Separate information access from decision-making authority
A HIPAA authorization can permit a named person to receive specified health information. It does not, by itself, appoint that person to make healthcare decisions. Healthcare decision-making authority may arise under applicable state law, so identify that role separately rather than treating an information-sharing form as a healthcare power of attorney or advance directive.
The roles can overlap: someone with healthcare authority may also need access to information, but do not assume that every decision-maker requires a separate HIPAA authorization. The right documents depend on the authority involved and the access you want.
Compare recipients, scope, and duration
Use three questions to shape your choices: Who needs access? What information should they be able to receive? How long should access last? A person coordinating care may need different information from someone you want to keep informed more generally. Naming a recipient does not require giving every recipient the same scope or duration.
Consider whether you want access to apply broadly or to be limited, and whether it should remain in place beyond a particular care or coordination need. These are planning choices to discuss when preparing or reviewing an authorization; do not assume that the document grants authority beyond the information-sharing purpose you intend.
- Recipient: list each person you are considering and the reason they may need information.
- Scope: note the information or records you want each person to receive.
- Duration: record whether you envision a limited period or continuing access, and what should prompt a review.
Prepare a one-page access map
Before a planning conversation, make a simple table with three columns: recipient, intended information access, and duration or review point. Add a note identifying whether each person is also named in a healthcare power of attorney or advance directive. This gives you a concrete way to spot mismatches—for example, someone who should receive updates but is not intended to make decisions, or a decision-maker whose information access should be clarified.
Bring existing healthcare documents and any authorization you already use. The Tennessee Advance Directive for Health Care form addresses an agent or alternate and healthcare preferences, with instructions about signing and sharing copies. Reviewing it alongside an authorization can help distinguish access to information from healthcare instructions without merging their purposes.
Questions to resolve before signing or revising
Ask who should receive information, whether different recipients should have different access, and how long each authorization should remain useful. Also ask how the authorization relates to your healthcare power of attorney or advance directive, and whether a person’s role has changed since those documents were prepared.
Dale Law Group, PLLC offers HIPAA authorization planning as part of its Tennessee estate-planning services. The firm’s office is in Murfreesboro; Atoka is a municipality in Tipton County, not a firm-office location.
Questions to bring to the discussion
Does a HIPAA authorization name my healthcare decision-maker?
No. An information-sharing authorization alone does not appoint a healthcare decision-maker. Healthcare authority and permission to receive information are distinct questions, although the same person may have both roles.
Should every person with healthcare authority sign a separate HIPAA authorization?
Not necessarily. State-law healthcare authority can make someone a HIPAA personal representative. Consider the person’s actual role and the information access you want rather than assuming a separate authorization is always required.
Discuss your next step with Dale Law Group
Begin with a brief, non-confidential overview. The firm will discuss your needs and appointment arrangements.
General information, not advice for a particular situation. Sending an inquiry does not create an attorney-client relationship.
