HIPAA Authorizations in Mercer

Decide what access should accomplish

Begin with the people you want involved and the practical reason they may need information. One person might need to coordinate communication while you are receiving care; another may need access for a different purpose. Consider whether your instructions should cover information broadly or be limited to particular providers, types of information, or circumstances.

Also consider duration. You may want permission to continue for a defined period or to remain in effect until you change it, if the form and applicable requirements allow. The right scope depends on your preferences and the form being prepared; avoid assuming that a broad authorization is necessary or that every provider will interpret a document identically.

• List each intended recipient and the reason they may need information.
• Note any information, provider, or circumstance you want to include or limit.
• Decide when access should begin and how you want duration or revocation addressed.

Keep information access separate from healthcare authority

An authorization permits information sharing within its terms. It does not, by itself, appoint someone to make healthcare decisions for you. A healthcare power of attorney or advance directive addresses a different role: identifying an agent and, in the Tennessee advance directive, recording healthcare preferences.

The roles are not interchangeable. Federal guidance explains that a person with healthcare authority under state law may be a HIPAA personal representative. That means a separate information-sharing authorization is not invariably required for an agent with applicable authority. The effect depends on the person’s legal role and circumstances; do not assume that naming someone on one document gives them every form of authority.

• Ask: Should this person receive information, make healthcare decisions if I cannot, or both?
• Review the authorization alongside any healthcare power of attorney or advance directive so names and intended roles are clear.

Prepare a one-page access plan

Before requesting or reviewing forms, create a simple comparison table with columns for recipient, purpose, information or providers covered, intended duration, and related decision-making role. Mark uncertainties rather than guessing. This gives you a concrete starting point for discussing whether one authorization or different instructions better fit your goals.

Bring the names and contact details you have for intended recipients, any existing authorization or healthcare documents, and notes about changes you may want. Check that the document’s recipient names, scope, and duration match your plan. Ask how copies should be shared with the people or providers expected to rely on it; Tennessee’s advance directive materials include instructions about sharing copies.

Questions to resolve before signing

Ask who may rely on the authorization, whether it covers the providers and information you have in mind, how long it remains effective, and how you can change or revoke it. If you have named a healthcare agent, ask how that authority relates to information access and whether the documents communicate your intentions consistently.

Dale Law Group, PLLC offers HIPAA authorization planning as part of its estate-planning services. The firm’s office is in Murfreesboro and serves Tennessee; Mercer is an unincorporated Census-designated place in Madison County, not a separate municipal government.