Yes, the individual can revoke the authorization at any time, but any information disclosed prior to revocation may still be used to decide the claim.