Yesenia got to the hospital at 11:40 on a Wednesday night, still in her work badge. An ambulance had taken her father, Anselmo, 74, because he couldn't catch his breath. The woman at the registration desk didn't look up. "Are you on his list? I can't tell you anything." Yesenia set down the folder she had kept for a year: her father's power of attorney, signed at the bank last spring. The woman read the title. "That's financial. This is medical. We can't share that with you."
Her brother Rubén called from Phoenix before she even sat down. "Just tell them you're his daughter, Yesi. They'll melt." She had already said it twice. "Daughter" is not a password.
At 1:30 in the morning a nurse named Denise leaned over the bed and asked, plain as a grocery list, "Mr. Anselmo, do you want me to talk with your daughter about your care?" Don Anselmo, oxygen in his nose, said, "Pues claro. That's why she's here." Denise walked Yesenia in. Nothing had to be notarized. That was luck, and luck is not a plan: the next day he could be asleep on medication, and Yesenia's name would be on nothing the hospital recognizes.
What the front desk can and can't say
HIPAA is not a wall between your family and the care team. HIPAA is the federal privacy law for health information. Under its rules, a provider may share information that is directly relevant to a family member or friend who is involved in the patient's care, as long as the patient agrees, or has a chance to object and doesn't. If the patient can't decide, because they are sedated or it's an emergency, the provider may use professional judgment about whether sharing is in the patient's best interest, and share only what that person needs for their role.
Two catches. First, this is permission, not a requirement: HHS says a provider may choose to wait until the patient can agree. Second, every hospital adds its own policies on top, and the person at the desk is often giving you the safest "no" they know. Their "no" at 11:40 at night is not always the final word of the law.
Why the bank paper doesn't open this door
A power of attorney covers only what it says it covers. HHS is direct about it: a power of attorney that doesn't include health care decisions doesn't let its holder exercise a patient's HIPAA rights. A health care power of attorney generally does, as long as it is in effect. Its agent is treated as the patient's "personal representative" (45 CFR 164.502(g)), for the information that relates to the decisions the document gives them. There is an exception: a provider that reasonably believes the agent has abused or neglected the patient, or may do so, or that treating the agent this way could endanger the patient, may decline if its professional judgment says that serves the patient's best interest. Some health care powers of attorney work immediately and some only once the patient can't decide, so read the one you have.
Yesenia's folder was real and correct. It was the wrong folder for this door. If the bank is the door giving your family trouble, The POA Is Signed. The Bank Still Says No covers that one.
The three health papers
Three papers do three different jobs, and the financial one does none of them.
- A HIPAA authorization that names the adult children. This is the patient's written permission for providers to share information with the people named. The federal rule (45 CFR 164.508(c)) says it has to describe what may be shared, who may share it, who may receive it and why, and when the permission ends, and it needs the patient's signature and date. HHS says the patient can cancel it in writing at any time, and the cancellation takes effect once the provider receives it. Your father signs it and picks the names: he lists each adult child he trusts, so it doesn't hinge on who is on shift.
- A medical power of attorney, also called a health care proxy. This names the person who makes health decisions when the patient can't. In Texas it is called a Medical Power of Attorney (Poder para la atención médica in Spanish), and the state's sample form says it takes effect when the patient is unable to decide and a physician certifies that in writing. Other states use other names and have their own forms.
- An advance directive, or living will. This tells the family in writing what treatment the person would want or not want near the end of life. In Texas it is the Directive to Physicians and Family or Surrogates (Directiva a los médicos y familiares o sustitutos in Spanish). It spares the family from guessing.
Texas's health agency posts the medical power of attorney and the directive, plus the out-of-hospital do-not-resuscitate order, in English and Spanish. The HIPAA authorization is a separate form, and the hospital or the doctor's office usually has its own. Texas lets a person sign the medical power of attorney in front of two adult witnesses or have a notary acknowledge the signature. The form says the agent and the attending doctor can't be witnesses, and it bars others too, such as relatives and people who would inherit; check the form's list. Check your own state, because the names, forms and signing rules change from one to the next.
Where the copies go
A paper in a drawer helps nobody at midnight. Once the papers are signed:
- Each doctor gets a copy, the primary doctor and every specialist. Ask that it be scanned into the chart.
- The hospital he usually uses gets a copy too. Ask its medical records office how it files these and whether its patient portal has an option for a family member. Portals work differently from one health system to the next, so ask.
- Every person named gets a copy: the agent, the backup agent and the brothers and sisters who might be standing at that desk.
- Every phone in the family gets a photo of the signed pages, and the paper copies go in the same folder as the financial power of attorney.
The Texas forms themselves say to give a signed copy to the agent and to the physician, and the directive adds the hospital and the family. Redo the round whenever there is a new diagnosis, a new doctor or a move.
What to say at the desk
Yesenia now keeps a card on the fridge. You can write your own:
- "My father, Anselmo, was admitted tonight. I'm his daughter and I'm involved in his care."
- "Could you or the nurse ask him whether I may be told about his care?"
- "If he can't answer, please note that I'm here, and tell me what I can be told."
- "Is there a medical power of attorney or a HIPAA form on file? I have copies."
- "May I speak with the charge nurse or the social worker?"
Say it slowly and kindly. The person at the desk usually isn't the one who decides, so ask for the one who is.
Starting the conversation without shame
Yesenia waited until her father was home, a Sunday after comida, with the folder on the table. She did not say "when you die." She said, "Dad, at the hospital they wouldn't tell me anything, and it scared me. I want you to be the one who decides who they tell."
"That's for old men," Anselmo said.
"It's for people who don't want their kids guessing. I'm filling mine out next, so you can watch me do it wrong." He laughed. Then he asked who should be the backup. They chose Rubén, who joined by video, grumbling and honored.
What worked: start from your own story or your own papers. Ask what he wants before you ask him to sign anything. Let him choose the person. Take the forms home and read them together without signing the same day. And invite every sibling, so nobody feels like the chosen one.
The Familia plan gives your household one place to see whose name stands where, so the papers don't wait for a night like that Wednesday to be found. Try the demo and walk through it with your own family in mind.
This is general education, not legal advice. Forms and rules vary by state, so confirm yours with an elder-law attorney or your state's health agency.
Where this comes from
- HHS: may a provider share information if the patient is not present or is incapacitated
- HHS: a non-health-care power of attorney and HIPAA rights
- HHS: a health care power of attorney and access to records
- HHS: revoking a HIPAA authorization
- 45 CFR 164.510(b): involvement in care
- 45 CFR 164.508(c): what a HIPAA authorization must contain
- 45 CFR 164.502(g): personal representatives
- Texas Health and Human Services: advance directive forms
- Texas Health and Safety Code, Chapter 166 (the medical power of attorney form and its witness list are section 166.164)
WiseNest Content Team
Written by the WiseNest Content Team, in partnership with founder Rich — dad of bilingual twins with special needs and the reason WiseNest exists.