Start with the information-sharing decision
List the people or organizations you want involved in receiving health information, then consider what each needs to know. A family member may need updates, while another person may need information to help coordinate care. Those are different purposes and may call for different choices about scope.
Think about the information covered and how long the permission should remain useful. An authorization that is too narrow may not serve your intended purpose; one that is broader or longer-lasting than you want may share more than you intended. The appropriate choices depend on your circumstances and the document’s terms.
Separate access from healthcare authority
A HIPAA authorization permits information sharing; it does not, on its own, appoint someone to make healthcare decisions. A healthcare power of attorney or advance healthcare directive addresses a different role. Under HIPAA, state-law authority to make healthcare decisions can make someone a personal representative, so a separate authorization is not invariably required for an agent.
Keep the roles distinct when reviewing your plan: an information recipient, a healthcare decision-maker, and a financial agent may be different people. A power of attorney’s scope and limits depend on its terms; one document should not be assumed to grant every kind of authority.
Prepare a practical review sheet
Before discussing documents, make a short list with four columns: person or organization; information or purpose; intended duration; and whether that person should also have healthcare decision-making authority. Mark any uncertainty rather than guessing. This makes it easier to compare a limited information-sharing permission with a broader or longer-lasting one and identify where a separate directive may be relevant.
Gather existing HIPAA authorizations, healthcare powers of attorney, and advance directives, including copies you have shared. Note names and roles as written, any stated limits or duration, and where copies may be held. Tennessee’s advance directive form includes an agent or alternate and healthcare preferences, with instructions for signing and sharing copies.
Questions to resolve before finalizing
Ask whether the intended recipient needs information only, or should also be considered for healthcare decisions. Which records or purposes should be covered, and when should access end? If the named decision-maker cannot serve, is an alternate identified in the healthcare directive? Do the documents use consistent names and describe roles clearly?
Dale Law Group, PLLC offers HIPAA authorization planning as part of its estate-planning services. The firm’s office is in Murfreesboro and serves clients across Tennessee; Lynchburg is in Moore County. For local office information, UT CTAS lists separate Moore County court-office and Register of Deeds contacts at 196 Main Street, Lynchburg, but those listings do not establish where a healthcare document must be filed or whether any filing is required. Confirm current contact details before visiting.
Questions to bring to the discussion
Does a HIPAA authorization let someone make medical decisions for me?
No. It addresses access to health information, not decision-making authority by itself. A healthcare power of attorney or advance directive addresses healthcare decision-making. State-law authority may also make someone a HIPAA personal representative.
Does my healthcare agent always need a separate HIPAA authorization?
Not necessarily. HHS explains that state-law healthcare authority can make someone a HIPAA personal representative. Whether a separate authorization is useful depends on the circumstances and the documents involved.
Discuss your next step with Dale Law Group
Begin with a brief, non-confidential overview. The firm will discuss your needs and appointment arrangements.
General information, not advice for a particular situation. Sending an inquiry does not create an attorney-client relationship.
