HIPAA Authorizations in Apison

Choose access separately from decision-making authority

An authorization can identify people permitted to receive health information and define the scope and duration of that permission. It does not, by itself, appoint someone to make healthcare decisions. A healthcare power of attorney or advance directive addresses different planning questions.

The distinction is not always a choice between documents. State-law authority to act as a healthcare personal representative may also affect HIPAA access. Do not assume that every healthcare agent needs a separate authorization—or that an information-sharing authorization gives its recipient decision-making power.

Compare the access you want to provide

Before preparing documents, compare the people who may need information with the decisions they may be authorized to make. A relative might need updates while you retain decision-making authority; someone else might be named in a healthcare directive to act if the relevant conditions arise. Those roles can be considered separately.

Then consider whether the permission should cover broad access or a narrower purpose, and whether it should continue indefinitely or end at a chosen point. The appropriate scope depends on your preferences and circumstances; do not assume that a broad authorization is required.

• Recipient: Who should be able to request or receive information?
• Scope: What information or purpose should the permission cover?
• Duration: When should access begin and end, if you want it limited?
• Authority: Is this person also intended to make healthcare decisions under a separate document?

Prepare a one-page access plan

Write down the names of proposed recipients, the information or purpose each needs, and any duration or limits you want considered. Mark separately who, if anyone, you intend to name as a healthcare agent or alternate in an advance directive. This simple comparison helps keep information access distinct from decision-making authority.

Bring existing authorizations and healthcare documents, if available, and note any instructions about sharing copies. Tennessee’s advance directive form includes an agent or alternate and healthcare preferences, with instructions concerning signing and sharing copies. Ask how an authorization should coordinate with those documents rather than assuming one replaces another.

Questions to resolve before signing

Consider whether each recipient needs the same access, whether a permission should be limited by purpose or duration, and how you want it handled if your healthcare decision-maker changes. Ask how the authorization relates to state-law personal-representative authority and to your healthcare power of attorney or advance directive.

Dale Law Group, PLLC offers HIPAA authorizations as part of its Tennessee estate-planning services. The firm’s office is in Murfreesboro; Apison is an unincorporated Census-designated place in Hamilton County, not a separate municipality.

• Who may receive information under this document, and what limits can it state?
• How does it fit with my healthcare power of attorney or advance directive?
• If someone has healthcare authority under state law, when might a separate authorization still be useful?
• How should I update or revoke access if my preferences change?