HIPAA Access to Parent Medical Records in Nebraska

Why Nebraska Hospitals Won't Talk to You

You call Nebraska Medicine or CHI Health about your parent's lab results, and the nurse says she can't share anything. It feels personal, but it isn't. Under the federal Health Insurance Portability and Accountability Act, healthcare providers must protect protected health information and may require written authorization or other recognized authority before sharing a parent's records with an adult child. HIPAA does not automatically give an adult child access merely because they are family, and providers may limit what they disclose without that authority.

This creates a real problem during an eldercare crisis. You can't coordinate care, question medication changes, or advocate during hospital stays if you're locked out of the medical record.

Three Legal Pathways to Medical Record Access

Nebraska families have three distinct routes to access a parent's health information, and the right one depends on whether your parent still has cognitive capacity.

Standalone HIPAA Authorization

If your parent can still understand and sign documents, a standalone HIPAA authorization is the simplest path. Nebraska DHHS provides Form MLTC-34 (Medicaid Authorization for Disclosure of Information), which complies with federal requirements under 45 C.F.R. § 164.508. The form names specific individuals authorized to receive protected health information and can be tailored to cover all providers or limited to specific facilities.

The authorization must include the types of information covered, who can receive it, an expiration date or event, and your parent's signature. Unlike a power of attorney, a HIPAA release requires no notary or witnesses — just your parent's signature while they understand what they're signing.

File copies with every provider your parent sees: primary care, specialists, hospitals, pharmacies, and any home health agencies. Each provider needs their own copy on file before they'll share information with you.

Healthcare Power of Attorney

A Power of Attorney for Health Care under Neb. Rev. Stat. § 30-3408 gives broader authority than a standalone HIPAA release. Once activated — which happens when the attending physician determines in writing that your parent lacks capacity to make or communicate healthcare decisions — the healthcare agent can access all medical records, consent to or refuse treatment, choose providers, and make end-of-life decisions.

The healthcare POA must be signed by the principal in the presence of either a notary public or two adult witnesses. If witnessed, neither witness can be the designated healthcare agent or the attending physician. Employees of healthcare facilities where the parent receives care face restrictions unless they are relatives.

The critical advantage over a standalone HIPAA release: a healthcare POA survives incapacity. When your parent can no longer sign a new authorization or communicate wishes, the healthcare agent's authority continues.

Court-Ordered Guardianship

If your parent has already lost cognitive capacity without signing either a HIPAA authorization or healthcare POA, the family generally must seek court-appointed guardianship under Neb. Rev. Stat. § 30-2619. A guardian of the person has legal authority to access all medical records, make healthcare decisions, and communicate with providers on the ward's behalf.

This path requires filing a petition in county court, completing background checks, waiting for a court visitor evaluation, and attending an evidentiary hearing — timing varies by county and case complexity, and attorney fees can run from $2,000 to $5,000 or more plus filing costs. It's the most expensive and time-consuming route, which is exactly why getting a HIPAA release and healthcare POA signed while capacity exists matters so much.

Common Mistakes That Block Access

Assuming a financial POA covers medical records. A durable financial power of attorney under the Nebraska Uniform Power of Attorney Act covers property, banking, and business transactions. It gives zero authority over healthcare decisions or medical records. You need a separate healthcare-specific document.

Using a generic form from the internet. Multi-state HIPAA templates often omit Nebraska-specific language or fail to meet the requirements of 45 C.F.R. § 164.508. Providers can reject authorizations that lack required elements like a clear description of the information to be disclosed or an adequate expiration clause.

Not filing copies with every provider. A HIPAA authorization sitting in your filing cabinet doesn't help when the ER doctor at Bryan Health needs to discuss your parent's condition at 2 a.m. File copies proactively with every facility, pharmacy, and specialist your parent uses.

How to Set Up Access Before a Crisis

The strongest approach combines all three documents: a standalone HIPAA authorization for immediate access, a healthcare POA for decision-making authority when capacity is lost, and a living will to document end-of-life preferences. Execute all three while your parent can still understand and sign.

The Nebraska Power of Attorney & Guardianship Kit walks through each document with Nebraska-specific execution requirements, including which witnesses are prohibited, when notarization is required, and how to file with providers so access is in place before the crisis phone call comes.

See more Nebraska guides →