HIPAA Release: Estate Plan Access 2026

Short answer: A HIPAA release is a signed authorization that lets your doctors and hospitals share your medical information with the people you name, typically your spouse, adult children, or agent under a health care power of attorney. Without one, a hospital can lawfully refuse to tell your own family what is wrong with you or how treatment is going. It is a short document, but a complete estate plan is not finished without it.

What is a HIPAA release, exactly?

HIPAA is the federal law that governs how health care providers and insurers handle your medical records. A HIPAA release, sometimes called a HIPAA authorization, is a separate document you sign that names specific people and gives them permission to see your protected health information. It does not give anyone authority to make medical decisions for you. It only unlocks access to information: test results, diagnoses, treatment notes, and conversations with your care team.

Why does a HIPAA release matter in an estate plan?

Most estate plans focus on who inherits what and who makes decisions if you cannot. A HIPAA release solves a narrower, more immediate problem: who gets to talk to the doctor. If you are hospitalized and no release is on file, a provider may decline to discuss your condition even with your spouse or adult child, simply because federal privacy rules default to silence unless you have authorized disclosure. That silence can delay care, create confusion at the worst possible moment, and leave your family locking horns with hospital staff instead of focused on you.

A properly signed release removes that friction. It lets the people you trust get real answers quickly, coordinate with physicians, and step in for the decisions your health care power of attorney authorizes them to make.

How is a HIPAA release different from a health care power of attorney?

These two documents work together but do different jobs. A health care power of attorney (sometimes part of an advance health care directive) names an agent and gives that agent authority to make medical decisions on your behalf if you cannot make them yourself. A HIPAA release does not grant decision-making authority at all. It only grants access to information.

You can have one without the other, and it causes problems either way. An agent with decision-making authority but no HIPAA release may be legally empowered to decide and still get stonewalled when asking for the records needed to decide well. A family member with a HIPAA release but no decision-making authority can see your chart but cannot direct your care. A complete plan includes both, drafted to work together rather than as an afterthought.

What should a HIPAA release cover?

A well-drafted release should name each authorized person specifically rather than relying on vague categories like “my family.” It should state plainly that the authorization covers the full range of protected health information, not just a single diagnosis or hospital stay, so your agent is not stuck asking a provider to interpret whether a particular record falls inside or outside the release. It should also account for what happens if your first-named contact is unavailable, by naming a backup.

Because the people you trust with your finances are not always the same people you trust with medical information, review who is named on your HIPAA release separately from who holds your other powers of attorney. Some clients name the same person for everything. Others deliberately split the roles.

Who should be named on a HIPAA release?

Think through who would actually be calling the hospital, not just who you love most. A spouse is an obvious choice, but adult children who live nearby, a sibling who handles paperwork well, or a close friend who knows your medical history can all be worth naming alongside or instead of a spouse. If you already have a health care agent named in an advance directive, that person should almost always be on the HIPAA release too, since being authorized to decide but blocked from seeing the chart defeats the purpose of naming them at all.

It also helps to think about facilities, not just people. If you regularly see specialists outside your primary hospital system, or you split time between two homes and two sets of providers, say so when the document is drafted so it is not narrowly read to cover only one clinic.

Can a HIPAA release be changed or revoked?

Yes. As with most estate planning documents, you can revoke or replace a HIPAA release at any time while you have capacity to do so, and it is worth revisiting after a divorce, a falling out, a death, or any other change in who you actually want in the room. An outdated release naming an ex-spouse or an estranged relative is worse than no release at all, because it grants access you no longer intend.

What to do next

If your estate plan does not include a current HIPAA release, or you are not sure whether the one you signed years ago still names the right people, that is worth fixing before it matters rather than after. Talk with an estate planning attorney about pairing your HIPAA release with a properly drafted power of attorney, so the people you trust have both the information and the authority to act when you need them most.