How to Legally Get Someone Else's Medical Records (Healthcare Proxy, POA, Guardianship & Subpoenas)
The 4 lawful methods under HIPAA (45 CFR § 164.502(g)) to obtain medical records for an aging parent, incapacitated spouse, minor child, or opposing litigation party.
Quick-Reference Facts: Getting Someone Else's Medical Records
- HIPAA Personal Representative Rule
- 45 CFR § 164.502(g) — Requires covered entities to treat a legally authorized 'Personal Representative' the same as the individual patient.
- Healthcare Proxy Activation Trap
- A springing Healthcare Proxy or Medical Power of Attorney ONLY grants record access if accompanied by a physician's determination of incapacity—UNLESS the document includes an immediate HIPAA Release clause effective upon signing!
- Financial POA vs. Medical POA
- A standard Financial Durable Power of Attorney does NOT authorize medical record access unless it explicitly cites HIPAA (45 CFR § 164.502(g)) and health care decisions.
Legal Authority Required to Request Another Living Person's Medical Records
| Relationship / Scenario | Valid Legal Instrument Required | Common Reason Hospitals Reject the Request |
|---|---|---|
| Competent Adult Parent or Spouse | HIPAA Authorization (45 CFR § 164.508) signed by that adult | Spouse or adult child signs their own name without a POA or patient signature (spouses do NOT have automatic HIPAA access!) |
| Incapacitated Parent / Spouse (Dementia, Stroke, ICU) | Durable Power of Attorney for Healthcare / Healthcare Proxy + Proof of Incapacity (or Immediate HIPAA Clause) | Submitting a Financial-only POA, or submitting a 'Springing' Healthcare Proxy without a doctor's incapacity note |
| Court-Appointed Guardian / Conservator | Certified Letters of Guardianship / Conservatorship of the Person | Submitting expired temporary letters or estate-only conservatorship |
| Opposing Party in a Lawsuit | Civil Subpoena Duces Tecum + 45 CFR § 164.512(e) Notice to Patient / Protective Order | Failing to serve the mandatory pre-subpoena Notice to Consumer |
Can a Healthcare Proxy or Power of Attorney Get Medical Records? (The 'Springing Proxy' Trap)
Under 45 CFR § 164.502(g)(2), if an adult has legal authority under state law to make healthcare decisions for an incapacitated patient, that agent is the patient's 'Personal Representative' under HIPAA and has the exact same right to request medical records as the patient. However, hospital privacy officers routinely reject standard Healthcare Proxies for one critical reason: most state Healthcare Proxy forms are 'springing' instruments that only take effect when the attending physician certifies in writing that the patient lacks capacity to make their own medical decisions. If your parent is still legally competent (or if no doctor has signed an incapacity determination) and your proxy does not contain an immediately effective HIPAA Authorization clause, the hospital will require your parent's signature on a 45 CFR § 164.508 HIPAA release.
Priority Hospital System, Pharmacy & Lab ROI Hubs
Select a major health system or laboratory below to view its 3-department routing architecture (Clinical HIM, UB-04 Billing, and Radiology PACS):