HIPAA Authorizations in Norris

Start with the information-sharing decision

Consider the people and situations in which you want health information shared. You might want one person to receive information generally, or limit access to a particular person, provider, or purpose. The key is to make the permission fit your intended use rather than treating it as unlimited access for everyone you trust.

Also decide how long the permission should last and whether it should continue in circumstances you consider important. A clear scope and duration can help communicate your intent. The appropriate terms depend on your circumstances and the document being prepared.

Separate access to information from healthcare authority

A HIPAA authorization permits information sharing; it does not, by itself, appoint someone to make healthcare decisions. A healthcare power of attorney or advance directive addresses a different planning question: who may act as your healthcare agent and what preferences you want recorded.

These documents can work alongside one another, but their roles should not be confused. State-law authority may make someone a HIPAA personal representative, so an agent does not always need a separate HIPAA authorization. Whether a separate authorization is useful depends on the intended access and circumstances.

Prepare a recipient-and-scope worksheet

Before discussing a document, make a short list for each person you may want to receive information. Note the relationship, the information or situation you have in mind, and any limits. This turns a general wish for someone to be “in the loop” into a practical set of choices to review.

• Recipient: identify the person by name and relationship.
• Purpose or scope: note the information or circumstances the person should be able to address.
• Duration: record when you intend the permission to begin and end, or what event should prompt a review.
• Limits and changes: list any information-sharing boundaries and whom to contact if your wishes change.

Review the related documents together

Compare the worksheet with any healthcare power of attorney or advance directive you already have. Check that the people and roles you identify are intentional, and that information access is not being mistaken for authority to make decisions. Tennessee’s advance directive form addresses an agent or alternate and healthcare preferences, and includes instructions about signing and sharing copies.

Dale Law Group, PLLC, offers HIPAA authorizations as part of its estate-planning services. The firm’s only listed office is in Murfreesboro, and it serves Tennessee; this page does not imply an office in Norris. Norris is in Anderson County, but a local probate court file is not the record that defines a HIPAA authorization or healthcare decision-making role.

Questions to bring to a planning discussion

Bring your recipient-and-scope worksheet and any existing healthcare documents. Useful questions include: Who should receive information, and for what purpose? Should access be limited by scope or duration? Does a healthcare agent already have authority that affects information access? How should the authorization fit with your advance directive, and what should you revisit if your intended recipient or preferences change?