HIPAA Access to Parent Medical Records in Nebraska

Why Nebraska Hospitals Won't Talk to You

You call Nebraska Medicine or CHI Health about your parent's lab results, and the nurse says she can't share anything. It feels personal, but it isn't. Under the federal Health Insurance Portability and Accountability Act, healthcare providers face fines up to $50,000 per unauthorized disclosure. Without written authorization from your parent, their medical team is legally prohibited from sharing diagnoses, treatment plans, test results, or even confirming that your parent is a patient.

This creates a real problem during an eldercare crisis. You can't coordinate care, question medication changes, or advocate during hospital stays if you're locked out of the medical record.

Three Legal Pathways to Medical Record Access

Nebraska families have three distinct routes to access a parent's health information, and the right one depends on whether your parent still has cognitive capacity.

Standalone HIPAA Authorization

If your parent can still understand and sign documents, a standalone HIPAA authorization is the simplest path. Nebraska DHHS provides Form MLTC-34 (Medicaid Authorization for Disclosure of Information), which complies with federal requirements under 45 C.F.R. § 164.508. The form names specific individuals authorized to receive protected health information and can be tailored to cover all providers or limited to specific facilities.

The authorization must include the types of information covered, who can receive it, an expiration date or event, and your parent's signature. Unlike a power of attorney, a HIPAA release requires no notary or witnesses — just your parent's signature while they understand what they're signing.

File copies with every provider your parent sees: primary care, specialists, hospitals, pharmacies, and any home health agencies. Each provider needs their own copy on file before they'll share information with you.

Healthcare Power of Attorney

A Power of Attorney for Health Care under Neb. Rev. Stat. § 30-3408 gives broader authority than a standalone HIPAA release. Once activated — which happens when the attending physician determines in writing that your parent lacks capacity to make or communicate healthcare decisions — the healthcare agent can access all medical records, consent to or refuse treatment, choose providers, and make end-of-life decisions.

The healthcare POA must be signed by the principal in the presence of either a notary public or two adult witnesses. If witnessed, neither witness can be the designated healthcare agent or the attending physician. Employees of healthcare facilities where the parent receives care face restrictions unless they are relatives.

The critical advantage over a standalone HIPAA release: a healthcare POA survives incapacity. When your parent can no longer sign a new authorization or communicate wishes, the healthcare agent's authority continues.

Court-Ordered Guardianship

If your parent has already lost cognitive capacity without signing either a HIPAA authorization or healthcare POA, the only remaining path is a court-appointed guardianship under Neb. Rev. Stat. § 30-2619. A guardian of the person has legal authority to access all medical records, make healthcare decisions, and communicate with providers on the ward's behalf.

This path requires filing a petition in county court, completing background checks, waiting for a court visitor evaluation, and attending an evidentiary hearing — a process that typically takes 60 to 90 days and costs between $2,000 and $5,000 in attorney fees plus filing costs. It's the most expensive and time-consuming route, which is exactly why getting a HIPAA release and healthcare POA signed while capacity exists matters so much.

Common Mistakes That Block Access

Assuming a financial POA covers medical records. A durable financial power of attorney under the Nebraska Uniform Power of Attorney Act covers property, banking, and business transactions. It gives zero authority over healthcare decisions or medical records. You need a separate healthcare-specific document.

Using a generic form from the internet. Multi-state HIPAA templates often omit Nebraska-specific language or fail to meet the requirements of 45 C.F.R. § 164.508. Providers can reject authorizations that lack required elements like a clear description of the information to be disclosed or an adequate expiration clause.

Not filing copies with every provider. A HIPAA authorization sitting in your filing cabinet doesn't help when the ER doctor at Bryan Health needs to discuss your parent's condition at 2 a.m. File copies proactively with every facility, pharmacy, and specialist your parent uses.

How to Set Up Access Before a Crisis

The strongest approach combines all three documents: a standalone HIPAA authorization for immediate access, a healthcare POA for decision-making authority when capacity is lost, and a living will to document end-of-life preferences. Execute all three while your parent can still understand and sign.

The Nebraska Power of Attorney & Guardianship Kit walks through each document with Nebraska-specific execution requirements, including which witnesses are prohibited, when notarization is required, and how to file with providers so access is in place before the crisis phone call comes.

See more Nebraska guides →