Choose the access you intend to give
Start by naming the people or organizations you want to receive information, then consider which records or information they may need and how long that permission should apply. A narrowly described need may call for a different scope or duration than permission intended to support ongoing coordination.
Think through practical situations: should a named person be able to speak with your healthcare providers, receive copies, or both? Would you want an alternate recipient if your first choice is unavailable? These are planning questions, not a substitute for checking how the authorization will be used by the relevant provider.
Separate information access from decision-making authority
A HIPAA authorization concerns disclosure of health information. It is not the same as a healthcare power of attorney or an advance healthcare directive. Tennessee’s advance directive form addresses an agent or alternate and healthcare preferences; those subjects are distinct from permission to share information.
Under federal HIPAA guidance, state-law healthcare authority can make someone a personal representative. A separate information-sharing authorization alone does not appoint a healthcare decision-maker, and an agent with healthcare authority does not invariably need a separate HIPAA authorization. Review the roles together rather than assuming one document gives every kind of authority.
Prepare a one-page access map
Before a planning conversation, write down each intended recipient and the purpose of access. For each, note the information you want shared, whether the person should receive records or communicate with providers, and when the permission should end or be reconsidered. Mark any person you do not want to receive information, if relevant.
Bring existing HIPAA authorizations, healthcare powers of attorney, and advance directives, including any copies you have shared. Note who holds each document and which providers or other recipients have been given copies. This helps identify mismatches, such as a named information recipient who is not intended to make healthcare decisions.
Coordinate documents and ask focused questions
Dale Law Group, PLLC, offers HIPAA authorizations as part of its estate-planning services. Carolyn D. Dale can help you consider how an authorization fits with a healthcare power of attorney and advance healthcare directive, including the people named, the scope of access, and the intended duration.
Useful questions include: Who needs access to which information? Should the authorization cover a particular purpose or remain useful over time? How should it relate to the agent and alternate in my advance directive? Which providers or other recipients should receive copies, and how can I confirm their requirements? For Harrogate residents, the firm’s office is in Murfreesboro; the firm serves Tennessee.
Questions to bring to the discussion
Does a HIPAA authorization give someone authority to make healthcare decisions?
No. An information-sharing authorization alone does not appoint a healthcare decision-maker. Healthcare authority may arise under state law, and an advance directive can address an agent or alternate and healthcare preferences.
Does my healthcare agent always need a separate HIPAA authorization?
Not necessarily. HHS explains that state-law healthcare authority can make someone a HIPAA personal representative. Consider the authority already granted and the information access you want rather than assuming a separate authorization is always required.
Discuss your next step with Dale Law Group
Begin with a brief, non-confidential overview. The firm will discuss your needs and appointment arrangements.
General information, not advice for a particular situation. Sending an inquiry does not create an attorney-client relationship.
