Can an Adult Child Access a Parent's Medical Records in DC?

HIPAA Blocks You by Default — Even as a Family Member

Being someone's adult child gives you no automatic right to their medical records. Under HIPAA's Privacy Rule, healthcare providers in the District of Columbia — MedStar Georgetown, George Washington University Hospital, Howard University Hospital, and every clinic and specialist in between — cannot share your parent's diagnosis, treatment plan, medications, or lab results with you unless one of several legal exceptions applies.

This hits hardest during a medical crisis. Your parent is admitted after a fall or stroke, and the hospital's care team won't tell you what's happening, what medications they've prescribed, or what the discharge plan looks like. You're sitting in the waiting room while decisions are being made without your input — not because the staff is being difficult, but because federal law ties their hands.

The Healthcare POA Is Your Primary Tool

The most direct way to unlock medical records access is a valid durable power of attorney for health care, executed under D.C. Code § 21-2205. Once your parent signs this document — with two qualifying witnesses, following DC's specific witness rules — you become their authorized healthcare agent. That status gives you the right to:

• Access your parent's complete medical records, including clinical charts, physician notes, and imaging
• Speak directly with attending physicians, surgeons, and specialists
• Consent to or refuse medical treatments on your parent's behalf (once they're certified as incapacitated)
• Coordinate care transitions between hospitals, rehab facilities, and home care

The healthcare POA should also contain an explicit HIPAA authorization clause — a statement that the principal authorizes all healthcare providers to release protected health information to the named agent. While the POA itself establishes agent authority, a standalone HIPAA release written into the document eliminates any ambiguity and makes hospital compliance departments more comfortable.

How to Submit the POA to a DC Hospital

Having the document is step one. Getting the hospital to act on it is step two. Here's the process:

1. Bring the original or a certified copy. Hospitals want to see the signed, witnessed document — not a photo on your phone. Carry the original and a photocopy. The hospital will retain the copy for the patient's medical file and return the original to you.

2. Go to the patient registration or admissions desk. Ask them to flag the healthcare POA in your parent's chart. The designation needs to be visible to every nurse, physician, and specialist who pulls up the record.

3. Follow up with the attending physician directly. Even after the paperwork is filed, individual doctors may not check the chart notes for POA status. Introduce yourself as the healthcare agent, reference the document on file, and ask to be included in all care discussions and discharge planning meetings.

4. Request the HIPAA release be noted in the electronic health record. Major DC hospital systems (MedStar, GW, Children's National) use electronic medical records. Ask the privacy officer or patient advocate to add your HIPAA authorization to the EHR so it travels with your parent across departments and facilities within the same health system.

What About Mental Health and Psychiatric Records?

DC has an additional layer of protection for mental health information. Under the District of Columbia Mental Health Information Act (D.C. Code § 7-1201 et seq.), psychiatric and psychological records have stricter disclosure rules than general medical records. Your healthcare POA should include explicit language authorizing access to mental health records — a general HIPAA release may not be sufficient.

This matters if your parent has a behavioral health history, is being evaluated for dementia-related psychiatric symptoms, or is receiving care from a psychiatric facility. Without the specific mental health authorization, providers can lawfully refuse to share these records even with a healthcare agent.

When There's No Healthcare POA in Place

If your parent is already incapacitated and never signed a healthcare POA, DC's statutory surrogate framework under D.C. Code § 21-2210(a) provides a fallback. Once the attending physician and either a qualified psychologist or psychiatrist certify in writing that your parent lacks decision-making capacity, an adult child becomes third in the surrogate hierarchy (after a court-appointed guardian or conservator and a spouse or domestic partner).

Statutory surrogacy gives you authority over healthcare decisions, but it does not provide the same clear records-access documentation as a named healthcare POA. If you're hitting resistance, request a meeting with the hospital's patient advocate and ask what authorization it requires.

For financial records — bank statements, investment accounts, tax documents — neither a healthcare POA nor surrogate status helps. You'll need a durable financial POA or a court-ordered conservatorship.

Get the Documentation Right Before You Need It

The worst time to figure out medical records access is from a hospital waiting room during a crisis. The DC Power of Attorney & Guardianship Kit includes both the healthcare POA with integrated HIPAA authorization and the financial POA — covering both the medical and financial sides of caregiving authority so you're not scrambling when the call comes.

See more District of Columbia guides →