HIPAA Authorizations in Banner Hill

Choose access separately from decision-making authority

An authorization can be tailored around the people or organizations you want to receive information, the information covered, and the period for which access is intended. Consider whether one person should receive broad access or whether different people should receive narrower access—for example, one relative for appointment updates and another for records relevant to a particular aspect of care.

A healthcare agent’s authority comes from the applicable healthcare document and law, not simply from being named on an information-sharing authorization. Conversely, someone with healthcare authority under state law may be treated as a HIPAA personal representative. A separate authorization is not automatically required in every such situation. The documents serve different purposes, so review them together rather than assuming one replaces the other.

Compare the documents by the job they do

Use this comparison to identify what you need each document to accomplish:

• HIPAA authorization: identifies permitted information sharing, including intended recipients, scope, and duration.
• Healthcare power of attorney or advance directive: addresses who may act on healthcare decisions and may also record healthcare preferences.
• Financial power of attorney: concerns authority to act on financial matters; it is not a healthcare information authorization.
• A court-appointed guardian or conservator, trustee, or government-appointed benefit fiduciary has a distinct role. Do not assume those roles—or their documents—provide the same authority or information access.

Prepare a one-page access plan

Before drafting or revising documents, make a simple list for each person you may want involved: their name and relationship, the kinds of health information they should receive, the providers or settings the request concerns, and when you want the permission to begin and end. Note any information you want handled differently or any person you do not want included. This gives you a practical starting point for discussing scope and duration without making assumptions about what a provider will accept.

Then gather your existing healthcare power of attorney, advance directive, and any prior HIPAA authorization. Check whether the same people are named, whether the documents describe compatible roles, and whether an older authorization still reflects your wishes. Tennessee’s advance-directive form includes an agent or alternate and healthcare preferences, with instructions about signing and sharing copies; review your own documents and follow their applicable instructions.

Questions to resolve before you finalize

Ask: Who should receive information if I can speak for myself, and who should receive it if I cannot? Should access cover all health information or only specified information? Should it apply to all providers or a narrower group? How long should it last, and what should happen if my preferences change? Does my healthcare agent’s authority already address the intended situation, or is a separate information-sharing permission useful?

Dale Law Group, PLLC offers HIPAA authorization planning as part of its Tennessee estate-planning services. The firm’s office is in Murfreesboro and serves clients across Tennessee; Banner Hill is an unincorporated Census-designated place in Unicoi County, not a separate city government.