HIPAA Authorization Forms: Accessing Medical Records in Connecticut

Most people have heard of HIPAA but think of it as something that primarily affects their doctors and insurance companies. What many do not realize is that HIPAA has a direct and immediate impact on their family’s ability to get information in a medical emergency.

Without a HIPAA authorization in place, doctors and other healthcare providers cannot legally share your medical information in ways that would violate the Privacy Rule. That includes sharing information with your spouse, your adult children, or anyone else who has not been formally designated to receive it.

What HIPAA Actually Does

The Health Insurance Portability and Accountability Act establishes strict federal privacy rules governing who can access your medical information. Connecticut law provides additional protections on top of HIPAA, and when Connecticut law is more protective, the stricter rule controls. Connecticut provides heightened protections for HIV and AIDS records, mental health records, and genetic information beyond what federal law requires.

The result is a framework that takes medical privacy seriously, which is exactly why having the right documents in place matters so much.

What a HIPAA Authorization Form Does

A HIPAA authorization gives healthcare providers and health insurance companies your explicit permission to release protected health information about you to designated parties, such as an adult child who needs to discuss your health with a physician or an attorney who needs your medical records for a legal matter.

When this form is on file with your healthcare providers, the people you have named can speak directly with your doctors, receive updates on your condition, and obtain copies of your medical records. Under Connecticut law, healthcare providers and hospitals must provide a copy of a patient’s health record upon the written request of the patient, their attorney, or an authorized representative.

How This Relates to Your Healthcare Representative

Connecticut law provides a combined advance directive form under Connecticut General Statutes Section 19a-575a, which allows you to designate a healthcare representative, provide health care instructions, designate a conservator for future incapacity, and make an anatomical gift all in a single document.

However, a healthcare representative and a HIPAA authorization serve related but distinct purposes. A healthcare representative has the authority to make treatment decisions when you cannot. A HIPAA authorization grants that person, or anyone else you choose, permission to access your medical information. Having a healthcare representative in place does not automatically resolve every HIPAA-related access question, which is why having both documents is the more complete approach.

A HIPAA authorization, a healthcare directive, and a healthcare power of attorney can easily be confused because all three relate to your permission around medical care and medical information, but they are three very different documents. An attorney can help you understand which you need and make sure they work together as intended.

Connecticut’s Additional Privacy Protections

Connecticut residents should be aware that certain categories of medical information carry heightened protections under state law. Mental health records under Connecticut General Statutes Section 52-146h require specific written consent identifying those records separately, meaning a general HIPAA authorization may not be sufficient to access them. Substance use disorder records and HIV-related information are similarly subject to additional consent requirements.

If you want a designated person to be able to access your full medical picture, your authorization documents need to account for these categories specifically.

Who Needs One

Every adult in Connecticut should have a HIPAA authorization form on file with their primary care provider and any specialists they see regularly. This is not a document reserved for older adults or people managing serious health conditions. Medical emergencies do not follow a schedule, and the time to put this in place is before it is needed.

For families with aging parents, this is also a conversation worth having now. If your parent has not designated you to receive their medical information, you may find yourself unable to get answers from their doctors even when you are the person most responsible for their care.

The Bottom Line

A HIPAA authorization form is one of the simplest documents in an estate plan and one of the most overlooked. Connecticut law gives patients strong privacy protections, but those same protections can work against your family if the right authorizations are not in place.

The Law Offices of Charles L. Kurmay helps Connecticut residents build complete estate plans that include the documents most people do not think about until it is too late. Contact us to make sure your plan covers everything it should.