branded intake portal the patient can access with a magic link — no account to create, no password to reset. See what a client portal looks like in practice.
- Structured forms the patient fills once, that populate the same fields every time.
- Document upload for IDs and insurance cards from the phone camera.
- Consent capture with an electronic signature, timestamped and saved with the record.
- Reminders that go out automatically at 72, 48, and 24 hours before the visit until intake is complete. Manual reminder emails are how staff time evaporates — use automated reminder rules instead.
- Approval workflow so the front desk sees at a glance which files are complete and which patients still owe forms.
Sample new patient intake email
Copy, adapt, send:
Subject: Getting ready for your first visit with [Practice Name]
Hi [First Name],
Welcome, and thanks for booking with us. To keep your first visit on time, we’ve put your paperwork in one place. It takes about 10 minutes on your phone.
[Complete my intake] (link)
You’ll be asked to:
- Fill out your medical/dental history
- Upload a photo of your ID and insurance card
- Sign our HIPAA and consent forms
- Confirm how you’d like us to reach you
Please complete it by [date — 24 hours before the appointment]. If we don’t have everything on file, we may need to reschedule.
Questions? Reply to this email or call us at [phone].
See you [day and time],
[Practice Name]
Short. Direct. One link. One deadline. That’s the whole thing.
For more template language you can adapt, see our roundup of document request email templates.
Common intake mistakes to fix this month
Long paper packets in the waiting room. Kill them. Every minute a patient spends filling paper is a minute you pay someone else to scan and re-type it.
Bundling every consent into one signature. A single signature at the bottom of a ten-page PDF is a legal weakness. Separate acknowledgments for HIPAA, general treatment, financial responsibility, communication preferences, photo release, and card on file.
Not verifying insurance until the day of. Front desk staff shouldn’t be doing eligibility checks at 8:55 for a 9:00 appointment. Move eligibility verification to 48 hours prior so any coverage issues can be resolved before the patient shows up.
No follow-up when intake is incomplete. If a patient hasn’t finished by 24 hours out, someone needs to know. Automated reminders and a status dashboard fix this. If you’re still calling patients manually to chase forms, you’re paying a person to do what software costs a fraction of.
Storing IDs and insurance cards as email attachments. Never. Sensitive documents belong behind authentication, encrypted at rest, in a system that logs access. Free email is not that system.
Skipping communication consent. If you text appointment reminders without documented consent, you’re one complaint away from a TCPA problem. Get it in writing at intake, honor the preference.
How Superdocu handles patient intake
Superdocu is a document collection and workflow platform used by professional services firms to collect documents, forms, and signatures before the first appointment.
For a healthcare practice, a typical setup looks like this:
- Build one new patient workflow with all the steps above: registration form, ID upload, insurance upload, medical history, HIPAA acknowledgment, consent, communication preferences.
- Add conditional steps that appear only when relevant — the pediatric consent when the patient is a minor, the auto injury form when the mechanism was an MVA.
- Set auto-reminders at 72, 48, and 24 hours.
- Track everything on a staff dashboard — who’s complete, who’s outstanding, what’s rejected and why.
- Approve intake files with e-signature capture through the DocuSign integration.
- Everything is hosted in Europe, GDPR-compliant, and structured to meet HIPAA requirements when paired with a BAA.
Practices switch to Superdocu when their paper-and-email intake starts costing more staff time than the software would. The break-even is usually under 30 new patients per month.
Start a 7-day free trial at superdocu.com — no credit card required.
Frequently asked questions
What documents should a new patient bring to their first appointment?
The essentials are a government-issued photo ID, current insurance card (front and back), a list of current medications and allergies, and any prior records or imaging from other providers. Everything else — history forms, consents, communication preferences — should be completed before the visit through your intake portal, not filled out in the waiting room.
How far in advance should we send new patient intake forms?
Send them at least three days before the appointment, with reminders at 72, 48, and 24 hours if the patient hasn’t completed them. Any less and you’ll have patients arriving with paperwork still open on their phone. Any more and they’ll forget until you remind them anyway.
Is a paper intake packet still acceptable?
Legally, yes — HIPAA doesn’t require electronic intake. Practically, no. Paper packets slow check-in, generate transcription errors, add scanning work, and put PHI in filing cabinets that are harder to secure than an encrypted database. Every practice that switches to digital intake reports lower front-desk labor and faster starts.
What consents does a new patient need to sign?
At minimum: a HIPAA Notice of Privacy Practices acknowledgment, a general consent for treatment, a financial responsibility form, and communication preferences. Add procedure-specific consents as procedures come up, and separate opt-ins for photo release, telehealth, and card on file if you use them.
How do we handle intake for minors?
The legal guardian completes and signs everything. Confirm the relationship (parent, adoptive parent, legal guardian, court-appointed) and keep supporting documentation on file if custody is complicated. State laws vary on adolescent consent for sensitive services — mental health, reproductive health, substance use — so know your state’s rules before setting up the workflow.
Can we send intake forms by email?
You can send a link by email. You should not send the forms themselves or the completed forms as email attachments — that’s not encrypted, not access-logged, and not HIPAA-appropriate. Use a secure portal that authenticates the patient and keeps the exchange inside your compliance boundary.