HIPAA Authorizations in Prospect

Decide what access you want to provide

Start with the practical question: who should be able to receive information from your healthcare providers, and for what purpose? An authorization can be considered in terms of its recipients, the information it covers, and how long it should remain effective. A broad authorization may be convenient for someone who needs to coordinate information across providers; a more limited one may better fit a specific person or need. The right choice depends on your circumstances and preferences.

Think through whether the people you name should receive information in different situations, and whether your choices should change over time. Avoid treating a form as a substitute for explaining your preferences to the people you trust.

• List the people you are considering and the role each would have.
• Note the information or circumstances you want the authorization to address.
• Record any questions about how long access should continue or when you would want to revisit it.

Keep information access separate from healthcare authority

An authorization for disclosure of health information does not, by itself, appoint someone to make healthcare decisions for you. A healthcare power of attorney or advance healthcare directive addresses a different question: who may act as your healthcare decision-maker and what preferences you want documented.

HIPAA rules also recognize that a person with healthcare authority under applicable state law may be a personal representative. That means a separate information-sharing authorization is not always required for a person who has that authority. The documents should be considered together, rather than assuming that every named person has the same rights or responsibilities.

• Information access: who may receive covered health information.
• Healthcare authority: who may make decisions under the applicable healthcare document and law.
• Personal-representative status: a separate question that can depend on healthcare authority under state law.

Prepare a document and people checklist

Before discussing an authorization, assemble a short comparison sheet. For each person you may name, write down the information-access role you have in mind, whether that person is also named in a healthcare directive or power of attorney, and any limits or duration questions you want addressed. This makes it easier to spot mismatches—for example, a person you want informed but do not intend to appoint as a decision-maker.

Gather copies of any current healthcare power of attorney, advance healthcare directive, or existing HIPAA authorization. Check names, alternates, and stated preferences against your notes. Tennessee’s advance directive form includes an agent or alternate and healthcare preferences, along with instructions about signing and sharing copies; do not assume those provisions automatically answer every information-access question.

• Current healthcare directives and any existing authorizations.
• Names and contact details for intended recipients and any alternate.
• Questions about scope, duration, coordination with other documents, and who should receive copies.

Discuss the fit with your estate plan

Dale Law Group, PLLC offers HIPAA authorizations as part of its estate-planning services, including healthcare powers of attorney and advance healthcare directives. A review can focus on whether the people and roles across these documents match your intentions, rather than treating information access and decision-making authority as interchangeable.

Useful questions to bring include: What information should each person be able to receive? Should access be limited or continue for a particular period? Does an existing healthcare document already name someone whose authority may affect access? How should the authorization be coordinated with your directive and shared with the people who may need it?