HIPAA Rights When Child Turns 18 Missouri

The Day Your Access Ends

On your child's 18th birthday, every healthcare provider in Missouri is legally required to stop sharing medical information with you. This is not the doctor's policy — it's federal law. Under HIPAA, the privacy rule shifts the moment a patient reaches the age of majority. Your child's diagnoses, medications, lab results, appointment notes, and treatment plans become protected health information that providers cannot disclose without the patient's written authorization.

This happens regardless of whether you're still paying for their health insurance. Paying premiums does not grant access to medical records under HIPAA. Being listed as a dependent on your plan gives the insurer claims data — it does not give you the right to call their psychiatrist and ask about medication changes.

What You Actually Lose

• The right to receive test results, imaging reports, or lab work
• The ability to call and discuss symptoms or medication side effects with providers
• Access to patient portals (you'll be locked out of any shared account)
• Authority to schedule, cancel, or attend appointments on their behalf
• The ability to request records transfers between providers
• Consent authority for procedures, surgeries, or therapy changes

For a young adult with intellectual disability, autism, or communication challenges who has relied on parental coordination with medical teams for their entire life, this is an immediate, total communications blackout with no transition period.

Three Documents That Restore Access

1. HIPAA Authorization (Release Form)

The simplest fix. Your adult child signs a standard HIPAA authorization form (every provider has one) designating you as an authorized recipient of their protected health information. This lets providers share records and discuss treatment with you.

What it does: information access only. What it does not do: give you decision-making authority over treatment.

Cost: $0. Your child can revoke it at any time.

2. Healthcare Power of Attorney (HCPOA)

Broader than a HIPAA release. Your adult child designates you as their healthcare agent — the person authorized to make medical decisions on their behalf if they lack current decision-making capacity. Under standard Missouri practice, the agent's authority activates when two physicians certify the patient lacks capacity for the decision at hand.

What it does: gives you decision-making authority during incapacity, plus information access. What it does not do: override your child's own decisions when they have capacity.

Special Missouri requirement: if you want authority to direct end-of-life decisions (withholding nutrition/hydration), the HCPOA or Healthcare Directive must contain explicit, unequivocal language authorizing this. General "full authority" language is insufficient.

Cost: $300–$1,500 for attorney drafting and execution.

3. Court-Appointed Guardianship

If your adult child cannot understand what a HIPAA release or HCPOA is — if they genuinely lack the capacity to sign these documents — then court-ordered guardianship provides medical decision-making authority through judicial appointment rather than voluntary delegation.

Cost: Published research reports $2,000–$5,000 for limited guardianship and $3,000–$10,000+ for full conservatorship, plus ongoing obligations.

The Capacity Question

The critical threshold: can your adult child understand "I'm allowing Mom and Dad to talk to my doctor about my health?" If yes — even with simplified explanation, visual supports, or AAC — they have sufficient capacity to sign a HIPAA release and potentially an HCPOA. The standard is understanding the basic concept of permission, not the ability to read legal documents.

Many families assume their child with Down syndrome or autism cannot sign these forms. In practice, most adults with moderate intellectual disability can understand and authorize information sharing when the concept is presented clearly.

The Emergency Gap

What happens if your adult child arrives at an emergency room unable to communicate, and no HCPOA or guardianship exists?

Missouri's proposed Designated Health Care Decision-Maker Act (HB 747, 2025 session) would establish a statutory priority list: spouse → adult children → parents → adult siblings → grandparents. If enacted, parents would have default decision-making authority during emergencies even without prior documentation.

However, this mechanism excludes individuals with abuse/neglect allegations on file, and strictly prohibits authorized decision-makers from withdrawing life-sustaining treatment except in narrow terminal circumstances. Relying on this default rather than executing an HCPOA beforehand leaves significant gaps — particularly for ongoing medical management rather than acute emergencies.

Act Before the 18th Birthday

Execute HIPAA releases and the HCPOA before or on the 18th birthday. There is no benefit to waiting. If your child has capacity to sign at 17.5, they almost certainly have capacity at 18. Do it proactively:

1. Have your child sign HIPAA authorizations for each provider they currently see
2. Execute a Healthcare Power of Attorney naming you (and a successor agent)
3. Provide copies to every medical office, pharmacy, and therapist
4. Upload copies to the patient portal if the provider system allows it

Total cost when attorney help is used: research reports $300–$1,500 for attorney-prepared powers of attorney; template and notary costs vary. Time to complete: one afternoon.

The Missouri Adult Guardianship & Alternatives Guide includes the complete medical authority planning section — HIPAA release instructions, HCPOA drafting guidance, the capacity assessment framework, and coordination with the Designated Health Care Decision-Maker statutory default.

See more Missouri guides →