HIPAA Authorization for Disabled Adult Child Turning 18

What Happens to Medical Records Access at 18

The day your child turns 18, HIPAA treats them as an independent adult. You no longer have automatic access to their medical records, appointment information, test results, or treatment plans. Without an authorization or another recognized legal basis, providers may be unable to share protected health information with you.

This catches families off guard because nothing about your child's daily reality changes on their birthday. They still need the same medications, the same doctors, the same support. But the legal framework shifts completely: unless you have documented authorization or another recognized legal basis, a provider may not be able to share protected health information with you.

The HIPAA Authorization Form

The simplest solution is a HIPAA authorization (also called a HIPAA release or disclosure authorization). This is a document signed by your adult child, or by a legally authorized personal representative when applicable, that specifically authorizes healthcare providers to share protected health information with you.

A valid HIPAA authorization must include:

• A description of the information to be disclosed (or "all protected health information" for broad coverage)
• The name of the person authorized to receive the information
• The purpose of the disclosure
• An expiration date or event
• The patient's signature and the date

If your adult child signs the authorization, they must have the capacity to understand what they're signing — they need to grasp that they're allowing a specific person to see their medical information. If they cannot sign, ask the provider which legally authorized personal representative may sign under the applicable rules.

Most healthcare systems provide their own HIPAA release forms. You can also prepare one in advance. If your child has capacity to sign, have them sign it on or shortly after their 18th birthday and provide copies to every current provider — primary care, specialists, therapists, dentists, pharmacy.

When a HIPAA Authorization Isn't Enough

The HIPAA authorization only covers information sharing. It doesn't give you the authority to make medical decisions, consent to treatment, or refuse procedures. If your adult child needs someone to make healthcare choices on their behalf, you need one of these:

Healthcare Power of Attorney (NRS 162A.865). Nevada provides a statutory form specifically designed for adults with intellectual disabilities. This grants an agent (typically a parent) the authority to make healthcare decisions when the principal cannot communicate their own choices. The principal retains the ability to verbally revoke the agent's authority at any time. The form requires either notarization or two qualified witnesses; if the principal lives in a facility, a physician certification of competency must be attached.

Supported Decision-Making Agreement (NRS 162C). Your adult child appoints supporters who can attend medical appointments, help understand diagnoses and treatment options, and assist in communicating decisions. The supporter has no authority to make decisions for the patient — the adult retains full decision-making power. The adult can separately authorize disclosure of the information the supporter needs; the SDMA itself should not be treated as a substitute for a HIPAA authorization.

Guardianship of the Person (NRS 159). If your child lacks the capacity to sign either of the above, court-appointed guardianship gives the guardian authority over healthcare decisions and, by extension, access to medical records. This is the most restrictive option and should be a last resort.

Timing Matters

The gap between a HIPAA authorization and no authorization is most dangerous during medical emergencies. If your adult child arrives at an ER and cannot communicate, and you have no documented legal authority, the hospital's treatment team may be legally constrained from discussing the situation with you.

Have the HIPAA authorization ready for signature when your child reaches 18, then distribute it. Keep copies in your own files, and carry a copy with you. Make sure it's on file at every provider your child sees regularly.

If your child has the capacity to sign a healthcare power of attorney, do that at the same time. The two documents complement each other: the HIPAA authorization covers information sharing, and the POA covers decision-making authority.

For a complete guide to coordinating HIPAA, healthcare POA, supported decision-making, and guardianship alternatives in Nevada, our Nevada Adult Guardianship & Alternatives Guide provides a step-by-step framework for the entire turning-18 transition.

See more Nevada guides →