HIPAA Authorization for Elderly Parent: What Caregivers Need to Know

You called your mother's cardiologist to ask about her latest test results, and the receptionist told you they cannot share any information. You have been driving her to every appointment for two years. You manage her medications, handle her insurance paperwork, and coordinate her care across four different specialists. But without the right paperwork, none of that matters — the law says they cannot talk to you.

This is one of the most common and most preventable frustrations in eldercare. The legal authority to access a parent's medical information, discuss their care with physicians, and make healthcare decisions involves several distinct documents. Most families do not realize these documents exist — or that they need more than one — until a crisis forces the issue.

The Four Documents Every Caregiver Needs

There is no single document that covers everything. Each serves a different purpose, and gaps between them create the situations where caregivers get blocked.

1. HIPAA Authorization (Medical Records Release)

A HIPAA authorization form gives you the legal right to access your parent's medical records and receive information about their care. Each healthcare provider has their own version of this form. It must be signed by your parent (or their legal representative) and filed at every doctor's office, hospital, pharmacy, and specialist your parent sees.

Without a HIPAA authorization on file at a specific provider, that provider cannot share information with you — even if other providers have granted access. HIPAA authorization does not give you decision-making power. It only permits information access.

2. Healthcare Proxy (Medical Power of Attorney)

A healthcare proxy — called a Medical Power of Attorney, Health Care Power of Attorney, or Healthcare Agent designation depending on the state — gives you the legal authority to make medical decisions on your parent's behalf if they become unable to make decisions for themselves. This document activates only when a physician determines your parent lacks decision-making capacity.

While your parent has capacity, a healthcare proxy is dormant. You cannot override their decisions or direct their care. But having this document executed and on file before a crisis means you are prepared if one occurs.

3. Durable Power of Attorney (Financial)

A durable financial power of attorney lets you manage your parent's financial affairs — paying bills, managing insurance claims, handling Medicare paperwork, and accessing financial accounts. Many caregivers discover they need this when a parent is hospitalized and bills go unpaid because nobody else has authority to access their bank account.

4. Advance Directive / Living Will

An advance directive documents your parent's wishes about end-of-life medical treatment — resuscitation, mechanical ventilation, feeding tubes, and other interventions. This document speaks for your parent when they cannot speak for themselves, and guides both physicians and the healthcare proxy in making decisions consistent with what the parent wanted.

HIPAA Authorization vs. Healthcare Proxy: Key Differences

These two documents are frequently confused, but they serve entirely different functions.

You need both. A healthcare proxy without a HIPAA authorization means you can theoretically make decisions but may be blocked from accessing the information needed to make them. A HIPAA authorization without a healthcare proxy means you can see the records but have no authority to act if your parent cannot make their own choices.

What If Your Parent Has Not Signed These Documents?

If your parent currently has the mental capacity to understand these documents, now is the time to get them signed. Most states allow HIPAA authorizations to be witnessed rather than notarized. Healthcare proxies vary by state — some require witnesses, some require notarization, some require both.

If your parent has already lost capacity to sign legal documents, you face a harder path. The options are:

Court-appointed guardianship. A court can appoint you as guardian with authority over medical decisions. This process typically costs between $3,000 and $12,000 in legal fees, takes several months, and requires ongoing court oversight. It is expensive and invasive, which is why getting documents signed while your parent has capacity is so critical.

Physician discretion under existing law. Even without formal authorization, physicians can listen to a caregiver's concerns — they simply cannot share information back. If your parent is present and does not object, many providers will allow you to participate in the conversation under implied consent. However, this varies by provider and creates an unreliable system.

International Variations

The legal framework varies significantly by country:

United Kingdom: Instead of HIPAA, the UK uses a centralized system. A Health and Welfare Lasting Power of Attorney (LPA) registered with the Office of the Public Guardian covers both information access and decision-making authority. Without an LPA, families may need to apply for a deputyship through the Court of Protection.

Canada: Each province has its own consent legislation and proxy designation forms. Ontario uses a Power of Attorney for Personal Care. British Columbia uses Representation Agreements (Section 7 or Section 9). These provincial forms typically combine information access and decision-making authority into one document.

Australia: Each state and territory has its own legislation. Most use an Enduring Power of Attorney that covers both financial and health decisions, plus a separate Advance Health Directive.

Getting the Paperwork Done

The practical steps to secure legal authority:

1. Download your state's HIPAA authorization form (each provider also has their own — ask at the front desk)
2. Execute a healthcare proxy using your state's statutory form (many state attorney general or health department websites provide free templates)
3. Execute a durable financial power of attorney (this typically benefits from an attorney's involvement)
4. Complete an advance directive using your state's form
5. File copies of all documents with every healthcare provider, the hospital, the pharmacy, and your parent's attorney
6. Keep originals in an accessible location — not a safe deposit box that you cannot access in an emergency

The Medical Appointment Companion includes a Legal Authority Audit Worksheet that walks through which documents you have, which are missing, where copies need to be filed, and the specific requirements for your jurisdiction.