Three different things get confused here, and knowing them apart saves weeks.
Being told things by a doctor is the easiest. A provider can generally discuss care with a family member who is involved in it, as long as the patient agrees or does not object.
Getting copies of records and portal access normally requires signed paperwork on file with each provider.
Making decisions for someone who cannot make their own requires legal authority, usually a healthcare power of attorney.
Most caregivers discover the difference during a crisis, which is the worst time. Here is how to set it up early.
The four documents that matter
| Document | What it lets you do | When to set it up |
|---|---|---|
| HIPAA authorization or release | Receive records and talk with the provider's staff | At any routine visit, per provider |
| Healthcare power of attorney | Make medical decisions if they cannot | While they are well, with a lawyer or a state form |
| Portal proxy or caregiver access | See results, messages, and visit notes online | Per health system, usually a short form |
| Advance directive or living will | Records their own wishes about treatment | Alongside the power of attorney |
You may need all four. They do different jobs and one does not substitute for another.
HIPAA authorization
This is the workhorse. It is a signed form saying the provider may share information with you.
Things to know:
- It is usually per provider. Signing one at the cardiologist does nothing at the hospital. Every office needs its own on file.
- Each office has its own form. Ask the front desk for the "HIPAA authorization" or "release of information" form.
- You can make it broad. Some forms let you specify categories or date ranges. For ongoing caregiving, broad and open-ended saves repeat trips.
- The patient signs it. Which means it has to happen while they are able to.
- It can be revoked. The patient can withdraw it at any time, and that protection is the point.
Ask for extra blank copies. You will need them at every new specialist.
Healthcare power of attorney
This appoints you to make medical decisions if the person cannot make them themselves. It is a legal document, and the rules and forms vary meaningfully by state.
The person who holds it is generally recognized as the patient's representative, which means they can also access records and act on the patient's behalf for health information purposes. That makes it the strongest document on this list.
Two practical notes: it only takes effect under the conditions the document specifies, usually a determination that the person cannot make decisions for themselves. And a financial power of attorney is a different document that generally does not cover medical decisions.
Many states publish free forms. Some require witnesses or a notary. This is worth getting right, and worth a conversation with an elder law attorney if the situation is complicated.
Portal proxy access
This is the one caregivers under-use, and it is often the most useful day to day.
Most health systems allow "proxy" or "caregiver" access, which gives you your own login to see the patient's results, messages, appointments, and visit notes. It usually requires a short form signed by the patient, sometimes with ID.
Ask for it by name at each health system where they get care. Sharing a password instead is common and creates problems: it violates most portal terms of use, and the record of who accessed what becomes useless.
Advance directive
This records the person's own wishes about the care they would want. It guides you rather than empowering you, and it takes an enormous weight off the person who has to decide. Have the conversation while it is hypothetical.
What you can do without any paperwork
More than people assume, which is worth knowing when you are caught out.
A doctor can talk to you. Federal rules allow a provider to share information relevant to your involvement with a family member or friend, when the patient agrees, does not object, or when the provider reasonably infers the patient would not object. Sitting in the room with the patient is usually enough.
If the person cannot speak for themselves, a provider may use professional judgment to share what is in the patient's best interest with someone clearly involved in their care.
You can always give information. There is nothing stopping you from telling a doctor what you have observed at home. Do this even when you cannot receive anything back. A written summary handed over at the desk becomes part of the record.
You can ask general questions. How a medication works, what a condition typically involves, how to prepare for a procedure. None of that reveals anything about the patient.
The limit is what you can get in writing and what you can do without the patient present. That is where the paperwork earns its place.
Setting it up: a practical order
1. Have the conversation first. Before any forms, talk about what they want and how involved they want you to be. Some people want a full partner. Some want help with logistics and nothing else. Starting with paperwork feels like a takeover, and starting with the conversation makes the paperwork straightforward.
2. Do the legal documents together. Healthcare power of attorney and advance directive. Many states have free forms; a lawyer is worth it for anything complicated.
3. Make a provider list. Every doctor, the hospital, the pharmacy, the labs. This list is the map for everything else.
4. Work the list. At each one, ask for the HIPAA authorization form and, if they have a portal, the proxy access form. Sign both. Confirm they are on file.
5. Bring copies of the power of attorney to each office and ask them to scan it into the chart. Do this in advance, since finding it during an emergency is much harder.
6. Keep everything in one folder, with a digital copy you can reach from your phone. You will be asked for these documents at the least convenient moments.
7. Check it once a year. Providers change, systems merge, and forms occasionally vanish from charts.
Special situations
If they can no longer sign
Options narrow and get slower.
If a healthcare power of attorney already exists, use it. If none exists and the person can no longer make decisions, the path is usually guardianship or conservatorship through a court, which takes time, costs money, and varies by state. This is the reason to handle the paperwork early.
In the meantime, providers can still generally share what is necessary with someone clearly involved in the person's care, using their own judgment. Say plainly that you are the primary caregiver and ask what they can tell you.
Adult children and aging parents
The most common version of this. Turning 18 is the line: parents lose automatic access to their child's health information, and adult children have no automatic right to a parent's.
The best time is a routine visit while your parent is well. Frame it as preparation rather than decline. "I want to be able to help if you ever need me to, and it is much easier to sign this now."
Teenagers
Parents of children under 18 are generally their child's representative and can access records. There are exceptions. When state law lets a minor consent to a particular kind of care on their own, or when a provider has agreed to a confidential relationship with the teenager, parental access to those specific records can be limited. Rules vary considerably by state and by type of care.
Expect providers to spend part of a visit alone with an adolescent patient. This is normal practice.
Long distance
- Portal proxy access matters more than anything else on this list.
- Ask each office whether they will do phone or video visits with you present remotely.
- Identify one local person who can physically attend appointments, and get them authorized too.
- Ask each office for the direct line to a nurse rather than the main number.
Talking to offices
You will hear "HIPAA won't let me" from front desk staff, sometimes incorrectly. It is often shorthand for uncertainty.
Be specific. "I have a signed HIPAA authorization on file. Can you check the chart?" beats "I'm her daughter."
Ask for the medical records department. They know these rules well. The front desk frequently does not.
Bring your documents every time, at least until you know they are scanned in.
Get names and dates. When a form goes missing, knowing who you gave it to and when is what fixes it.
Ask what they need. "What do you need from me to be able to share this?" is more productive than arguing.
Common questions
How do I get access to my parent's medical records?
Have them sign a HIPAA authorization at each provider, and set up portal proxy access at each health system. If they can no longer sign, you generally need a healthcare power of attorney or court-appointed guardianship.
Does HIPAA stop a doctor from talking to me?
Often no. A provider can share information relevant to your involvement in someone's care when the patient agrees or does not object. Copies of records and access without the patient present are what require paperwork.
What is the difference between a HIPAA release and a healthcare power of attorney?
A HIPAA release lets you receive information. A power of attorney lets you make decisions. Caregivers usually need both.
Do I need a separate form for every doctor?
Usually yes for HIPAA authorization. A healthcare power of attorney is a legal document that applies broadly, though each office will still want a copy for the chart.
Can I use my parent's patient portal login?
It is better to request proxy access, which gives you your own login. Sharing credentials violates most portals' terms of use and makes the access record meaningless.
My parent will not sign anything. What can I do?
Their choice controls. You can still give information to their doctors, ask general questions, attend appointments if invited, and revisit the conversation later. Framing it around a specific practical problem often works better than a general request.
What happens when my child turns 18?
Your automatic access ends. If they want you involved, they can sign a HIPAA authorization and add you as a portal proxy. Many families do this at the same time as college paperwork.
