How to fax FMLA, disability and Social Security forms securely

An FMLA certification goes back to the employee, or to the employer with the patient's authorization. Social Security records go to the letter's fax number, barcode page first.

A stack of intake paperwork on a desk, with a person in a dark blazer writing behind it

An FMLA certification goes back to the employee, or straight to the employer only with the patient's authorization, and the employer must give the employee at least 15 calendar days to provide it. Records for a Social Security disability claim go to the fax number on SSA's request letter, barcoded letter first, under the patient's signed SSA-827.

Who asks for leave and disability paperwork, and who sends it?

Leave and disability paperwork comes from four kinds of requester: an employer under the Family and Medical Leave Act (FMLA), a private disability insurer, a state paid leave program, and Social Security or the state Disability Determination Services (DDS) office handling a claim. The treating clinician completes the form. For FMLA and the state programs, the finished form usually travels back through the employee or the patient. Social Security and the insurers take records straight from the provider's office.

The table sets out each request: who asks, the authorization it rests on, the clock and where the completed form goes.

Form or requestWho asksAuthorizationDeadlineWhere it goesOfficial source
FMLA certification (WH-380-E for the employee's own condition, WH-380-F for a family member's)The employer, through the employeeThe patient's authorization, before the form goes straight to the employerAt least 15 calendar days for the employee, plus 7 calendar days to cure a deficiencyBack to the employee, or to the employer with authorization; never to the Wage and Hour DivisionDepartment of Labor; 29 CFR 825.305
An employer's short-term or an insurer's long-term disability claim formThe insurer, such as Unum or The StandardThe insurer's signed authorization; a separate one for psychotherapy notes on The Standard's long-term disability packetSet by the insurerThe insurer, by mail or fax at the contact information printed on its formUnum CL-1104 and CL-1021; The Standard SI 2047 and SI 3379
State paid leave certification (Washington, Massachusetts)The state program, through the patientCarried by the patient, who files itWashington: 7 calendar days from receipt, with no feeBack to the patient; Massachusetts takes faxes, never in color, with the application ID on each pageWashington Paid Leave; Massachusetts DFML
Social Security records request with an SSA-827SSA or the state DDS officeThe patient's signed SSA-827, generally valid 12 monthsIn regular claims, one follow-up 10 to 20 calendar days after the first request, then at least 10 calendar days to replyThe fax number on the request letter, barcoded letter first, 200 pages at mostSSA Electronic Records Express; POMS DI 22505.035

Can you fax an FMLA certification straight to the employer?

A provider can fax an FMLA certification straight to the employer only when the employee, or the employee's family, authorizes it. The Department of Labor's page for health care providers says the employee otherwise provides the certification to the employer. HHS draws the same line from the privacy side: its page on employers and health information says a provider cannot give an employer a patient's information without the patient's authorization unless other laws require it.

A HIPAA authorization must be in writing and signed, and the HIPAA preamble that SSA quotes on its SSA-827 page counts email and electronic documents as written. Under 45 CFR 164.508, an authorization whose expiration date has passed is not valid. What a valid HIPAA authorization must include lists the elements an employer release needs.

The Department of Labor's FMLA forms page says an employer cannot reject a certification that holds all the information needed to decide whether the leave qualifies, and cannot refuse a fax or a copy of it. The same page asks that completed forms never go to the Wage and Hour Division. The employer keeps the certification as a confidential medical record, apart from personnel files, under 29 CFR 825.500.

An employer's questions about the form reach the clinician only through the people 29 CFR 825.307 names. The rule lets a health care provider, a human resources professional, a leave administrator or a management official contact the clinician to authenticate or clarify the form, and never the employee's direct supervisor. That contact comes after the employee has had the chance to cure a deficiency, stays limited to authentication and clarification, and must satisfy the HIPAA Privacy Rule.

What goes on an FMLA certification, and what stays off?

An FMLA certification states the medical facts showing that the employee needs leave for an FMLA-protected condition, and DOL tells providers the certification does not need the patient's diagnosis. Form WH-380-E asks the provider to limit answers to the condition for which leave is sought. It also asks for the amount of leave as specifically as possible, and it warns that "lifetime," "unknown" or "indeterminate" may not be sufficient to determine FMLA coverage.

