After a death, a hospital, physician, ambulance service, pharmacy, health plan, or other health-care organization may hold records that relatives want to understand. Relationship to the person who died does not automatically give every relative the same access. The requester, requested record, purpose, applicable authority, and organization holding the record all matter.

A post-death health-record request log should identify the decedent, record set, date range, covered entity, requester, authority source, proof submitted, request date, response, fee, withheld item, appeal or correction path, disclosure limit, and unresolved question.

Identify the requester and the source of authority

HHS guidance on the health information of deceased individuals explains that the HIPAA Privacy Rule protects a deceased person’s identifiable health information for 50 years after death. It also addresses disclosures to personal representatives and, in specified circumstances, to family members and others involved in care or payment before death.

  • Requester’s full name, relationship, contact information, role, purpose, and the exact information requested
  • Court appointment, letters, collector status, executor or administrator role, other legal authority, prior involvement in care or payment, or another asserted basis kept as separate categories
  • Document proving authority, issuing court or organization, file number, effective date, scope, expiration or limitation, and copy submitted
  • No assumption that beneficiary, next-of-kin, emergency contact, policyholder, payer, property owner, or family spokesperson status establishes every form of access

HHS guidance on personal representatives explains that a person authorized under applicable law to act for another in health-care decisions is generally treated as that individual for relevant Privacy Rule rights, subject to the scope of authority and stated exceptions. After death, the applicable state-law authority needs to be documented.

Define the record set instead of asking for “everything”

  • Emergency, inpatient, outpatient, physician, nursing, therapy, imaging, laboratory, pathology, pharmacy, ambulance, billing, payment, authorization, and correspondence categories
  • Facility, department, provider, account, encounter, date range, service date, discharge date, record format, and whether images or raw data are included
  • Medical record separated from billing record, itemized statement, claim form, explanation of benefits, payment history, refund, balance, and collection record
  • Missing facility, outside provider, separate professional bill, corrected note, addendum, image, test data, or later record listed as an exception

Track the request and response as separate events

  • Request form, cover letter, authority proof, identification, delivery method, date sent, recipient, confirmation, and reference number
  • Response date, records supplied, date range, format, page count, fee, certification, access problem, partial response, denial, or request for more proof
  • Follow-up question, corrected request, appeal or review path supplied by the organization, new authority document, and next review date
  • Original provider-supplied file preserved separately from a renamed, combined, annotated, redacted, printed, or shared copy

Keep estate and wrongful-death authority distinct

The North Carolina Judicial Branch estate guidance explains general estate roles and administration. Court appointment and the resulting documents can affect who may act for an estate. The proper role and process depend on the court record and circumstances.

North Carolina General Statute 28A-18-2 states that a wrongful-death action is brought by the personal representative or collector of the decedent. The authority to bring that action should not be confused with every possible right to receive health information, sign an authorization, control property, communicate with an insurer, or make an estate decision.

  • Estate role, wrongful-death claim role, health-record request authority, insurance role, property role, and family communication role maintained separately
  • Task, governing document, permitted action, limit, date confirmed, person acting, and completion evidence
  • Conflicting appointment, disputed role, minor beneficiary, restricted authority, missing original, or unclear scope escalated for matter-specific review
  • No person’s private information circulated merely because it appears in a record about the decedent

Reconcile medical and billing material without deciding legal value

  • Service date matched to encounter, provider, diagnosis or description as recorded, charge, adjustment, payer, payment, refund, balance, and source
  • Final-injury treatment separated from earlier or unrelated care without altering the provider’s chronology
  • Apparent duplicate, inconsistent date, missing encounter, separate professional bill, insurer denial, or unexplained balance listed for clarification
  • Medical cause, necessity, reasonableness, damages, distribution, and claim value reserved for qualified and matter-specific review

The related guide to building a family records plan after a fatal North Carolina car accident covers broader authority, crash, estate, digital, and deadline records. This page owns the narrower request and reconciliation process for medical and billing records after death.

Rosensteel Fleishman Car Accident & Injury Lawyers provides general information about wrongful-death claims in Charlotte. Record access and claim authority depend on the requester, organization, governing documents, applicable law, and specific purpose.

Sources