A person with life-threatening crash injuries may be unable to speak, sign a form, access a portal, or explain who should receive medical information. Family involvement does not automatically establish the same authority for every decision, record request, insurance matter, or legal claim. The file should show which person is acting, the source and scope of that authority, and how each hospital, provider, insurer, or lawyer responded.

A family-access record should identify the patient, the person requesting information, the legal or patient-granted authority relied on, its scope, the provider’s response, and any unresolved limit.

Separate family involvement from formal authority

The U.S. Department of Health and Human Services explains that a personal representative under HIPAA is generally a person authorized under applicable law to act for the individual in health-care decisions. The scope of the person’s authority affects the protected health information the person may inspect or receive. HHS also recognizes that family members involved in care may receive some information in circumstances addressed by the Privacy Rule even when they are not the formal personal representative.

  • Patient name, date of birth, facility, account or medical-record number, encounter dates, and current contact restrictions
  • Requester’s name, relationship, contact information, identification supplied, role claimed, and exact information or decision requested
  • Health care power of attorney, court order, guardianship document, patient direction, provider determination, or another source of authority
  • Effective date, scope, conditions, limits, revocation or replacement, copy provided, person who reviewed it, and response

Read the health care document before describing the role

North Carolina’s statutory health care power-of-attorney form explains that a person can name an agent to make health-care decisions when the person cannot make or communicate those decisions. The executed document, its limitations, activation requirements, later revocation, and the patient’s present capacity require review. Do not assume that being listed as an emergency contact creates the powers described in a health care power of attorney.

Article 1B of Chapter 90 addresses informed consent and includes an ordered list of people who may consent to medical treatment for a patient who is comatose or otherwise lacks capacity to make or communicate health-care decisions. The statute concerns medical consent; it should not be described as automatically granting authority over every insurance, property, financial, or legal decision.

Create a provider-by-provider access log

  • Facility or practice, department, privacy contact, treating-team contact, portal, telephone number, and secure delivery method
  • Information requested, purpose, date range, urgency, records versus verbal update, authorization or authority document supplied, and date received
  • Access granted, limited, delayed, or denied; stated reason; review or correction procedure; and material actually delivered
  • Duplicate medical identity, changed representative, deceased-patient status, minor-patient issue, abuse or safety exception, court order, or another unresolved question

Keep medical, insurance, and legal authority separate

A person may have authority for health-care decisions without authority to sign an insurance release, settle a claim, dispose of a vehicle, endorse a payment, engage counsel for another adult, or act for an estate. Create separate rows for each requested action and the document relied on. If the patient later regains the ability to communicate, record the new instructions and the date recipients were notified.

The related guide to organizing ICU and critical-care records after a life-threatening injury addresses the clinical chronology and source documents. This page owns the separate family access and decision-authority record.

Rosensteel Fleishman Car Accident & Injury Lawyers provides information about North Carolina car-accident claims involving critically injured patients. The patient’s capacity, governing documents, provider determinations, law, and individual facts control each person’s authority.

Sources