Power of Attorney, HIPAA and Care Decisions: Different Roles Explained
Families often use the phrase “I have power of attorney” as if it grants every kind of authority.
It does not.
Financial power of attorney, healthcare power of attorney, HIPAA access, guardianship, and ordinary family involvement are different legal roles.
The exact authority depends on state law and the document itself.
Financial power of attorney
A financial power of attorney may authorize an agent to handle matters such as:
- bank accounts;
- bills;
- contracts;
- insurance;
- property; and
- other financial affairs.
It does not automatically authorize healthcare decisions.
Read the document.
Healthcare power of attorney
A healthcare power of attorney or healthcare proxy names a person to make medical decisions when the document and state law allow the authority to operate.
Some documents are effective only when the person lacks decision-making capacity.
Others may operate differently.
NIA recommends reviewing state requirements and naming an alternate proxy.
HIPAA is about health information privacy
HIPAA does not create financial power of attorney.
It controls when covered healthcare entities may use or disclose protected health information.
HHS explains that a legally recognized personal representative generally has the individual’s HIPAA rights within the scope of the representative’s healthcare authority.
A family member can sometimes receive information without being a legal representative
HIPAA can allow providers to share relevant information with family or friends involved in care when the patient agrees, does not object, or certain professional-judgment standards are met.
That is different from having full legal authority to make decisions or demand the entire medical record.
Guardianship is different again
A court-appointed guardian’s authority comes from the court order and state law.
The guardian may have broad or limited authority.
Do not assume guardianship automatically covers every financial and medical issue unless the order says so.
Emergency contact is not a legal power
Being listed as emergency contact generally tells providers whom to call.
It does not automatically create:
- financial authority;
- healthcare decision-making authority; or
- unrestricted medical-record access.
Facility representative forms do not replace legal documents
A nursing home or assisted-living community may ask the family to identify a representative.
Ask what the facility means by that term.
Signing a facility form does not necessarily create a legal power of attorney under state law.
A practical example
An adult daughter tells the hospital she has power of attorney.
Her document is a financial POA that allows banking and bill payment.
It says nothing about healthcare decisions.
Her father also signed a separate healthcare proxy naming his brother.
The daughter can manage bills under her authority, while the brother may be the person authorized to make healthcare decisions if the proxy is active.
Seven questions to clarify authority
- Is this financial or healthcare authority?
- When does the document become effective?
- What decisions does it actually cover?
- Does the person currently have capacity?
- Who has HIPAA personal-representative rights?
- Is there a backup agent?
- Does state law add special requirements?
Sources and review date
Sources checked October 12, 2026. State law controls many aspects of powers of attorney and guardianship.
- HHS: Personal Representatives
- HHS: Healthcare Power of Attorney and HIPAA Access
- National Institute on Aging: Choosing a Health Care Proxy
