HIPAA Authorizations in Michie

Choose access separately from decision-making authority

Start with two questions: Who should be able to receive information about your care, and who should make healthcare decisions if you cannot make them yourself? The answers may be the same person, but they do not have to be.

A HIPAA authorization gives named recipients access to covered health information as described in the authorization. A healthcare power of attorney or advance directive addresses healthcare authority and preferences. Under HIPAA, state-law authority can make someone a personal representative; an information-sharing authorization alone does not do that. An authorized agent is not automatically required to have a separate HIPAA authorization in every situation.

• Information-sharing authorization: consider the people who need updates or records, and the information and time period to include.
• Healthcare decision document: identify the intended decision-maker and any alternate, and consider how your healthcare preferences are recorded.

Compare recipients, scope, and duration

Before naming someone, consider the purpose of access. A person who needs general updates may not need the same information access as someone helping coordinate care. Decide whether each recipient should have access to all relevant health information or a narrower scope, and whether access should last for a defined period or remain available as described in the document.

Check that the people and limits in your authorization make sense alongside your healthcare documents. If your intended decision-maker changes, or you want to add or remove a recipient, review the documents together rather than assuming one update changes the others.

• Who needs information, and for what purpose?
• Which information should each person be able to receive?
• How long should the authorization remain effective, and what should happen if your plans change?

Prepare a document comparison before drafting

A useful first step is a one-page comparison list. For each person you are considering, note their intended role, the information they should receive, any limits or time period you want considered, and whether you also intend them to make healthcare decisions. This helps reveal mismatches, such as naming someone to receive updates but not as a decision-maker, or naming a decision-maker without considering how they will get relevant information.

Gather any existing HIPAA authorizations, healthcare powers of attorney, and advance healthcare directives or living wills. Mark the names, alternates, stated scope, duration, and any preferences that appear in each document. Do not assume one document replaces, expands, or limits another without reviewing its terms.

• Names and contact details for proposed recipients, agent, and alternate, if any.
• Existing healthcare documents and any amendments or replacement documents.
• A short list of the information-sharing limits and healthcare preferences you want discussed.

Questions to resolve in your plan

Dale Law Group, PLLC offers HIPAA authorizations and related healthcare planning documents, including healthcare powers of attorney and advance healthcare directives. A planning discussion can focus on whether your intended recipients, scope, duration, and decision-making appointments fit together.

Consider asking: Should a recipient be able to receive all health information or only specified information? Should access be limited by time or purpose? Does the person you want making healthcare decisions have the role and information access you intend? If your choices differ across documents, which terms need clarification?