WH-380-E and WH-380-F are two of the five FMLA certification forms DOL publishes for optional use. The employee pays for the certification or recertification. The employer pays for any second or third opinion, including reasonable travel expenses.

What are the deadlines for FMLA and state paid leave forms?

FMLA gives the employee 15 calendar days after the employer's request to provide a certification and 7 calendar days to cure an incomplete or insufficient one, and Washington Paid Leave gives the provider 7 calendar days from receipt to complete its form. Under 29 CFR 825.305, the 15 days run longer when they are not practicable despite the employee's diligent, good faith efforts, or when the employer allows more. WH-380-E states the floor as at least 15 calendar days. DOL's page for providers puts the duty on the employee, who is responsible for a complete and sufficient certification.

Washington's certification form asks the provider to fill out Section 2 and return the form to the patient within 7 calendar days of receipt. The form bars any fee for completing it. Washington's page for health care providers asks for corrections made by crossing out the old entry, writing in the new one and initialing the change, and it cannot accept forms with white out. A patient may give Washington an FMLA form or a provider's note instead, if it carries the information WAC 192-610-020 requires.

Massachusetts' Department of Family and Medical Leave (DFML) accepts FMLA certification forms beside its own, and its required documents page warns that any other type of document may delay or deny the application. DFML's guidance for health care providers makes filing the form the patient's responsibility. DFML takes faxed documents, never in color, and asks for the application ID number in the top left corner of each faxed page.

How do you fax records for a Social Security disability claim?

Records for a Social Security disability claim go to the fax number printed on the request letter, and SSA's Electronic Records Express FAQ requires that barcoded letter as the first page of the fax. The barcode matches the pages to the applicant's electronic disability folder. SSA warns that leaving it off can cause significant delays in that match and in paying the sender. Faxes sent from computer software follow the same rule, with the barcode from the SSA or DDS office first on each document.

The same FAQ says not to fax more than 200 pages. It says the sending fax machine should show a successful transmission, including the number of pages sent.

The release behind the request is Form SSA-827. SSA's SSA-827 information page says the form is generally valid for 12 months from the date signed and that copies, including electronic copies, are acceptable. SSA's fact sheet for mental health professionals accepts a facsimile of the signed form and says Social Security does not need psychotherapy notes. The operations manual, in POMS DI 11005.055, describes the SSA-827's permission for psychological and psychiatric records as excluding psychotherapy notes as defined in 45 CFR 164.501.

SSA pays non-federal providers the reasonable cost of existing medical evidence it asks for, under 20 CFR 404.1514. In regular claims, POMS DI 22505.035 tells staff to send one follow-up request 10 to 20 calendar days after the first one. Staff then allow at least 10 calendar days from that follow-up for a reply.

How do private disability insurers take forms by fax?

A private disability insurer takes its attending physician statement by mail or fax at the contact information printed on its own form, so the form decides where the pages go. The Standard's Employee/Attending Physician's Statement, form SI 2047, asks the physician to mail or fax the completed form that way. It also says the patient is responsible for obtaining a complete form without expense to The Standard.

Unum's short-term disability claim form, CL-1104 (edition 07/25), asks for the physician's telephone number, fax number and tax ID number. It warns that a reply of "no work" or "totally disabled" will not let Unum evaluate the claim and may bring a request for clarification.

Authorization travels with these claims. Unum's status update form, CL-1021, says that without a signed authorization Unum is unable, or limited, to request medical information and to speak with the physician. The Standard's long-term disability packet, SI 3379, asks a claimant treated by a psychotherapist, psychologist, clinical social worker or other mental health provider to sign two releases: one to obtain and release information, and a separate one for psychotherapy notes. How HIPAA protects psychotherapy notes covers why those notes need their own release.

One insurer form can carry both jobs. The Standard posts a Disability Claim/Family Medical Leave Attending Physician's Statement, SI 14560, headed for a disability claim and family medical leave together.

What mistakes delay leave and disability paperwork?

