Michigan HIPAA Release Form: Authorizing Medical Record Access

Your father is in the ICU. You call his doctor for an update, and the nurse tells you they can't share any information — your name isn't on a HIPAA authorization. You're left standing outside the room, unable to get answers about his condition.

This happens to Michigan families every day. Even if you're named as a patient advocate in a valid Patient Advocate Designation, HIPAA's federal privacy protections can block your access to medical information until the PAD formally activates — which requires a certified finding of incapacity.

Why a Separate HIPAA Authorization Matters

A Patient Advocate Designation under MCL 700.5506 only activates when two physicians certify that the patient lacks decision-making capacity. Before that determination happens, the advocate has no legal authority — and therefore no guaranteed right to access medical records.

A standalone HIPAA authorization fills this gap. It's effective immediately upon signing, regardless of the patient's capacity status. This means your designated family member can:

• Speak with doctors about your diagnosis and treatment options
• Access test results and imaging reports
• Coordinate care between multiple providers
• Communicate with insurance companies on your behalf
• Obtain records needed for second opinions

What to Include in Your Michigan HIPAA Authorization

Federal law (45 CFR § 164.508) requires specific elements for a valid authorization:

Required components:

• Full legal name of the patient
• Name and contact information of each authorized person
• Specific description of the information to be disclosed (or "all protected health information")
• Purpose of the disclosure (e.g., "healthcare coordination and decision-making")
• Expiration date or event (e.g., "upon revocation or death")
• Patient's signature and date
• Statement of the patient's right to revoke the authorization at any time

Practical additions for Michigan families:

• Name of each healthcare provider, hospital system, or facility covered
• Authorization for both verbal and written disclosures
• Permission to access mental health records (separately protected under Michigan law)
• Permission to access substance abuse treatment records (separately protected under 42 CFR Part 2)

Common Mistakes

Assuming the PAD covers HIPAA access: It doesn't — not until the PAD activates upon incapacity. You need both documents.

Making it too narrow: Authorizing access only to "Dr. Smith at General Hospital" means your family can't get information from the specialist across town. Use broad provider language or list every known provider.

Forgetting mental health records: Michigan provides additional privacy protections for mental health and substance abuse treatment records beyond standard HIPAA. If relevant, your authorization must specifically address these categories.

Not giving copies to providers: The authorization only works if the provider has it on file. Distribute copies to every healthcare provider, hospital, and pharmacy — don't wait for a crisis to track down the original.

Integrating HIPAA With Your Advance Directive

The strongest approach is to execute your HIPAA authorization at the same time as your Patient Advocate Designation. This creates layered access:

• Before incapacity: HIPAA authorization gives your family information access
• After incapacity determination: PAD activates, giving your advocate full decision-making authority plus information access

The Michigan Advance Directive & Living Will Kit includes a Michigan-specific HIPAA authorization form alongside the Patient Advocate Designation, so your medical information access and decision-making authority work together from the moment you sign.

See more Michigan guides →