HIPAA authorization

What it means

Federal privacy law restricts who may be told about a patient's care. An authorization is the patient's own written permission naming who may be told.

It is not the same as a health care proxy. A proxy lets somebody decide; an authorization lets somebody be told. A person can need one without the other — and an agent under a springing power of attorney may need the authorization simply to prove the power has taken effect.

It can be limited: to particular providers, particular information, or a particular period.

Why it matters

It is a frequent reason a family member is told nothing on the phone, and the easiest of all these documents to put in place.

Without it, an adult child may be unable to confirm that a parent was admitted, let alone discuss their care.

When you are likely to meet it

• When a hospital or clinic will not discuss a parent's care with you.
• When organizing documents before a planned procedure.
• When a power of attorney needs a doctor's certification to take effect.

Related terms

• Advance directiveA document recording your medical wishes, and naming who should speak for you if you cannot.
• Durable power of attorneyA power of attorney that keeps working after the person who signed it loses the ability to make decisions — which is usually the whole point of signing one.
• Health care agentThe person named in a health care proxy to make medical decisions when the patient cannot.
• Health care proxyA document naming somebody to make medical decisions for you if you cannot make them yourself.
• Springing power of attorneyA power of attorney that only takes effect once a stated condition is met — usually a doctor confirming the person can no longer manage their affairs.

Sahvelo guidance that uses this

• HIPAA authorization
• Medical information