HIPAA and FERPA Consent for a Disabled Adult Child in Connecticut

The morning your child turns eighteen, your access to their medical records ends. Not gradually, not with a transition period — it stops. The hospital that has shared lab results with you for years will refuse a phone update, citing HIPAA. The school that has emailed IEP progress reports will redirect you to your adult child, citing FERPA. This catches Connecticut families off guard because nothing about the disability changes, but everything about the law does.

The good news: you do not need guardianship or conservatorship to restore access. Connecticut law provides three straightforward consent mechanisms that preserve your child's autonomy while keeping you informed.

How HIPAA Blocks Parents After Age Eighteen

The Health Insurance Portability and Accountability Act treats every eighteen-year-old as a legally independent adult with exclusive control over their protected health information. This applies regardless of disability status, cognitive ability, or living situation.

Once your child turns eighteen, healthcare providers cannot share the following without written authorization from your adult child:

• Appointment details and treatment plans
• Prescription information and pharmacy records
• Lab results, imaging reports, and diagnostic summaries
• Mental health and behavioral health notes
• Insurance claims and billing statements

Connecticut physicians, therapists, and hospital systems enforce this strictly. Even parents who attend appointments alongside their adult child may find that the provider directs all communication to the patient alone.

The HIPAA Authorization Form

A HIPAA authorization is a signed document in which your adult child designates specific individuals who may receive their protected health information. There is no single state-mandated form — each healthcare system typically has its own version — but all valid authorizations must include:

• The name of the person authorized to receive information
• A description of the information being released (you can specify "all medical records" or limit it to certain categories)
• The purpose of the disclosure
• An expiration date or expiration event
• The patient's signature and date

Your adult child can sign separate authorizations for each provider. Healthcare systems — including Yale New Haven Health, Hartford HealthCare, and Trinity Health of New England — may have their own forms and procedures, so confirm requirements with each provider's patient services department.

The authorization is revocable at any time. If your adult child later decides they want to manage their own medical communication, they can notify the provider in writing, and the authorization ends.

FERPA and Education Record Access

The Family Educational Rights and Privacy Act governs education records. When a student turns eighteen or enrolls in a postsecondary institution, FERPA rights transfer entirely to the student. The school district can no longer share IEP documents, progress reports, behavioral incident reports, or evaluation results with parents without the student's consent.

For Connecticut students still receiving special education services through their local district, this creates an immediate practical problem: parents who have been managing IEP meetings and advocating for services suddenly cannot access the records they need to prepare.

The fix is a FERPA consent form signed by the adult student. This form authorizes the school district to share education records with designated individuals. Most Connecticut districts have their own version, but the form must specify:

• Which records may be shared (IEP documents, evaluations, progress monitoring data, disciplinary records)
• Who may receive them
• A timeframe for the consent

Under Connecticut regulations (R.C.S.A. Section 10-76d-12), the adult student can also delegate educational decision-making authority to a parent through a simple written notification to the school board. This goes beyond record access — it allows the parent to participate in PPT meetings and make educational decisions on the student's behalf, without any court involvement.

Healthcare Representative Designation Under C.G.S. Section 19a-576

Connecticut's healthcare representative statute provides a more durable layer of protection than a HIPAA authorization alone. Under C.G.S. Section 19a-576, your adult child can appoint a healthcare representative who gains authority to make medical decisions if a licensed physician certifies in writing that the patient is temporarily or permanently unable to understand or communicate healthcare choices.

The designation stays dormant while your adult child can make their own decisions. It activates only upon clinical certification of incapacity. This makes it a safety net rather than an active transfer of authority.

Execution requirements are specific:

• The document must be signed by two adult witnesses
• It must be notarized
• Witnesses cannot be the appointed representative
• If the adult child resides in a DDS or DMHAS facility, additional witness requirements apply

The healthcare representative designation is completely separate from a durable power of attorney, which covers financial matters only. Connecticut's Uniform Power of Attorney Act (C.G.S. Section 1-352) explicitly excludes healthcare decisions from the scope of a financial power of attorney. Families need both documents for comprehensive coverage.

Timing the Paperwork

Start the consent process at least two to three months before your child's eighteenth birthday. This gives you time to:

1. Identify every provider — List all physicians, therapists, pharmacies, specialists, and school personnel who currently communicate with you about your child
2. Gather each provider's specific authorization form — Call each office and request their HIPAA release; some accept a generic form, others require their own
3. Draft the healthcare representative designation — Use the statutory requirements under C.G.S. Section 19a-576 and confirm the execution requirements before signing
4. Coordinate with the school district — Request the district's FERPA consent form and discuss whether a written delegation of educational authority under R.C.S.A. Section 10-76d-12 makes sense for your situation
5. Execute all documents together — Have your child sign everything in a single session, with proper witnesses and notarization

When Consent Forms Are Not Enough

These mechanisms all require your adult child to have sufficient capacity to understand what they are signing. If your child cannot comprehend the nature and consequences of a HIPAA authorization or healthcare representative designation, these documents may not hold up.

In that situation, you may need to explore court-ordered options — either a limited guardianship (for individuals with an intellectual disability, defined as an IQ of 69 or below with concurrent adaptive deficits originating before age eighteen) or a conservatorship of the person (for other cognitive impairments). An involuntary proceeding is filed in the probate court district where your child resides and carries a $250 filing fee; guardianship uses a DDS evaluation, while involuntary conservatorship uses a physician's evaluation.

But many families discover that their adult child has enough understanding to execute these consent documents, even if they need support with the process. Supported Decision-Making — where trusted individuals help the person gather information and communicate preferences while the person retains legal authority — can bridge this gap without court involvement.

The Connecticut Adult Guardianship & Alternatives Guide walks through each of these options with decision worksheets that help you determine which consent mechanisms your child can execute and where court involvement becomes necessary. It includes the specific statutory requirements for each document type and a timeline coordinating all the paperwork around the eighteenth birthday milestone.

Key Takeaways

HIPAA and FERPA create an immediate information wall at age eighteen, but Connecticut law provides clear workarounds. A HIPAA authorization restores medical record access. A FERPA consent form restores education record access. A healthcare representative designation provides a safety net for future medical decisions. None of these require a court proceeding, an attorney, or a finding of incapacity — they just require your adult child's signature and proper execution.

See more Connecticut guides →