HIPAA Release Form Arkansas: Medical Access for Disability Families After 18

Your adult child is in the ER. The doctor has information you need. And the receptionist tells you they cannot share anything — not the diagnosis, not the test results, not even whether your child has been admitted — because your child is 18 and you are not an authorized contact.

This is HIPAA doing exactly what it was designed to do: protecting patient privacy. The problem is that for disability families, the default privacy protections create an information blackout at the worst possible moment.

A HIPAA authorization form fixes this in about ten minutes.

What a HIPAA Authorization Does

Under federal regulations (45 C.F.R. § 164.508), a HIPAA authorization allows your adult child to designate specific people — typically parents — who are authorized to receive their protected health information. This includes:

• Diagnosis and treatment details
• Test results and lab work
• Medication and prescription history
• Billing and insurance information
• Appointment scheduling and discharge summaries

The authorization gives you the right to receive information. It does not give you the right to make decisions — that requires a separate healthcare power of attorney. Most disability families need both.

How It Differs From a Healthcare POA

These two documents work together but cover different territory:

HIPAA authorization — lets the doctor talk to you. Active immediately, regardless of the patient's current capacity.

Healthcare power of attorney — lets you make medical decisions on your child's behalf. Activates only when your child cannot communicate their own wishes.

Without a HIPAA authorization, a parent who holds healthcare POA might have the legal right to make decisions but cannot get the medical information needed to make them. File both.

Execution Requirements

A HIPAA authorization is simpler to execute than most legal documents in this space:

• Your adult child signs the form specifying who can receive their information
• The form should identify the covered entities (hospitals, clinics, pharmacies) or use broad language covering all providers
• No notarization is legally required, though having it notarized adds credibility with hospital compliance departments
• The authorization can be time-limited or open-ended

Most major Arkansas healthcare systems — UAMS, Arkansas Children's, Baptist Health, CHI St. Vincent — have their own HIPAA release forms at intake. Ask each provider whether it accepts a standalone HIPAA authorization or requires its own form.

When to Prepare It

The authorization cannot be signed until your child turns 18. But have the form ready in advance so it can be executed on or immediately after the birthday.

Prepare it alongside the financial power of attorney, the healthcare power of attorney, and the FERPA educational release. Executing the full package at once prevents gaps in access.

Keep signed copies in multiple locations — at home, in your car, with the young adult's primary care provider, and digitally. Ask each provider what format it accepts in an emergency.

Capacity Considerations

Your adult child signs the HIPAA authorization to give someone permission to see their medical information. If capacity to sign is uncertain, ask a qualified professional before relying on the authorization.

If your young adult can do this, the HIPAA form should be executed regardless of whether other documents like POA or guardianship are also in play. Even families pursuing court-ordered guardianship benefit from having a HIPAA authorization on file, because the guardianship process takes months while the HIPAA form takes effect immediately.

The Arkansas Adult Guardianship & Alternatives Guide walks through the complete set of documents — HIPAA, FERPA, financial POA, healthcare POA — with execution checklists and preparation timelines for the eight-month window before the 18th birthday.

See more Arkansas guides →