HIPAA at 18 in Mississippi: How Parents Lose Medical Access and What to Do About It

Your Child Is Still a Minor in Mississippi — But HIPAA Doesn't Care

Mississippi's general age of majority is 21. Your child is still legally a minor under state law for many purposes. But HIPAA is a federal law, and federal law treats every 18-year-old as an adult with full privacy rights. On your child's 18th birthday, their medical records become theirs alone.

Practically, that means:

• Hospital patient portals revoke your access
• Doctors can refuse to discuss diagnoses, medications, or treatment plans with you
• Pharmacies won't share prescription information
• Insurance companies can stop sending you Explanation of Benefits statements
• In an emergency, staff may treat your child behind closed doors while you wait

For families managing complex medical needs — ongoing therapies, seizure medication, psychiatric care, specialized treatments — this overnight lockout can be dangerous, not just inconvenient.

The Fix Is a Signed HIPAA Authorization

If your child has the cognitive capacity to understand what they're signing, a HIPAA authorization form solves the problem without any court involvement. The form names you (or another trusted person) as someone authorized to receive protected health information and communicate with healthcare providers.

The authorization should specify:

• Which providers are covered (all current providers, or named individuals)
• What types of information can be shared (all health records, or specific categories)
• How long the authorization lasts (a specific date, or until revoked)
• Who is authorized to receive information (you, a co-parent, another family member)

Execute this form before the 18th birthday so there's no gap in access. Most physician offices and hospitals have their own HIPAA authorization templates, but your child can also sign a general form that covers all providers.

HIPAA Authorization vs. Healthcare Directive

These are different documents that work together:

A HIPAA authorization gives you access to information — records, test results, provider conversations. It doesn't give you decision-making power. Your child remains the medical decision-maker.

A healthcare directive (advance directive under the Uniform Health-Care Decisions Act, Miss. Code Ann. § 41-41-201 et seq.) designates you as the healthcare agent with authority to make medical decisions if your child cannot make them independently. It activates when a physician determines the patient lacks decision-making capacity.

For a young adult with a disability, you likely need both. The HIPAA authorization handles daily medical coordination. The healthcare directive handles crisis situations where your child can't communicate or make decisions.

What If Your Child Can't Sign?

If your child's disability prevents them from understanding and signing a HIPAA authorization, the situation is harder. You have two paths:

Statutory surrogate provision (§ 41-41-211): If a physician determines that your 18-year-old lacks decision-making capacity and no formal agent or guardian is active, Mississippi law allows a parent to step in as a healthcare surrogate. This gives you medical decision-making authority — and by extension, access to the information needed to make those decisions. But it requires an active capacity determination, meaning it's typically invoked in emergencies rather than for routine medical coordination.

Guardianship: A court-appointed guardian with authority over healthcare matters has legal standing to access medical records and communicate with providers. This is the permanent solution for families whose child cannot sign private documents, but it requires the full chancery court process — filing fee, attorney, medical evaluations, hearing.

Common Scenarios Parents Face

The medication refill call. Your child takes daily medication for a seizure disorder. The pharmacy calls to discuss a dosage change with the prescribing physician, but won't include you in the conversation because you're not the patient. A signed HIPAA authorization avoids this.

The ER visit. Your child is brought to the emergency room. Staff won't share the diagnosis or treatment plan with you. If your child signed a healthcare directive naming you as agent, you have standing. If not, the statutory surrogate provision may apply — but ER staff don't always know Mississippi's specific surrogate statute, which can mean delays and arguments at the worst possible moment.

The therapy progress report. Your child sees a behavioral therapist weekly. The therapist stops sending you progress notes after the 18th birthday. A HIPAA authorization covering all mental health providers solves this.

Act Before the Birthday

The recurring theme across every HIPAA scenario: execute the documents while your child is 17. Once the 18th birthday passes without a signed authorization, you're operating in the gap — calling providers, explaining the situation, and hoping for cooperation while you scramble to get the paperwork done.

For the complete medical access toolkit — including HIPAA, healthcare directives, and the statutory surrogate provision — the Mississippi Adult Guardianship & Alternatives Guide walks through every document families need to maintain medical involvement after 18.

See more Mississippi guides →