Your doctor and/or your hospital can share your health information with family members or friends only if you give them permission to do so.
Therefore, you should ask your doctors and hospitals for the HIPAA Privacy Authorization form that they use. You should fill out the form/forms with the names of people you want to be able to have access to your health care information.
If you haven’t given your permission, the doctors and hospitals will not be able to give family or friends your healthcare information.
Here is a generic form, reference (2). But it might be a good idea to get and use the form/forms that your doctors and hospitals use. Just call those offices and ask them for the form they prefer.
Here are some excerpts from reference (1) below on the HIPPA privacy rule:
COMMON QUESTIONS ABOUT HIPAA
1. If I do not object, can my health care provider share or discuss my health information with my family, friends, or others involved in my care or payment for my care?
Yes. As long as you do not object, your health care provider is allowed to share or discuss your health information with your family, friends, or others involved in your care or payment for your care. Your provider may ask your permission, may tell you he or she plans to discuss the information and give you an opportunity to object, or may decide, using his or her professional judgment, that you do not object. In any of these cases, your health care provider may discuss only the information that the person involved needs to know about your care or payment for your care. [See document for clarifying examples]
2. If I am unconscious or not around, can my health care provider still share or discuss my health information with my family, friends, or others involved in my care or payment for my care?
Yes. If you are not around or cannot give permission, your health care provider may share or discuss your health information with family, friends, or others involved in your care or payment for your care if he or she believes, in his or her professional judgment, that it is in your best interest. When someone other than a friend or family member is asking about you, your health care provider must be reasonably sure that you asked the person to be involved in your care or payment for your care. Your health care provider may share your information face to face, over the phone, or in writing, but may only share the information that the family member, friend, or other person needs to know about your care or payment for your care. [See document for clarifying examples]
3. Do I have to give my health care provider written permission to share or discuss my health information with my family members, friends, or others involved in my care or payment for my care?
HIPAA does not require that you give your health care provider written permission. However, your provider may prefer or require that you give written permission. You may want to ask about your provider’s requirements.
7. How can I help make sure my health care providers share my health information with my family, friends, or others involved in my care or payment for my care when I want them to?
Print a copy of this document [meaning reference (1) PDF below] and discuss it with your health care provider at your next appointment. You may also want to share this information with your family members, friends, or others involved in your care or payment for your care.
Resources:
(1) A PATIENT’S GUIDE TO THE HIPAA PRIVACY RULE: When Health Care Providers May Communicate About You with Your Family, Friends, or Others Involved In Your Care [PDF]. U.S. Department of Health and Human Services • Office for Civil Rights
(2) HIPAA Privacy Authorization Form [PDF]. This generic form is found at a number of websites.
(3) SUMMARY OF THE HIPAA PRIVACY RULE [PDF] from the Department of Health and Human Services last revised 5/03.