Understanding Your Healthcare POA and HIPAA Authorization
Marriage does not grant the access most people think it does. Two documents close the gap.
A woman is standing at the nurses’ station at Banner Desert at 2 a.m. Her husband had a stroke six hours earlier. She has been in the ER waiting room since the ambulance brought him in. She wants to know what his MRI showed. She wants to know whether the next 24 hours will determine whether he will recognize her again. She wants to know what the doctors are planning.
The nurse is sympathetic but firm. She cannot share any of it.
The woman says, “I am his wife.”
The nurse says, “I know. But under HIPAA, without an authorization on file, I am not legally able to release his information.”
The woman has been married to this man for thirty-one years. They share a bank account, a mortgage, three children, and a tax return. None of that is what HIPAA cares about.
Most married couples assume marriage gives them everything they need during a medical crisis. It does not. Two specific gaps trip families up, and both have a simple fix.
Healthcare Power of Attorney: Who Decides
A Healthcare Power of Attorney (HCPOA) gives someone trusted the legal authority to make medical decisions if the patient cannot speak for themselves.
Without one, doctors are left guessing. Or worse, they make decisions based on hospital policy rather than the patient’s values. For complex calls (surgery, end-of-life treatment, mental health interventions, transfer between facilities), hospitals often require this document in writing or they default to the most aggressive option.
A spouse has some authority by default for emergency and routine decisions. They do not have authority for everything. The HCPOA closes that gap.
HIPAA Authorization: Who Has Access
Different document, different problem. HIPAA Authorization gives someone the right to access medical information. Records, lab results, prognosis, treatment plans.
This is separate from the HCPOA. A spouse can be making decisions for the patient under the HCPOA and still be denied test results without a HIPAA Authorization. Federal law (HIPAA, the Health Insurance Portability and Accountability Act) blocks the disclosure by default. The hospital staff is not being difficult. They are following federal law.
The Combined Document
In most complete estate plans, the Living Will, Healthcare POA, and HIPAA Authorization are combined into a single document called an Advance Healthcare Directive. One signature, one binder, three documents bound together.
For details on the Living Will side of this combined document, see Understanding Your Living Will.
Choosing a Healthcare Agent
The right Healthcare POA agent should be:
Available, geographically and by phone, in a crisis
Calm under pressure, able to make decisions in an ICU waiting room
Aligned with the patient’s values, will not override Living Will preferences
Willing to advocate, comfortable pushing back on medical staff if needed
Not the sole financial beneficiary, to avoid any appearance of conflict of interest
Many people default to a spouse without thinking about whether the spouse meets these criteria. Sometimes an adult child, sibling, or close friend is the better choice, particularly if the spouse would be too emotionally overwhelmed to function in the role.
Backup Agents
Always name at least one backup. The primary agent might be unreachable, incapacitated themselves, or unable to serve when the moment comes. Without a backup, the document fails when it is needed most.
Care Preferences vs. Healthcare POA
Some plans include a separate Care Preferences document. It covers broader treatment philosophy beyond end-of-life, including:
Mental health treatment preferences
Pain management priorities
Religious or cultural considerations
Who should be notified during a hospitalization
Who should specifically NOT be involved
It is not legally binding the same way an HCPOA is, but it gives the agent enormous context for decisions the documents do not anticipate.
Updating and Distributing
Update after:
Divorce or separation
Death of the named agent
Major shift in values or health
Move to a different state (HCPOA reciprocity is generally strong, but state-specific documents are more bulletproof)
Distribute copies to:
The named agent and backup agent
The primary care physician
Any specialist managing a chronic condition
The hospital where the patient most commonly receives care
Final Thoughts
A medical crisis is not the moment to find out a spouse cannot get a status update. Or that no one has the legal authority to authorize the right treatment. These two documents, together, in writing, distributed in advance, close the gap before it opens.
The woman at Banner Desert eventually got the information she needed. Her oldest daughter, who happened to be a nurse, drove down from Anthem at 3 a.m. and signed in as a temporary point of contact through a verbal authorization her father had given two years earlier during an unrelated hospitalization. It worked because of an old note in a chart at a different hospital that someone happened to find. Most families do not get that kind of luck.
Her husband recovered. The first thing she did after he came home was call our office and ask for the documents she should have had the night of the stroke.
A free 20-minute consultation is available throughout this series. If a specific situation needs to be talked through, the link below opens a calendar booking. No pitch, no pressure.
For readers who already know the building blocks they need, the Starter Pack with add-ons can be configured directly.
The next article in the series, Understanding Your Financial Power of Attorney, arrives tomorrow morning.
