Choose access separately from decision-making authority
Start by identifying the people who may need to speak with your healthcare providers or receive your health information. Then distinguish that access from the authority to make healthcare decisions. A separate information-sharing authorization does not appoint a healthcare decision-maker.
A person who has healthcare authority under state law may qualify as a HIPAA personal representative. An authorization and a healthcare power of attorney or advance directive therefore serve different purposes, and one should not be assumed to replace the other.
Compare recipients, scope, and duration
A useful planning comparison is between broader access for a trusted person and narrower access tailored to a particular need. Consider whether each recipient should be able to receive all relevant health information or only information connected with a specific provider, situation, or purpose. Also consider whether permission should continue indefinitely or be limited in duration.
These choices should reflect how you expect the document to be used. For example, a person coordinating care may need different information access from someone you want involved only in a particular circumstance. The right scope depends on your preferences and circumstances; an authorization does not itself grant healthcare decision-making power.
Prepare a recipient-and-access worksheet
Before discussing documents, make a short worksheet with one row for each person you may want to authorize. For each, note the providers or types of information involved, the reason access may be useful, and your preferred duration or any limit you want considered.
Bring existing healthcare powers of attorney, advance directives, or other documents that identify agents or alternates. This helps you compare who may receive information with who may act as a healthcare decision-maker, and identify any mismatch you want to resolve.
Questions to resolve before preparing the authorization
Ask who should be able to request or receive information, whether access should be broad or purpose-specific, and when permission should end or be reconsidered. Ask how the authorization should coordinate with your healthcare agent and alternate, and how copies should be shared with the people and providers who may need them.
Dale Law Group, PLLC offers HIPAA authorization planning as part of its Tennessee estate-planning services. The firm’s only office is in Murfreesboro; Elgin is an unincorporated Census-designated place in Scott County, not a separate municipal government.
Questions to bring to the discussion
Does a HIPAA authorization name my healthcare decision-maker?
No. An information-sharing authorization alone does not appoint a healthcare decision-maker. Healthcare authority and permission to receive information are distinct; state-law authority may also make someone a HIPAA personal representative.
Should I authorize every family member to receive my health information?
That depends on whom you trust and what access you want each person to have. Consider recipients, scope, and duration individually, and compare those choices with the people named in your healthcare documents.
Discuss your next step with Dale Law Group
Begin with a brief, non-confidential overview. The firm will discuss your needs and appointment arrangements.
General information, not advice for a particular situation. Sending an inquiry does not create an attorney-client relationship.
