HIPAA Authorizations in Morris Chapel

Start with the decision: access, authority, or both?

Think about the practical situations in which someone may need information: coordinating appointments, asking a provider about care, or helping you understand records. Then ask a separate question: who should make healthcare decisions if you cannot communicate? Naming someone to receive information does not, by itself, appoint that person as a healthcare decision-maker.

A person authorized under state law to act as your healthcare personal representative may have HIPAA rights in that role. A separate information-sharing authorization is not automatically required in every such situation. The documents serve different purposes, so avoid assuming one form replaces the other.

• Information access: Who should be able to receive information, and from which providers or sources?
• Healthcare authority: Who should make decisions, and who is the alternate if that person cannot serve?
• Coordination: Do your authorization and healthcare documents identify people consistently?

Choose a scope that fits how you expect help to work

A broad authorization may be convenient when a trusted person needs to coordinate across providers. A narrower one may better fit a limited purpose or a smaller group of recipients. Consider whether you want the document to cover particular people, types of information, or providers, and whether access should continue for a defined period or circumstance.

Scope and duration matter. Avoid treating permission to receive information as permission to make decisions, manage finances, or act in every setting. Those responsibilities depend on the relevant legal role and document.

• List each intended recipient and the reason that person may need access.
• Note any information or provider you want to include or exclude.
• Decide what duration or ending event you want to discuss when preparing the document.

Prepare a one-page access map

Before a planning conversation, make a simple access map: recipient, purpose, provider or record category, desired scope, and intended duration. Add the name of the person you have selected for healthcare decisions and any alternate, marking that role separately from information access. This concrete comparison can reveal gaps—for example, a decision-maker who may need records but is not listed as a recipient, or a recipient who should not make healthcare decisions.

Gather copies of any existing HIPAA authorization, healthcare power of attorney, or advance directive, along with notes about changes in your preferred recipients. Tennessee’s Advance Directive for Health Care form addresses an agent or alternate and healthcare preferences, and includes instructions concerning signing and sharing copies. Review your own documents together rather than assuming that updating one updates the others.

• Current names and contact details for proposed recipients and decision-makers.
• Existing healthcare forms and any provider-specific authorization you have used.
• Questions about who should receive information, how broadly, and for how long.

Questions to resolve before you sign or share

Ask whether the proposed authorization covers the people and information you intend, whether its duration matches your plan, and how it fits with your healthcare directive. Find out how to provide copies to the people and providers who need them and how to handle changes to your preferences. Do not assume that a financial power of attorney, trustee role, or other appointment automatically grants the same access or authority.

• Who may receive information, and for what purpose?
• Does the document grant access only, or does another document address decision-making?
• Which people or providers should receive copies, and how will you revisit the choices?