HIPAA Authorizations in Morrison

Separate information access from decision-making

Start by identifying the job you want each person to perform. A HIPAA authorization can permit disclosure of health information to named recipients within the authorization’s terms. It does not, on its own, appoint someone to choose treatment or otherwise act as your healthcare decision-maker.

A healthcare power of attorney or advance healthcare directive addresses a different role. State law may make a person with healthcare authority your HIPAA personal representative. That means a separate authorization is not automatically required in every situation. The documents should be considered together, rather than assuming that naming someone for one purpose gives them every kind of authority.

• Information recipient: may receive information covered by the authorization.
• Healthcare agent: may have decision-making authority under the applicable healthcare document and law.
• Personal representative: a status that can arise from healthcare authority under state law; it is not simply another name for an information recipient.

Choose scope and duration deliberately

Compare a focused authorization with a broader one by asking what practical conversations you want the recipient to be able to have. A narrowly drawn choice may identify a particular person or category of information; a broader choice may cover more information or more recipients. The right fit depends on your wishes and circumstances, not on an assumption that wider access is always better.

Consider duration separately from scope. Ask whether access should continue for a stated period, relate to a particular need, or remain available under the terms you choose. Also consider whether the authorization should identify limits or an end point. Do not assume that an authorization lasts as long as another planning document or grants authority to make decisions.

Prepare a recipient-and-purpose worksheet

Before discussing documents, make a simple list for each person you may want involved. Record the person’s name and contact information, the reason they may need information, the types of information you are considering sharing, and your intended duration or limit. Note separately anyone you want to serve as a healthcare agent or alternate under a healthcare directive.

This worksheet helps reveal mismatches: for example, someone may need updates but not be your intended decision-maker, or your intended agent may need access connected to that role. It also gives you a concrete way to compare a focused authorization with broader access without treating the two as interchangeable.

• List proposed recipients and the purpose of access.
• Identify information categories and any limits you want considered.
• Record your preferred duration or end point.
• Compare the list with your healthcare agent and alternate named in any directive.

Coordinate documents and ask practical questions

Bring the worksheet and copies of any existing healthcare power of attorney or advance healthcare directive to a planning discussion. Tennessee’s advance directive form addresses an agent or alternate and healthcare preferences, and includes instructions about signing and sharing copies. Consider whether the people and roles described across your documents still match your wishes.

Dale Law Group, PLLC offers HIPAA authorization planning alongside healthcare powers of attorney and advance healthcare directives. For a consultation about planning from Morrison, consider asking: Who should be listed as a recipient, and what information should each person be able to access? How should the authorization relate to my healthcare agent’s authority? What duration or limits express my wishes? Which people should receive copies, and how should I keep documents current?