Patient Portal Proxy Access for Caregivers: How to Set It Up

Why Sharing a Login Is a Terrible Idea

Most caregivers start by using their parent's username and password to log into the patient portal. This works until it does not. Two-factor authentication sends a code to your parent's phone, which you may not have. A security review locks the account because the login location does not match the patient's home address. The portal flags simultaneous sessions from two devices as suspicious activity and resets the password. And in health systems that use audit trails, login activity under the patient's credentials creates a record that looks like the patient accessed their own records—which means any concerns you flagged or messages you sent appear to come from your parent, not from you as their caregiver.

Formal proxy access solves all of this. You get your own login credentials, your activity is logged under your name, and the health system knows exactly who is accessing the account and in what capacity.

How Proxy Access Works in Epic MyChart

Most major health systems use Epic's MyChart platform. The proxy access setup process is similar across systems, with minor variations in forms and verification procedures.

Step 1: Get the proxy enrollment form. Contact the Health Information Management (HIM) department or medical records office and request the "Adult-to-Adult Proxy Access" enrollment form. Some systems make this available online, but most still require a paper submission for adult patients.

Step 2: Gather your documents. You will need the patient's signed HIPAA Authorization, a copy of the healthcare power of attorney (if applicable), a completed proxy enrollment form signed by both the patient and the proxy, and a government-issued photo ID for the proxy (you).

Step 3: Submit and wait. Bring the packet to the HIM department in person or mail it via certified mail. Processing takes 5-14 business days depending on the health system. Once approved, you will receive an activation email with a link to create your own MyChart proxy account.

Step 4: Understand your access level. Proxy access may be full or tiered. Some systems give proxies read-only access to lab results but restrict messaging with providers. Others provide full access identical to the patient's own account. Ask the HIM department what level of access you are being granted and whether it can be expanded.

When Your Parent Has Cognitive Impairment

If your parent has dementia or another condition that prevents them from signing the proxy enrollment form, the process shifts to a legal representative pathway.

You will need documentation that establishes you as the patient's personal representative under HIPAA (45 CFR § 164.502(g)). This typically means a healthcare power of attorney that has been activated by a physician's written determination of incapacity, or a court-appointed guardianship order.

Submit the POA or guardianship paperwork to the HIM department along with the proxy enrollment form. The form may need to be signed by you in your capacity as the legal representative, not by the patient. Some health systems have a separate "diminished capacity" proxy pathway that handles this differently—ask the HIM department which process applies.

The health system may deny or limit proxy access to certain records if they contain psychotherapy notes, documents compiled for litigation, or if the provider believes that proxy access could endanger the patient. These exceptions are rare in standard geriatric care, but they exist in the regulations.

Proxy Access at Multiple Health Systems

Here is the part that frustrates most caregivers: proxy access does not transfer between health systems. If your parent sees a primary care physician at one health system and a cardiologist at another, you need to complete separate proxy enrollment at each one. The HIPAA Authorization may be the same document, but each system has its own proxy form, its own verification process, and its own processing timeline.

Create a checklist of every health system your parent uses and track the proxy enrollment status for each. Include the date you submitted paperwork, the confirmation receipt (if provided), the activation date, and the access level granted. This tracking prevents the scenario where you assume you have access at a specialist's system, schedule an appointment, and discover at the visit that your proxy enrollment was never processed.

What You Can Do Once You Have Access

With proxy access, you can review lab results as they are posted (often before the physician reviews them), read clinical notes from appointments, request prescription refills, send secure messages to the care team, view upcoming appointments, and download or print records for your medical binder.

Use the messaging feature strategically. A well-structured message between appointments—reporting a new symptom with your SBAR format, or confirming that a medication adjustment is working—gives the physician clinical data without consuming appointment time. Physicians consistently report that structured portal messages from organized caregivers improve continuity of care.

The Caregiver's Guide to Doctor Communication walks through the full legal authority and portal setup process, including the enrollment forms you need at each stage and how to coordinate proxy access with your HIPAA authorization and healthcare power of attorney so everything is filed at the same time, at every system, without gaps.