The mistakes that delay leave and disability paperwork are vague answers on the form, a Social Security fax without its barcoded letter first, a state form faxed in color or corrected with white out, an expired authorization and a form sent to the wrong office. Each one is named in the requester's own instructions or the rule behind them:

  • WH-380-E warns that "lifetime," "unknown" or "indeterminate" may not be sufficient to determine FMLA coverage.
  • Unum warns that "no work" or "totally disabled" will not let it evaluate a claim.
  • An SSA fax without the barcoded letter as page one risks significant delays in matching the records and in paying the sender.
  • SSA's FAQ says not to fax more than 200 pages.
  • Massachusetts DFML cannot accept color faxes, and it asks for the application ID on each page.
  • Washington Paid Leave cannot accept forms with white out.
  • Massachusetts warns that a document other than its form or an FMLA certification may delay or deny the application.
  • A HIPAA authorization past its expiration date is not valid, and the SSA-827 is generally valid for 12 months from signing.
  • Completed FMLA certifications never go to the Wage and Hour Division.

How do you send these forms from a HIPAA fax account?

A completed certification can be signed with Fax Pigeon's e-signatures and faxed from the browser, where a PDF, a Word file or a phone photo of the form uploads as it is; how to sign a fax and send it back shows the steps. The cover sheet is optional, so SSA's barcoded request letter goes out as page one, ahead of the records, in the order SSA's FAQ asks for. Each delivered fax gets delivery proof to file with the copy of the form, and every page leaves under the BAA signed at signup. A follow-up from an insurer or from SSA lands in the practice's shared inbox, where it can be assigned to whoever is completing that paperwork.

* Official sources (the Department of Labor, the eCFR, HHS, Social Security, Washington Paid Leave, Massachusetts PFML, Unum) were read on October 19, 2026. Fax Pigeon prices and plan terms as of October 20, 2026.

Frequently asked questions

How can a therapist fax FMLA or disability paperwork securely?
A therapist faxes FMLA or disability paperwork securely by sending each form only where its rules allow. An FMLA certification goes back to the employee, or to the employer with the patient's authorization. Social Security records go to the number on SSA's request letter with the barcoded letter first, and SSA does not need psychotherapy notes. Fax Pigeon sends every fax under a BAA signed at signup, with delivery proof on every delivered fax.
Can I fax an FMLA certification straight to the employer?
Yes, once the employee or the employee's family authorizes it, the Department of Labor lets a provider fax an FMLA certification straight to the employer; without that authorization the completed form goes back to the employee. HHS requires the patient's authorization before a provider shares the patient's information with an employer, unless other laws require the disclosure. DOL also says an employer cannot refuse a fax or copy of the certification.
How long does the employer give to return an FMLA form?
The employer must give the employee at least 15 calendar days to return an FMLA certification, under 29 CFR 825.305 and Form WH-380-E. The time runs longer when 15 days is not practicable despite the employee's diligent, good faith efforts, or when the employer allows more. An incomplete or insufficient certification gets 7 calendar days to cure, and the Department of Labor places the deadline on the employee.
Where do I fax records for a Social Security disability claim?
Social Security disability records go to the fax number SSA or the state Disability Determination Services office prints on its request letter, and that barcoded letter must be the first page. SSA's Electronic Records Express FAQ caps a fax at 200 pages. It warns that a missing barcode page can cause significant delays in matching the records to the claim and in paying the sender.
Is a faxed SSA-827 authorization valid?
Yes, a faxed SSA-827 is acceptable. SSA's fact sheet for mental health professionals says a copy, facsimile or electronically transmitted version of the signed form is acceptable. The SSA-827 is generally valid for 12 months from the date signed. Its permission to release records about mental impairments excludes psychotherapy notes as defined in 45 CFR 164.501, according to SSA's operations manual.
Should I send psychotherapy notes with disability paperwork?
Social Security does not need psychotherapy notes, and SSA's fact sheet for mental health professionals says so directly. The SSA-827's permission for mental health records excludes them. A private insurer can ask for them on a separate release: The Standard's long-term disability packet, form SI 3379, carries an Authorization to Obtain and Release Psychotherapy Notes beside its general authorization.

Fax Pigeon

HIPAA-compliant fax with a signed BAA on every plan

Plans start at $4.99 a month, billed annually, for 200 pages, with your own number and unlimited people. Your first fax is free.

  • Free porting of your local number
  • Fax from your email
  • AI summary of every inbound fax
  • E-signatures
  • Contact management
  • Delivery proof
Plans and pricing

Know a practice that still faxes? Refer it through the referral program and earn 20% of its plan, every month it stays.