The HIPAA Privacy Rule can get in your way
By Susan Feinstein
Last updated: August 09, 2018
Early one October morning, Sheri E. Warsh, a mother of three from Highland Park, Ill., stepped out of the shower to a ringing phone. On the other end, her 18-year-old son’s college roommate delivered terrifying news. Her son—270 miles away at the University of Michigan—was being rushed by ambulance to an emergency room in severe, unrelenting chest pain. “I was scared out of my mind, imagining the worst,” Warsh said.
In a panic, she called the ER for details about the medical emergency. What she got instead was a rebuff from a nurse. “She asked me how old my son was, and when I said 18, she told me I had no right to talk to the doctor,” Warsh said.
Was the nurse acting within her scope? In fact, she was. The ER chose not to disclose the son’s medical condition due to the Privacy Rule of the Health Insurance Portability and Accountability Act, or HIPAA.
“Once a child turns 18, the child is legally a stranger to you,” says Jane F. Wolk, a trusts and estates attorney practicing in New York and New Jersey, referring to the legal age in almost all states. (In a few, the legal age is older.) “You, as a parent, have no more right to obtain medical information on your legal-age son or daughter than you would obtain information about a stranger on the street.” And that’s true even if a young adult is covered under his or her parents’ health insurance, and even if the parents are paying the bill.
A medical provider can choose to disclose protected health information to a family member, even without the patient’s authorization, if, in her professional judgment, it serves the best interest of the patient. But providers often come down on the side of patient privacy, particularly if they have never met the family member.
How to Ensure You’ll Have Access to Your Child
In this case, Warsh’s son didn’t intend to keep his parents in the dark during his medical emergency. In the midst of cardiac-care chaos, he was in too much pain to give authorization. But a simple signed legal document (or two, in some states) would have smoothed the way.
“Nobody is talking about this, even after I went to so many college meetings and orientations,” Warsh said. The irony of her story is that Warsh is an attorney specializing in trusts and estates as a partner at a Chicago law firm. “Now in my practice, I have made it my goal to educate parents on what they need to do.”
Important Documents
Moms and dads who still think of themselves as protectors and advisers, even after their children become legal adults, often don’t consider the real-world implications of that milestone birthday. They and their children need to think about the unthinkable in advance. Three forms—HIPAA authorization, medical power of attorney, and durable power of attorney—will help facilitate the involvement of a parent or other trusted adult in a medical emergency.
If a student attends college out of state, fill out the forms relevant to the home state and school state to avoid any challenges. If the school has its own form, sign that one too, Warsh says. “When the doctor or medical institution sees it, you want them to be familiar with it and recognize it,” she says.
Once the forms are completed, it’s a good idea to scan and save them so they’re readily available on a smartphone or home computer.
You don’t need a lawyer to do this. Many websites have forms that can be downloaded. But a lawyer’s involvement can benefit in making sure you’re using the right form, explaining it, and advocating on your behalf in case something goes wrong.
HIPAA authorization: A signed HIPAA authorization is like a permission slip. It allows healthcare providers to disclose your health information to anyone you specify. A stand-alone HIPAA authorization (not incorporated into a broader legal document) doesn’t have to be notarized or witnessed. This document alone, signed in advance by her son, would have sufficed for Warsh to get information from the hospital treating him. Young people who want parents to be involved in a medical emergency but fear disclosure of sensitive information need not worry; HIPAA authorization doesn’t have to be all-encompassing. Young adults can stipulate not to disclose information about sex, drugs, mental health, or other details they might want to keep private.
Medical power of attorney: In signing a medical POA, you appoint an “agent” to make medical decisions on your behalf in case you are incapacitated and can’t make such decisions for yourself. Each state has different laws governing medical POAs and therefore different legal forms. In many states, HIPAA authorization is rolled into the standard medical POA form. Whether the medical POA requires the signature of a witness or notary varies by state.
For the sake of clarifying often-used terms: A medical POA sometimes goes by other names, such as healthcare power of attorney, designation of healthcare proxy, or durable power of attorney for health care. It is one type of advance directive. The other type is a living will, which specifies your wishes with regard to interventions in life-or-death scenarios in case you are unable to do so. In many states, the language for a living will is also incorporated into a hybrid document that includes the medical POA and HIPAA release.
Durable power of attorney: As an additional step, young adults might consider appointing a durable power of attorney, enabling a parent or other designated agent to take care of business on their behalf. If the student becomes incapacitated or if he or she is studying abroad, the durable power of attorney would be able to, for example, sign tax returns, access bank accounts, and pay bills. Durable POA forms vary by state. In some states the medical POA can be included in the durable POA form. “The durable power of attorney is sweeping,” Wolk says. “You do not want to give it to someone you do not trust.”
Article link: https://www.consumerreports.org/health-privacy/help-your-college-age-child-in-a-medical-emergency/