California Advance Directive and HIPAA Authorization

You named a healthcare agent in your California advance directive. Your agent shows up at the hospital ready to make decisions. The nurse says they can't share your medical information because they don't have HIPAA authorization on file.

This happens more often than it should. California's AHCD grants your agent the authority to make healthcare decisions — but the federal Health Insurance Portability and Accountability Act (HIPAA) creates a separate layer of privacy protection that hospitals interpret conservatively.

Why Your AHCD Alone May Not Be Enough

Your AHCD gives your agent healthcare decision-making authority under its terms. A separate HIPAA authorization can help provide records access before a formal incapacity determination, while hospital compliance departments may still apply their own workflows.

The issue is timing. An AHCD can make the agent's authority immediate or springing upon incapacity, depending on its terms. A HIPAA authorization can be useful before incapacity — for example, allowing your agent to discuss your treatment plan with your oncologist while you're conscious but too fatigued to manage calls yourself.

A standalone HIPAA authorization form covers these gaps:

• Access to medical records before incapacity
• Communication with insurance companies about claims
• Access to mental health, substance-use, or HIV/AIDS information when additional privacy rules apply

What a Proper HIPAA Authorization Includes

A HIPAA-compliant authorization for California should clearly identify:

1. Specific description of information: What records your agent can access (all medical records, or specific categories)
2. Who can disclose: Which providers or facilities are authorized to release information
3. Who can receive: Your named agent(s)
4. Purpose: "At the request of the individual" or "for healthcare decision-making"
5. Expiration date or event: Can be "upon my written revocation" for ongoing access
6. Your signature and date
7. Right to revoke: Statement that you can withdraw authorization at any time

Unlike your AHCD, a HIPAA authorization is a separate records-release document. Follow the form's stated signature and execution requirements rather than assuming the AHCD's witness rules apply.

Mental Health and Substance Abuse Records

California adds extra protections beyond standard HIPAA for certain categories:

• Psychotherapy notes: Require separate, specific authorization even from your healthcare agent
• Substance-use treatment records: May have additional privacy protections, so a general authorization may not cover every program's records
• HIV/AIDS information: May have additional California privacy protections and may require specific written authorization before disclosure

If any of these categories are relevant to your medical history, you need explicit language in your HIPAA authorization covering them. A generic "all medical records" clause may not be honored by providers who maintain these protected categories separately.

How to Integrate HIPAA with Your AHCD

The cleanest approach is a two-document strategy:

1. Your AHCD — names your agent and grants decision-making authority under Probate Code Section 4701 according to its terms
2. Standalone HIPAA authorization — can grant records access immediately, specify protected categories, and remain effective according to its expiration terms

Some California AHCD forms include a HIPAA waiver paragraph within the document itself. This is better than nothing, but hospitals that maintain separate compliance databases for HIPAA authorizations may not cross-reference your AHCD. A standalone form that their records department can file separately eliminates this friction.

What Your Agent Should Carry

When your healthcare agent arrives at a hospital or doctor's office, they should have:

• A copy of your executed AHCD showing their appointment
• A copy of your HIPAA authorization with their name explicitly listed
• Photo ID matching the name on both documents
• Your physician's contact information for verification

Getting Both Documents Right

The California Advance Directive & Living Will Kit includes both the AHCD and a California-specific HIPAA authorization form, plus an agent briefing template that walks your agent through what to say and show when requesting records access.

See more California guides →