HIPAA Authorization for an Elderly Parent in New Mexico

You drive your mother to her cardiologist appointment. The nurse calls her name, and you stand up to follow. "Are you the patient?" No. "Then you'll need to wait here." You have been managing her medications, scheduling her appointments, and driving her to every visit for two years — and you still cannot legally access her medical records.

This is the HIPAA wall, and it catches thousands of New Mexico caregivers off guard every year.

Why a Power of Attorney Alone Does Not Grant Medical Record Access

A standard Durable Financial Power of Attorney under New Mexico's Uniform Power of Attorney Act (NMSA 1978 §§ 45-5B-101 to 45-5B-403) authorizes you to manage bank accounts, pay bills, and handle property transactions. It says nothing about medical information.

HIPAA — the Health Insurance Portability and Accountability Act — treats medical records as a separate domain. Hospitals, clinics, pharmacies, and insurance companies are legally prohibited from sharing a patient's protected health information with anyone who is not a designated personal representative or an authorized individual under a valid HIPAA release.

A healthcare power of attorney under New Mexico's Uniform Health-Care Decisions Act (NMSA 1978 §§ 24-7A-1 to 24-7A-18) does grant medical decision-making authority, but its powers only activate when the parent's physician determines they lack capacity to make healthcare decisions. Until that determination happens, even a healthcare agent cannot override the parent's own privacy protections.

How to Get Proper HIPAA Authorization in New Mexico

The most reliable approach is a standalone HIPAA authorization form signed by your parent while they still have capacity. This form should specify:

• Who is authorized to receive information (you, by name)
• What information can be disclosed (all medical records, or specific categories like lab results, medication lists, and diagnostic imaging)
• Which providers are covered (list each hospital system, primary care clinic, pharmacy, and specialist by name — a generic "all providers" clause is often rejected)
• Duration — whether the authorization expires on a specific date or remains effective until revoked

New Mexico does not require notarization for a HIPAA authorization to be valid. However, many hospital systems — particularly Presbyterian Healthcare Services and UNM Health — have internal policies requiring either notarization or witness signatures before they will process a third-party release. Getting the form notarized ($10-$30 at most UPS Store or bank locations across New Mexico) eliminates this friction entirely.

The Healthcare Power of Attorney Alternative

If your parent has already executed an Advance Health-Care Directive under NMSA § 24-7A-4, the designated healthcare agent is automatically treated as the patient's personal representative under federal HIPAA regulations once the parent loses capacity. At that point, the agent can access all medical records, speak with physicians, and authorize or refuse treatment.

The gap is the period when your parent has capacity but needs help managing their care. During that window, only a signed HIPAA authorization (or the parent's direct verbal consent at each visit) provides legal access.

What to Do When a Hospital Refuses Your Authorization

New Mexico hospitals sometimes reject valid HIPAA authorizations for internal compliance reasons. If this happens:

1. Ask the privacy officer (not the front desk) to identify the specific deficiency in your authorization form
2. Request the facility's own HIPAA release form and complete it on-site with your parent
3. If your parent lacks capacity, present your healthcare power of attorney along with a physician's written determination of incapacity — at that point, you are the personal representative and HIPAA access is mandatory

If a facility continues to refuse access despite valid authorization, you can file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights, which enforces HIPAA compliance nationwide.

Building a Complete Medical Records Access Strategy

The most effective approach combines three documents: a Durable Financial Power of Attorney (for banking, insurance claims, and benefits), an Advance Health-Care Directive (for medical decisions when capacity is lost), and a standalone HIPAA authorization (for immediate medical record access while your parent still has capacity).

The New Mexico Power of Attorney & Guardianship Kit walks through all three documents with New Mexico-specific execution requirements, including which forms need notarization and which providers commonly require additional steps.

See more New Mexico guides →