HIPAA Authorizations in Gibson

Decide what access should accomplish

Start with the people you want involved and the practical reason each person may need information. Someone helping you coordinate care may need different access from a person you want informed about a particular issue. Avoid naming someone simply because they are a relative; consider whether you trust them to handle private information and whether they are likely to be available when needed.

Then define the intended scope. Consider whether the authorization should cover information generally or be limited by provider, type of record, or purpose. Ask how long the authorization should remain in effect and what process applies if you later want to change your choices. Those details can help make the document fit your circumstances rather than relying on assumptions about what it permits.

Compare information access with healthcare authority

A HIPAA authorization allows information to be shared within its terms. It does not, by itself, appoint someone to make healthcare decisions. Healthcare decision-making authority is a separate question, addressed through the relevant healthcare-planning documents and applicable law.

The roles are not always separate people or documents: state-law authority can make someone a HIPAA personal representative, so a person with healthcare decision-making authority does not automatically need a separate authorization. The key is to identify what authority you want each person to have, rather than assuming that permission to receive records also permits decisions—or that one document must always accompany another.

Prepare a clear access worksheet

Before a planning conversation, make a short worksheet with one row for each person you are considering. Record their name and contact information, the information you think they may need, the reason for access, and any limits you want to discuss. Note whether the person is also intended to have healthcare decision-making authority, but keep that question distinct from information access.

Bring any existing healthcare power of attorney or advance healthcare directive, along with copies you already have. Tennessee’s Advance Directive for Health Care form addresses an agent or alternate and healthcare preferences, and includes instructions about signing and sharing copies. Reviewing existing documents together can help identify where information-sharing choices and healthcare preferences should be coordinated.

• List each intended recipient and a backup, if appropriate.
• Write down the records, providers, or purposes you want to discuss, plus any limits.
• Gather existing healthcare-planning documents and note questions about duration or changing the authorization.

Questions to resolve before signing

Ask whether the proposed authorization matches the people and access you intend, whether its scope is broader than necessary, and how it works alongside your healthcare decision-making documents. Confirm what steps apply if your preferences change, and how copies should be shared with the people or providers who need them.

Dale Law Group, PLLC, offers HIPAA authorizations as part of its estate-planning services. A discussion can focus on the access you want and how to keep that choice distinct from the person you designate to make healthcare decisions.