HIPAA Authorizations in Finger

Separate information access from decision-making

An authorization can allow a person or organization you identify to receive health information within the authorization’s scope. By itself, it does not appoint that person to make healthcare decisions for you. Depending on state law, someone with healthcare decision-making authority may qualify as your HIPAA personal representative; do not assume that person always needs a separate HIPAA authorization.

Keep the roles clear when reviewing your plan: permission to receive information, authority to make healthcare decisions, and authority to manage finances are different questions. A healthcare power of attorney or advance directive addresses healthcare planning; a financial power of attorney concerns financial matters. The authority granted by any document depends on its terms and applicable law.

• Information access: Who may receive information, and what information is covered?
• Healthcare authority: Who may make decisions if you cannot make them yourself?
• Financial authority: Who may act on financial matters, and within what limits?

Compare recipient, scope, and duration

Before naming a recipient, consider the task you want them to help with. A person who needs information to coordinate a particular conversation may not need the same access as someone you intend to involve more broadly in your care. A broad recipient list can be convenient, but a narrower list may better reflect your privacy preferences.

Think through three choices together: the recipient, the information or purpose covered, and the duration. Also consider whether the authorization should address more than one provider or setting. The right fit depends on your wishes and circumstances; the document’s wording matters.

• More limited: identify a specific recipient and a defined information-sharing purpose.
• Broader: identify the people and scope you want available across relevant care conversations.
• For either approach: decide what duration you want and how the document should fit with your other healthcare-planning papers.

Prepare a one-page sharing plan

Bring a short worksheet to your planning conversation. List each intended recipient and their relationship to you; note what information you want them to receive and why; and record your preference about duration. Add any providers or care settings you already know should be considered, along with questions about how the authorization will be used.

Gather copies of any existing HIPAA authorization, healthcare power of attorney, or advance directive you want reviewed. Mark names that have changed, people you no longer want involved, and any apparent mismatch between your stated wishes and the documents. This makes it easier to discuss whether the documents work together without treating access and decision-making as interchangeable.

• Recipient and contact details
• Information or purpose to be covered
• Preferred duration and any limits you want to discuss
• Existing healthcare documents and questions about consistency

Questions to resolve before signing

Ask who should receive information, whether each recipient needs the same scope, and how the authorization should relate to your healthcare agent or advance directive. Ask what happens if your preferences change and how to communicate the document to the people and providers who may need it. Tennessee’s advance directive form includes an agent or alternate and healthcare preferences, as well as instructions about signing and sharing copies; those features do not make every healthcare-planning document the same.

Dale Law Group, PLLC offers HIPAA authorization planning as part of its Tennessee estate-planning services. The firm’s office is in Murfreesboro; it does not have an additional office in Finger. The firm can discuss your information-sharing goals and how they relate to healthcare planning documents.