Choose access separately from decision-making authority
Start by identifying the people who may need updates or records, such as a relative helping coordinate care. A HIPAA authorization can permit information sharing within its stated scope; by itself, it does not appoint someone to make healthcare decisions.
Healthcare decision-making authority is a separate question. Depending on applicable law, a person with healthcare authority may be a HIPAA personal representative. Do not assume that every agent must also have a separate HIPAA authorization, or that permission to receive information makes someone a healthcare agent.
Compare recipients, scope, and duration
For each proposed recipient, ask what information access would help with the role you expect them to perform. Consider whether the authorization should cover broad health information or a narrower purpose, and whether it should remain effective for a defined period or circumstance. The appropriate choices depend on your situation and the document’s terms.
Use this comparison to find gaps: a person may need updates but not decision-making authority; a healthcare agent may need authority to act, with information access considered separately; or you may want different people to handle different roles. Keep financial agents, trustees, and healthcare agents distinct rather than assuming one document grants every kind of authority.
- Recipient: Who should be able to receive information?
- Scope: What information or purpose should the authorization cover?
- Duration: When should access begin and end?
- Role: Is this person also intended to make healthcare decisions, or only receive information?
Prepare a one-page access map
Before discussing documents, make a simple list with one row for each person you may name. Record their intended role, the information they may need, the reason for access, and any event or date you want to use as a limit. Mark separately whether you intend to appoint that person as a healthcare decision-maker.
Bring the list together with any existing HIPAA authorizations, healthcare power of attorney, or advance healthcare directive. Note the document date, who is named, and any instructions about sharing copies. This makes it easier to spot inconsistent recipients, unclear scope, or a document that no longer reflects your preferences.
Coordinate the documents and sharing instructions
Tennessee’s Advance Directive for Health Care form addresses an agent or alternate and healthcare preferences, and includes instructions about signing and sharing copies. A HIPAA authorization serves a different information-access purpose. Consider these documents together so the people you name and the roles you intend are understandable, without treating one form as a substitute for another.
Dale Law Group, PLLC offers HIPAA authorization assistance along with healthcare powers of attorney and advance healthcare directives. The firm serves Tennessee and is based in Murfreesboro; Ducktown is in Polk County. Contact the firm to discuss your access map and how the documents may fit together.
Questions to bring to the discussion
Does a HIPAA authorization make someone my healthcare decision-maker?
No. An authorization for information sharing alone does not appoint a healthcare decision-maker. Healthcare authority and information access are distinct questions; a person with authority under state law may qualify as a HIPAA personal representative.
What should I bring to discuss an authorization?
Bring your access map, any existing HIPAA authorization, healthcare power of attorney, or advance directive, and your questions about recipients, information scope, duration, and decision-making authority.
Discuss your next step with Dale Law Group
Begin with a brief, non-confidential overview. The firm will discuss your needs and appointment arrangements.
General information, not advice for a particular situation. Sending an inquiry does not create an attorney-client relationship.