HIPAA Authorizations in Bells

Decide what access should accomplish

Start with the practical reason for sharing information. You may want a named person to communicate with healthcare providers or receive information relevant to your care. Consider whether access should cover health information generally or be limited to a particular purpose, and whether it should continue for a defined period or under other stated terms.

A useful comparison is broad access for a trusted recipient versus narrower access for a particular need. Broader wording may be convenient, while a narrower choice can make the intended boundaries clearer. Think about who should be able to receive information, what information they need, and whether more than one recipient should have access.

• Recipient or recipients, including any alternate you want identified.
• The information or purpose you intend the authorization to cover.
• The duration or other limits you want considered.

Information access is not healthcare authority

A HIPAA authorization addresses disclosure of health information. By itself, it does not appoint someone to make healthcare decisions for you. Under HIPAA, state-law authority to make healthcare decisions can make someone a personal representative; a separate information-sharing authorization alone does not create that role. An agent with healthcare authority should not automatically be assumed to need a separate HIPAA authorization.

Keep the documents and roles distinct. A Tennessee Advance Directive for Health Care addresses an agent or alternate and healthcare preferences, and includes instructions about signing and sharing copies. A HIPAA authorization focuses on information access. A power of attorney is another role-based document; its scope and limits matter, and it should not be treated as authority over every kind of decision.

Prepare a one-page access map

Before discussing wording, make a simple list for each proposed recipient: their name, the reason they may need information, the information or purpose involved, and the duration or limits you have in mind. Mark separately whether you also intend that person to have healthcare decision-making authority under an appropriate document. This makes it easier to spot when a request for information access is being confused with a request for decision-making power.

Gather any existing healthcare directive or authorization, and note whether the people named in those documents are still the people you want involved. Check names and contact details, and identify any differences between the access you want and the authority you have already assigned.

• Your recipient-and-purpose list, with proposed limits or duration.
• Copies of existing healthcare directives or authorizations to compare.
• Questions about who may receive information and who may make decisions.

Questions to resolve before signing

Ask whether the proposed authorization clearly identifies the intended recipients and scope, how its duration and limits work, and how it relates to any healthcare directive already in place. If you want someone to make healthcare decisions, ask which document addresses that authority rather than relying on information-sharing language alone.

Dale Law Group, PLLC offers HIPAA authorization planning as part of its Tennessee estate-planning services. The firm is located in Murfreesboro and serves Tennessee, including Bells. A focused discussion can help you compare the information access you want with the separate healthcare authority you may want to grant.