Separate information access from healthcare authority
A HIPAA authorization can permit designated people to receive health information. A healthcare power of attorney or advance healthcare directive addresses a different question: who may have authority to act on healthcare matters under the applicable document and law. Do not assume that naming someone to receive information also gives that person decision-making authority.
State-law healthcare authority can make someone a HIPAA personal representative. An information-sharing authorization alone does not appoint a healthcare decision-maker, and a person with healthcare authority does not invariably need a separate HIPAA authorization. The documents should be considered together rather than treated as interchangeable.
Choose recipients, scope, and duration
Start with the people who need access and the practical reason for it. You might want one person to receive information while you are managing care, or identify an alternate in case the first person is unavailable. Then consider whether the authorization should cover health information broadly or be limited in scope, and how long the permission should last.
A broader authorization may be convenient but gives access beyond a narrowly defined purpose. A limited authorization can better match a specific need, but may not cover later information-sharing needs. Duration is another independent choice: consider whether the permission should be tied to a particular purpose or remain in place longer. The right combination depends on your preferences and circumstances.
Prepare a concise access plan
Before discussing a document, make a one-page list with each proposed recipient, their relationship to you, the information-sharing purpose, the scope you want, and your preferred duration. Mark any alternate recipient and note whether that person is also named in a healthcare directive or power of attorney. This makes it easier to spot mismatches without assuming one document supplies authority that belongs in another.
Bring any existing HIPAA authorization, healthcare power of attorney, or advance healthcare directive for comparison. Note who holds copies and who should receive them if you update your plan. Tennessee’s Advance Directive for Health Care form includes an agent or alternate and healthcare preferences, with instructions about signing and sharing copies; those features do not make it a substitute for deciding separately what information-sharing permission you want.
Questions to resolve before signing
Ask whether each proposed recipient needs access to all health information or only information related to a particular purpose. Decide whether the same people should receive information and make healthcare decisions, or whether those roles should be assigned separately. Consider what should happen if your chosen person cannot be reached, and whether the authorization’s duration fits your wishes.
Dale Law Group, PLLC, offers HIPAA authorizations as part of its Tennessee estate-planning services. The firm’s office is in Murfreesboro; Strawberry Plains is an unincorporated Census-designated place in Jefferson County, not a separate municipality.
Questions to bring to the discussion
Does a HIPAA authorization make someone my healthcare decision-maker?
No. It can authorize information sharing, but does not by itself appoint a healthcare decision-maker. Healthcare authority may arise under state law and a separate healthcare document.
Does someone with healthcare authority always need a separate HIPAA authorization?
Not necessarily. State-law healthcare authority can make a person a HIPAA personal representative. Whether a separate authorization is appropriate depends on the role and the information-sharing plan.
Discuss your next step with Dale Law Group
Begin with a brief, non-confidential overview. The firm will discuss your needs and appointment arrangements.
General information, not advice for a particular situation. Sending an inquiry does not create an attorney-client relationship.
