Indiana HIPAA Release for Adults with Disabilities

The Problem Hits at the Hospital Desk

Your child has a disability. You've been managing their medical care for eighteen years. Then they turn 18, you call the doctor's office to ask about a prescription, and the receptionist says "I can't discuss that with you." Nothing changed about your child's condition. Everything changed about the law.

Federal HIPAA regulations treat every 18-year-old as a legally independent adult. Without authorization from your adult child — or another applicable HIPAA basis — healthcare providers generally cannot share diagnosis information, treatment plans, medication details, test results, or appointment information with parents. HIPAA can permit limited sharing in circumstances such as the adult's agreement or an emergency. The law doesn't care that your child has Down syndrome, autism, or a traumatic brain injury — the privacy protections apply equally.

Many families discover this at the worst possible moment: in an emergency room, during a crisis, or when a medication needs to be refilled and the pharmacy won't talk to them.

What a HIPAA Authorization Does

A HIPAA authorization is a signed document from the adult patient that specifically permits healthcare providers to share protected health information with named individuals. It's not an Indiana-specific form — HIPAA is federal — but it must meet certain requirements to be valid:

• Identifies the specific person or people authorized to receive information
• Describes the type of information covered (most families authorize "all medical records and health information" to avoid gaps)
• Names the healthcare providers or organizations covered
• Includes an expiration date or event (many families set this to "revocation by the patient" rather than a fixed date)
• Is signed by the patient (or their legal representative)
• Includes a notice that the patient can revoke the authorization at any time

Why This Matters More Than Most Families Realize

The HIPAA release is one of the simplest legal documents in the transition-to-adulthood toolkit, but the consequences of not having one are severe and immediate:

• Medication management. If your adult child takes psychiatric medications, seizure medications, or other prescriptions that require monitoring, you may not be able to call the prescriber to obtain or discuss side effects, ask about dosage adjustments, or coordinate refills
• Emergency treatment. In a medical emergency, the ER team can treat the patient, but it may be able to discuss the treatment plan with you under an applicable HIPAA basis
• Insurance coordination. If your adult child is on your health insurance plan, the insurer may talk to you about billing — but that does not by itself give you access to the provider's underlying medical information
• Specialist referrals. Coordinating care across multiple specialists requires someone to share information between providers. Without HIPAA authorization or another applicable HIPAA basis, you may not be able to serve as that coordinator

HIPAA Release vs. Healthcare Representative

These are different tools that accomplish different things:

A HIPAA release gives you access to medical information — you can see records, talk to providers, and participate in treatment discussions. But it does not give you the authority to make medical decisions for the patient.

A Healthcare Representative appointment under Indiana Code § 16-36-7 gives you the authority to make healthcare decisions when a physician certifies that the patient lacks decisional capacity. It automatically includes information access, but it goes further by granting decision-making power.

Most families need both:

• The HIPAA release covers everyday information sharing — calling the doctor, picking up records, coordinating appointments
• The Healthcare Representative appointment covers emergency and crisis situations where the individual can't make or communicate their own medical decisions

Signing Capacity Considerations

Here's where disability-specific planning matters. A HIPAA authorization requires the patient to understand what they're signing — that they're permitting specific people to access their health information. For most adults with disabilities, this is well within their capacity even if they need support understanding more complex legal instruments.

If the adult genuinely cannot understand the concept of sharing medical information, a HIPAA release alone won't work. At that point, the family needs either:

• A Healthcare Representative appointment (which requires a lower capacity threshold than a power of attorney)
• A limited guardianship of the person (which grants the guardian automatic access to medical information as part of their court-ordered authority)

Indiana's default healthcare proxy statute (IC § 16-36-7-42) also provides a safety net: if no advance directive or healthcare representative exists and the patient can't communicate, the statute designates a hierarchy of family members who can consent to treatment. But this default proxy doesn't extend to routine information access — it only activates when the patient is incapacitated and a treatment decision is needed.

Getting the Authorization in Place

Timing: Execute the HIPAA authorization on or immediately after the individual's 18th birthday. Before 18, parents have automatic access to their minor child's records. The gap between turning 18 and signing the authorization is the danger zone.

Scope: Cover all providers, not just the current ones. A broadly worded authorization ("any healthcare provider, pharmacy, hospital, or health plan") prevents the problem of switching providers and losing access because the old authorization named only the previous doctor's office.

Copies: Give copies to every current provider, pharmacy, and hospital the individual uses. Keep the original in a safe place. Many families also carry a copy in their phone as a photograph in case of emergency.

Companion documents: Execute the HIPAA release alongside a Healthcare Representative appointment and — if the individual is still in school — a FERPA release for educational records. The Indiana Guardianship & Alternatives Guide covers all three information-access instruments together, including how they interact and when each one is needed.

See more Indiana guides →