HIPAA Authorizations in Toone

Choose access separately from decision-making authority

A person you trust may need updates or records without having authority to make healthcare decisions. Conversely, someone with healthcare authority under applicable law may qualify as your HIPAA personal representative; a separate authorization is not always required. The documents serve different purposes, so avoid treating information access and decision-making authority as interchangeable.

A healthcare power of attorney or advance healthcare directive addresses healthcare authority and preferences. A HIPAA authorization addresses disclosure of health information. Financial powers of attorney, trustees, and court-appointed guardians or conservators are different roles as well; the title of a document alone does not establish that it grants every kind of authority.

• Information access: identify the people who may receive health information.
• Scope: consider what information and types of records the permission should cover.
• Duration: decide how long the permission should remain effective, as appropriate for your plan.
• Healthcare decisions: review the separate document or legal role intended to address decisions and preferences.

Prepare a one-page access map

Before a planning conversation, make a simple list with four columns: person, intended role, information needed, and time period. For example, you might list one person to receive general updates and another to receive specified records. These are planning choices, not a prediction about what a particular provider will disclose or a substitute for the provider’s requirements.

Add a note beside each person explaining whether you intend that person to receive information only or also to have a healthcare decision-making role. Then compare that map with your healthcare power of attorney and advance directive. This makes mismatches easier to spot before documents are prepared or shared.

• List the names and contact details of intended recipients.
• Describe the information each person should be able to access, rather than assuming all recipients need the same scope.
• Note when access should begin and end, if you have a duration in mind.
• Identify the healthcare document or legal role that addresses decisions, if any.

Check the documents and sharing instructions

Gather any existing HIPAA authorization, healthcare power of attorney, advance directive, and provider forms you want considered. The Tennessee Advance Directive for Health Care form includes an agent or alternate and healthcare preferences, and provides instructions about signing and sharing copies. A provider may have its own process for receiving or using authorization documents; confirm current instructions with that provider.

For clients in Toone, the route information identifies Murfreesboro as Dale Law Group, PLLC’s only office. The firm serves Tennessee clients, but this page does not imply a Toone office or a local healthcare-records process.

• Check that names and contact details match across documents.
• Compare the intended recipients and their roles across the authorization and healthcare documents.
• Ask the provider what form or submission process it currently requires.
• Keep track of where copies have been shared so you can identify who may need an updated document if your plan changes.

Questions to resolve before preparing or updating an authorization

Consider whether one recipient should have broad access or whether different people should receive different information. Ask whether the authorization is intended to continue for a specific period, and how it should relate to your healthcare decision-maker and stated preferences. If someone already has authority under a healthcare document or applicable law, clarify what additional authorization—if any—is useful for your circumstances.

Dale Law Group, PLLC offers HIPAA authorization planning as part of its Tennessee estate-planning services. A planning discussion can focus on your intended recipients, scope, duration, existing healthcare documents, and the providers’ current document-sharing instructions.