HIPAA Authorizations in Whitlock

Decide what access you want to allow

Start by identifying the people you want to be able to receive information or speak with healthcare providers. Then consider the information each person should be able to access and whether the authorization should apply broadly or be limited to particular information or circumstances. The right choice depends on whom you trust and what you want them to be able to discuss.

Think through duration as well. A document intended for a temporary situation may call for a different approach from one intended to support ongoing communication. Be specific about the people and access you want to address, and ask how the document’s scope and duration are expressed.

• Who should be able to communicate with providers?
• What information should each person be able to access?
• Should access be limited by purpose, circumstance, or duration?

Keep information access separate from healthcare authority

A HIPAA authorization and a healthcare power of attorney or advance directive address different questions. The authorization concerns access to health information. Healthcare decision-making authority comes from the applicable healthcare document and governing law; an information-sharing authorization alone does not appoint a healthcare decision-maker.

The distinction is important, but it does not mean an agent always needs a separate HIPAA authorization. State-law healthcare authority can make someone a HIPAA personal representative. Consider the role you want each person to have rather than assuming that one document gives someone every kind of authority.

• Information recipient: may receive or discuss covered health information as authorized.
• Healthcare agent: may have decision-making authority under applicable state law and healthcare documents.
• Personal representative: HIPAA status may follow from state-law authority; it is not created by an information-sharing authorization alone.

Prepare a provider-and-recipient comparison

Before a planning conversation, make a simple table with four columns: person, provider or care setting, information to be shared, and intended duration. Add a note about whether the person is also named as a healthcare agent or alternate in your healthcare documents. This makes it easier to spot gaps, such as a person you want informed but do not intend to appoint as a decision-maker.

Tennessee’s Advance Directive for Health Care form addresses an agent or alternate and healthcare preferences, and includes instructions about signing and sharing copies. Review how those documents fit together rather than treating an authorization, an advance directive, and a healthcare power of attorney as interchangeable.

• List names as you want them identified and note any alternate.
• Mark which providers or care settings each person should be able to contact.
• Bring existing healthcare documents and any provider forms you have been asked to complete.

Questions to resolve before finalizing

Ask whether the proposed authorization matches the information and people you intend to include, and whether its duration fits your plans. Also ask how it coordinates with your healthcare power of attorney or advance directive, and what steps are needed to share the documents with the relevant providers.

Dale Law Group, PLLC offers HIPAA authorization planning as part of its Tennessee estate-planning services. For someone in Whitlock, an unincorporated Census-designated place in Henry County, the useful starting point is your own recipient-and-provider list—not a city office or municipal process.