Decide what access should accomplish
Start with the information-sharing problem you want to solve. You might want a trusted person to receive updates, review records, or help coordinate care. Decide who should be able to communicate with healthcare providers and whether that access should apply broadly or be limited to particular information or circumstances.
Then consider duration. Ask whether access should remain in place for a defined period or continue unless changed, and how your choices would work if your circumstances change. The right scope depends on your priorities; broad access may be convenient, while narrower access may better reflect your privacy preferences.
- List each intended recipient and the reason for that person’s access.
- Identify the information or care settings you want the authorization to cover.
- Write down when access should begin, end, or be reconsidered.
Keep information access separate from decision-making
An authorization to share health information does not, on its own, appoint someone to make healthcare decisions. State law can make a person with healthcare authority a HIPAA personal representative; a separate information-sharing authorization is not always needed for that role. The documents should be considered together, but they do different work.
A healthcare power of attorney and an advance directive address healthcare authority and preferences. Tennessee’s Advance Directive for Health Care form includes an agent or alternate and healthcare preferences. A financial power of attorney concerns a different role and should not be treated as healthcare authority. Identify the document and the authority it gives rather than assuming one document covers every purpose.
Prepare a one-page access map
Before discussing document language, prepare a simple access map. For each person, note the relationship, the information you want shared, any limits, and the intended duration. Add a separate column for whether that person is also named in a healthcare decision-making document. This makes mismatches visible—for example, naming someone to receive updates while separately considering who should make decisions if you cannot.
Bring existing healthcare directives, powers of attorney, and any current authorizations, along with the names and contact details of intended recipients. Do not assume that a recipient’s role in one document automatically gives that person every other kind of authority.
Questions to resolve before signing
Ask whether each recipient needs ongoing access or only access for a particular purpose; whether the authorization should cover all health information or a narrower scope; and how you want the authorization to fit with your healthcare agent and advance-care preferences. Also ask how copies should be shared with the people and providers who may need them, and what to revisit if you change a recipient or decision-maker.
Dale Law Group, PLLC offers HIPAA authorizations and related healthcare planning documents to clients in Tennessee, including Louisville. The firm’s office is in Murfreesboro; this page does not imply a Louisville office.
Questions to bring to the discussion
Does a HIPAA authorization let someone make healthcare decisions for me?
No. It addresses sharing health information, not appointment as a healthcare decision-maker. State-law healthcare authority can make someone a HIPAA personal representative, so consider the authorization alongside your healthcare power of attorney and advance directive.
Does my healthcare agent always need a separate HIPAA authorization?
No. A separate authorization is not always needed when state law makes the person with healthcare authority a HIPAA personal representative. The relevant authority and documents should be considered together.
Discuss your next step with Dale Law Group
Begin with a brief, non-confidential overview. The firm will discuss your needs and appointment arrangements.
General information, not advice for a particular situation. Sending an inquiry does not create an attorney-client relationship.