Start with the purpose of access
Think about why you want someone to receive health information. You may want a trusted person to help coordinate care, keep family members informed, or assist with a particular situation. The intended purpose can help you decide who should receive information and whether the authorization should be broad or limited.
An authorization is about information sharing; healthcare decision-making authority is a separate question. State-law healthcare authority can make someone a HIPAA personal representative. A separate information-sharing authorization alone does not appoint a decision-maker. An agent with healthcare authority does not automatically need a separate HIPAA authorization in every situation. The relationship between the documents depends on the person’s authority and circumstances.
Compare recipient, scope, and duration
Before preparing or updating an authorization, compare three choices: who may receive information, what information the authorization covers, and how long it is intended to apply. A limited authorization may fit a specific person or purpose; a broader authorization may be considered when you want continuity across more circumstances. Neither approach is right for everyone.
Consider whether you want one recipient or more than one, whether access should address a particular health matter or be wider, and what event or time period should mark the end of access. Make sure the document’s scope reflects your intention rather than assuming it grants authority to act, consent to treatment, or manage finances.
Prepare a one-page access plan
A useful first step is to write a short access plan to discuss with counsel. List each person you are considering, the information you expect them to receive, the reason they need it, and when you would want access to end or be reviewed. Note any situation in which you would want access to be narrower or unavailable.
Bring that plan alongside any existing healthcare power of attorney or advance healthcare directive. Tennessee’s Advance Directive for Health Care form addresses an agent or alternate and healthcare preferences, and includes instructions about sharing copies. Reviewing these documents together can help clarify which document addresses information access and which addresses healthcare choices.
Questions to resolve before signing
Ask whether the proposed recipient and scope match your purpose, whether the authorization should be coordinated with your healthcare documents, and how you can update your choices if your relationships or wishes change. If you are naming a healthcare agent, ask separately what authority that document is intended to give and how it relates to access to records.
Dale Law Group, PLLC offers HIPAA authorization planning as part of its estate-planning services. The firm is based in Murfreesboro and serves Tennessee, including Childers Hill and Hardin County. A planning discussion can focus on the access you want and how that choice fits with your other documents.
Questions to bring to the discussion
Does a HIPAA authorization make someone my healthcare decision-maker?
No. An information-sharing authorization alone does not appoint a healthcare decision-maker. Healthcare authority may arise under state law and is addressed separately from permission to disclose information.
If I have a healthcare agent, do I always need a separate HIPAA authorization?
Not necessarily. HHS explains that state-law healthcare authority can make someone a HIPAA personal representative, so a separate authorization is not always required. The answer depends on the agent’s authority and the circumstances.
Discuss your next step with Dale Law Group
Begin with a brief, non-confidential overview. The firm will discuss your needs and appointment arrangements.
General information, not advice for a particular situation. Sending an inquiry does not create an attorney-client relationship.
