Ohio HIPAA Release for an Elderly Parent: What You Need to Access Medical Records

You call your parent's doctor to ask about their medication change. The receptionist says they can't share any information without a HIPAA authorization on file. You're the one driving your parent to every appointment, managing their prescriptions, and coordinating their care — but legally, you're a stranger.

Why a Healthcare POA Alone May Not Be Enough

A healthcare power of attorney gives you authority to make medical decisions when your parent loses capacity to make their own. But there's a gap: the healthcare POA is dormant until the attending physician formally determines your parent can't make informed choices.

Before that trigger point — while your parent is still cognitively competent but physically declining — you have no automatic right to access their medical records, billing information, or insurance communications. Many Ohio hospitals and clinics will refuse to share any protected health information with you, even when your parent is sitting right there asking them to.

A standalone HIPAA authorization form eliminates this gap entirely. It grants you access to medical records, billing, insurance, and clinical information regardless of your parent's capacity status.

What the HIPAA Authorization Covers

A properly executed Ohio HIPAA release can authorize access to:

• Medical records (office notes, lab results, imaging, hospital records)
• Mental health and substance abuse treatment records (requires specific authorization language)
• Pharmacy records and medication history
• Insurance and billing information
• Conversations with physicians, nurses, and specialists
• Discharge planning and care coordination information

The authorization can be as broad or narrow as the parent chooses. Most elder care situations call for a broad release — restricting access to specific providers or record types creates administrative friction when you're trying to coordinate care across multiple specialists.

Execution Requirements

HIPAA authorizations in Ohio must include:

• The patient's (your parent's) name and date of birth
• A description of the information to be released (or "all medical records" for broad access)
• The name of the person(s) authorized to receive the information
• An expiration date or event (many families use "upon revocation by the patient" rather than a fixed date)
• The patient's signature and the date of signing

Unlike the healthcare POA, there are no witness restrictions or notarization requirements for a HIPAA form. Your parent signs it, and it's valid. However, getting it notarized adds an extra layer of credibility with providers who might question the document.

The Practical Workflow

Execute the HIPAA authorization at the same time as the healthcare POA and financial POA — it takes five minutes and prevents weeks of frustration later. Then distribute copies to:

• Every physician and specialist your parent currently sees
• The local hospital's medical records department
• The pharmacy
• The health insurance company
• Any home health agencies or nursing facilities involved in care

Keep the original with your other legal documents, and carry a copy when you accompany your parent to medical appointments or visit the emergency room.

When Your Parent Already Lacks Capacity

If your parent can no longer sign a HIPAA authorization, your healthcare POA (once activated by a physician's determination of incapacity) generally grants you the right to access medical records as part of your decision-making authority. But "generally" does the heavy lifting in that sentence — some providers will still ask for a separate HIPAA form.

At that point, your options narrow to producing the activated healthcare POA and, if the provider still refuses, having the physician document the activation in writing and provide it to the records department.

The path of least resistance: execute both documents now, while your parent can still sign.

The Ohio Power of Attorney & Guardianship Kit includes the HIPAA authorization form alongside the healthcare POA and financial POA, so you can execute all three in a single session and distribute them to every provider on your parent's care team.

See more Ohio guides →