HIPAA Authorizations in Gray

Decide what the authorization should accomplish

Start with the practical question: who should be able to receive information from your healthcare providers, and what information do you want to share? A useful plan considers each intended recipient, the kinds of information they may need, and how long the permission should apply. The right choices depend on your preferences and circumstances; naming someone does not necessarily mean that person needs access to every category of information.

Think about the difference between keeping someone informed and giving someone authority to act. A HIPAA authorization concerns information sharing. A healthcare power of attorney or advance healthcare directive addresses healthcare decision-making roles and preferences. These documents have different purposes and should be reviewed as a coordinated plan rather than treated as substitutes.

• List the people you want involved in receiving health information.
• For each person, consider the information they need and the intended duration of access.
• Note any information or circumstances you want to handle differently.

Compare information access with healthcare authority

A person’s role matters. A HIPAA authorization alone does not appoint a healthcare decision-maker. Conversely, state-law authority can make someone a HIPAA personal representative; an agent does not invariably need a separate authorization. The appropriate question is not simply whether to sign another form, but whether your existing documents and intended roles fit together.

A healthcare directive can identify an agent and alternate and express healthcare preferences. An authorization can address who may receive information. Review the names and roles across your documents so that a trusted person is not mistakenly treated as having authority that the document does not give them.

• Information recipient: may receive the information covered by the authorization.
• Healthcare agent: may have decision-making authority under the applicable healthcare document and law.
• Other fiduciary roles, such as trustee or financial power-of-attorney agent, are not interchangeable merely because the same person holds them.

Prepare a one-page information-sharing map

Before discussing documents, make a simple list with four columns: recipient, information to share, purpose, and intended duration. Add a note about any existing healthcare agent or alternate and where that role is described. This first-pass map helps reveal whether you want broad access for one person, narrower access for another, or different arrangements for different purposes.

Bring the map with copies of any HIPAA authorizations, healthcare powers of attorney, or advance healthcare directives you already have. Include the names and contact details you want reflected, any preferences about information access, and questions about how the documents work together. The Tennessee advance directive form includes instructions concerning document signing and sharing copies; follow the instructions applicable to the form you use.

Questions to resolve before signing

Ask whether each intended recipient is named clearly, whether the scope matches your wishes, and whether the duration makes sense for the purpose. Also ask how the authorization relates to your healthcare agent’s authority and whether your directive’s agent, alternate, and preferences remain consistent with your current plan.

Dale Law Group, PLLC offers HIPAA authorization planning as part of its Tennessee estate-planning services. Gray is an unincorporated Census-designated place in Washington County; the firm’s office is in Murfreesboro. For questions about healthcare information access and related planning, contact the firm to discuss your documents and goals.