HIPAA and Medical Records Access at 18 for Disabled Adults in Pennsylvania

On your child's 18th birthday, HIPAA privacy protections apply to the adult relationship. Hospitals, doctors' offices, therapists, and pharmacies generally must treat your adult child as the person who controls authorization for medical information — even if you're the one who scheduled the appointment, drove them there, and have been managing their care for 18 years.

This catches families off guard because Pennsylvania's education rules are different: parents retain IEP consent authority until age 21. Many parents assume their healthcare access continues the same way. It doesn't.

What Exactly Changes

Before 18, parents have broad authority to access their child's medical records and make treatment decisions. At 18, the adult child becomes the primary decision-maker for their own healthcare and generally controls authorization for release of their medical records. HIPAA still allows limited disclosures in some circumstances, but parents should not assume that prior access continues.

If your 18-year-old with a disability is in the ER and the doctor asks, "Can we share his chart with his mother?" — the answer depends on the young adult's permission, a recognized representative, or a HIPAA-permitted disclosure. Without documentation, do not assume the hospital can give you full access.

Three Ways to Maintain Access

Option 1: HIPAA Release (simplest). If your child has the capacity to sign, a HIPAA authorization form lets them designate specific people who can access their medical records. Most healthcare systems have their own forms; the young adult fills one out at each provider. No attorney needed. No court filing. This handles record access but not decision-making authority.

Option 2: Healthcare Power of Attorney / Advance Directive. Under Pennsylvania's Chapter 54 (the Uniform Health-Care Decisions Act), your child can designate a health care agent with authority to make medical decisions and access records if the child later lacks capacity. The document must be signed by the principal and witnessed by two individuals. This is the preferred option for families — it gives parents authority to step in when needed while keeping the young adult in charge when they can make decisions independently.

Option 3: Act 169 Health Care Representative. If your adult child loses capacity and has no advance directive or healthcare POA, Pennsylvania's Act 169 of 2006 creates a default list of authorized healthcare representatives. A spouse has first priority, followed by adult children, then parents, then adult siblings, then any adult with knowledge of the patient's preferences. As a parent, you'd be third on the list, which means you may not be first in line unless you're identified by a higher-priority category.

This default system works as a safety net, but it has a gap: it applies only when the individual lacks capacity. It doesn't give you authority to access records or make decisions while your adult child retains capacity but needs help understanding medical information.

When Guardianship Is the Only Path

If your child cannot understand what a HIPAA release or healthcare POA means — genuinely cannot comprehend the concept of authorizing someone to access their information — and broader ongoing authority is needed, a court-appointed guardian of the person is the mechanism for authority a POA cannot provide. Act 169's default health care representative rules may still address certain medical decisions when their conditions are met.

But for many young adults with disabilities, the capacity to understand "I want my mom to be able to talk to my doctor" is present even when the capacity to evaluate complex treatment options is limited. The healthcare POA fills exactly this gap.

The Practical Checklist

On or before the 18th birthday: have your child sign a HIPAA authorization at each active healthcare provider, execute a healthcare power of attorney (two witnesses required), and consider a durable financial POA at the same time (add notarization and two witnesses for financial POA). Keep copies in your phone and in a folder you bring to every medical appointment.

For a complete guide to setting up healthcare access and all the other legal tools that change at 18 — SSI, Medicaid, financial management, educational records — the Pennsylvania Adult Guardianship & Alternatives Guide covers the full transition timeline with Pennsylvania-specific forms and instructions.

See more Pennsylvania guides →