Caregiver permissions by portal: what each one asks for

No. They are four different things, and each one opens a different door. A portal proxy is a login a practice issues, set to whatever level of access it offers. A HIPAA authorization is a signed permission for a specific disclosure. HHS says it has to describe the information, who may disclose it, who may receive it, and an expiration date. A personal representative is a status under HIPAA, not a form: someone with authority under state or other law to make the patient's health care decisions, whom the provider treats as the patient. A health care power of attorney is one of the documents that can create that status, and HHS lists it alongside a court-appointed guardian. Who counts as a personal representative, with its exceptions, is covered in Caregiver access to medical records: which route fits.

It is common now, and each practice runs its own registration. By ONC's count, non-federal acute care hospitals offered caregiver access to 89 to 90 percent of patients' designated caregivers in 2019, and caregiver use doubled between 2020 and 2024, from 24 percent to 51 percent. A proxy view is not always the whole chart. ONC's playbook names age-based limits on adolescent information and restricted access to sensitive items, with psychotherapy notes and pregnancy tests as its examples. Why a proxy login beats sharing a password is covered in Caregiver access to medical records: which route fits.

With written permission on form CMS-10106, Authorization to Disclose Personal Health Information. The form says that by law, 1-800-MEDICARE needs permission in writing before it can share information with anyone else. The person with Medicare names up to two people or organizations (more can go on the back), chooses any information or limited information such as claims, eligibility, plan enrollment or premium payments, and picks an end date or none. It can be submitted through their secure Medicare.gov account or by mail, and canceled at any time in writing. A personal representative can sign instead and attach paperwork such as a power of attorney. The form notes that a state may set different limits on how long Medicare can share. Help with an appeal is a separate form: CMS-1696, Appointment of Representative.

Not the payments. SSA says being an authorized representative, having power of attorney, or sharing a joint bank account is not the same as being a representative payee, and that the Treasury Department does not recognize power of attorney for negotiating federal payments. A payee is someone SSA appoints to manage Social Security or SSI benefits for a person who cannot. To apply, SSA asks for form SSA-11 and identity documents, and the application is usually done face to face. SSA generally looks for family or friends first, and it lets people advance designate up to three individuals who could serve if the need comes up. A payee's authority stays narrow: SSA says a payee cannot sign legal documents other than Social Security documents.

Usually the records tied to the decisions it covers. MedlinePlus says a health care agent, also called a health care proxy, acts only when the patient cannot, and that in most states an agent can access and release medical records. It also says what an agent can do differs by state, that an agent has no control over the patient's money, and that many states require witness signatures on the form. The document's wording sets the reach. If the power of attorney covers just one treatment choice (HHS uses artificial life support as its example), it reaches only the records tied to that choice. A general or durable power of attorney qualifies under HIPAA only when it includes the power to make health care decisions, per the HHS chart.

Often, yes. HHS applies one rule to providers and health plans alike, so a plan's member services line can talk with a relative who helps pay for or manage care when the patient agrees or does not object. HHS is also clear that the plan has no duty to share with a relative who is not a personal representative. For a Marketplace plan, HealthCare.gov describes an authorized representative as someone the applicant chooses to act on their behalf, like a family member or other trusted person, and notes that some authorized representatives may have legal authority to act for the person.

In several places. HHS says whether someone is a personal representative depends on authority under state or other law, and that the Privacy Rule defers to state law on a parent's access to a minor's records. MedlinePlus says a health care agent's powers and signing requirements differ by state. Even the Medicare form notes that a state may set different limits on how long Medicare can share. This page covers the federal rules and the agency forms. It is not legal advice, and the details for a specific family come from that state's law and forms.

After the paperwork, as the shared file. With the patient's permission, Triangle puts their records in one place you can both see. Those records can come from PDFs and scans a family already has, or from participating providers over national networks. Triangle is not a substitute for a portal proxy, a HIPAA authorization, a Medicare form or a legal document, and it does not diagnose or choose treatment.