HIPAA Authorization for Elderly Parent: What Caregivers Need to Know

You called your mother's cardiologist to ask about her latest test results, and the receptionist told you they cannot share any information. You have been driving her to every appointment for two years. You manage her medications, handle her insurance paperwork, and coordinate her care across four different specialists. But without an applicable consent or authorization, providers may be unable to share details with you.

This is one of the most common and most preventable frustrations in eldercare. The legal authority to access a parent's medical information, discuss their care with physicians, and make healthcare decisions involves several distinct documents and provider processes. Most families do not realize these options exist — or that they may need more than one — until a crisis forces the issue.

Common Documents to Consider

There is no single document that covers everything. Each serves a different purpose, and gaps between them create the situations where caregivers get blocked.

1. HIPAA Authorization (Medical Records Release)

A HIPAA authorization can support ongoing information sharing with the people named in it. In the United States, ask each provider about its consent or authorization process; many providers use their own form. A signed authorization is not an automatic universal-release rule, and requirements can differ by provider and jurisdiction.

Without an applicable consent or authorization on file at a specific provider, that provider may limit what it shares with you even if other providers have granted access. HIPAA authorization does not give you decision-making power. It only supports information access.

2. Healthcare Proxy (Medical Power of Attorney)

A healthcare proxy — called a Medical Power of Attorney, Health Care Power of Attorney, or Healthcare Agent designation depending on the state — names an authorized medical decision-maker if your parent cannot decide independently. The document's activation and requirements vary by jurisdiction.

While your parent can make the relevant decision, you cannot override their decisions or direct their care. But having this document executed and on file before a crisis means you are prepared if one occurs.

3. Durable Power of Attorney (Financial)

A durable financial power of attorney lets you manage your parent's financial affairs — paying bills, managing insurance claims, handling Medicare paperwork, and accessing financial accounts. Many caregivers discover they need this when a parent is hospitalized and bills go unpaid because nobody else has authority to access their bank account.

4. Advance Directive / Living Will

An advance directive documents your parent's wishes about end-of-life medical treatment — resuscitation, mechanical ventilation, feeding tubes, and other interventions. This document speaks for your parent when they cannot speak for themselves, and guides both physicians and the healthcare proxy in making decisions consistent with what the parent wanted.

HIPAA Authorization vs. Healthcare Proxy: Key Differences

These two documents are frequently confused, but they serve entirely different functions.

Depending on your parent's wishes, jurisdiction, and provider process, you may need both. A healthcare proxy without a HIPAA authorization may leave you without the information needed to make decisions. A HIPAA authorization without a healthcare proxy supports information access but does not give you authority to act if your parent cannot make their own choices.

What If Your Parent Has Not Signed These Documents?

If your parent currently has the mental capacity to understand these documents, now is the time to get them signed. Ask each provider what signature, consent, or witness requirements apply to its authorization process. Healthcare proxies vary by state — some require witnesses, some require notarization, some require both.

If your parent has already lost capacity to sign legal documents, you face a harder path. The options are:

Court-supervised guardianship. If capacity is lost, a jurisdiction-specific substitute-decision-making or court process may be needed. Court-supervised guardianship can cost USD 3,000-12,000+ depending on the jurisdiction; timing and oversight depend on the case. It is expensive and invasive, which is why getting documents signed while your parent has capacity is so critical.

Professional standards and implied consent. Doctors can listen to a caregiver's concerns even when confidentiality rules limit what they share back. Relevant information may be shared under professional standards when the patient is present, does not object, and the information directly supports care. This is not a substitute for checking the provider's process.

International Variations

The legal framework varies significantly by country:

United Kingdom: Instead of HIPAA, the UK uses a centralized system. A Health and Welfare Lasting Power of Attorney (LPA), registered with the Office of the Public Guardian using Form LP1H, can authorize health and welfare decisions. Without an LPA, families may need to apply for a deputyship through the Court of Protection.

Canada: Each province has its own consent legislation and proxy designation forms. Ontario uses a Power of Attorney for Personal Care. British Columbia uses Representation Agreements (Section 7 or Section 9). What information can be shared and who may decide depends on provincial rules and the document used.

Australia: Each state and territory has its own legislation and terminology. Examples include an Enduring Guardian or Medical Treatment Decision Maker, alongside any applicable advance-care document.

Getting the Paperwork Done

The practical steps to secure legal authority:

1. Ask each provider about its consent or authorization process and use its form if required
2. Execute a healthcare proxy or medical decision-maker document using your jurisdiction's requirements
3. Execute a durable financial power of attorney (this typically benefits from an attorney's involvement)
4. Complete an advance directive using the applicable jurisdiction's form
5. File copies with the providers and other organizations that require them under their processes
6. Keep originals in an accessible location — not a safe deposit box that you cannot access in an emergency

The Medical Appointment Companion includes a Legal Authority Audit Worksheet that walks through which documents you have, which are missing, where copies need to be filed, and the specific requirements for your jurisdiction.