HIPAA does allow us to recognize a properly signed authorization and apply such authorization to medical records / PHI subsequent to the date of the authorization but we are not required to do so.............
HHS CMS FAQ:
Question: May a covered entity disclose protected health information specified in an Authorization, even if that information was created after the Authorization was signed?
Yes, provided that the Authorization encompasses the category of information that was later created, and that the Authorization has not expired or been revoked by the individual. Unless otherwise expressly limited by the Authorization, a covered entity may use or disclose the protected health information identified on the Authorization regardless of when the information was created.