HIPAA, Battling Parents, and Minor’s Health Records

Dealing with a minor’s health records can be a minefield when a child is from a blended family, or the parents have a contentious divorce ongoing. This gets especially sticky when you add in stepparents, grandparents, and situations where a minor controls all or a portion of their own records. Reviewing the basics can help your practice stay ahead of a potential costly HIPAA violation.

Custody versus Parental Rights: Don’t confuse custody with parental rights. Both parents of a minor have access rights to a minor’s record unless the minor can consent to their own treatment. If one parent wants to block the other parent from the records, there is only one way to do it.  The parent being blocked has to have their “parental rights” removed by the court. Your practice must be presented with a judge-signed order designating this.

Custody of the child is different. One parent can have full custody but as long as the parental rights of the other parent haven’t been revoked by the courts then both parents can view and get copies of the healthcare records of the child.

Extended Family: Either parent can sign an authorization for a stepparent, grandparent or another person to have a copy of the child’s records or discuss the records with someone at the practice. It is a parental right, and the other parent can’t block that without legal documentation.

However, state law on custody can influence this issue. Depending on custody arrangements, it may take both parents to agree. As a practice, you don’t have access to the custody agreement and its implications. When you are presented with a conflict, take the stance of restricting the release until you are presented with an agreement between the parents or a legal document. You do not have to be put in the middle of a parental dispute. Consult your own lawyer if needed.

Without permission from one of the parents, stepparents and grandparents do not have any rights beyond the same “to the extent they are involved in the care” standard that applies to anyone.

Adoptive Parents: In order for someone to adopt a child, one or both parents have to give up their parental rights. For example, if a single mother marries a man who is not the father of her child, and her husband adopts her child, then he becomes the father, and the birth father no longer has any rights to the records.

Legal Guardians: A legal guardian is granted parental rights by court order. If someone is designated a legal guardian, parental rights are not automatically removed from the parents. That would take an extra step and, again, your practice must be presented with the court order stating the parental rights have been removed.

State Custody: When the state has custody of a minor and the child has been removed from the home, the state assumes legal guardianship of the child and the same rules apply. The social worker in charge of the case is granted parental rights but this does not remove the rights of the parents. Note that the social worker is the legal guardian, not the caregiver.

Parent Information: Care should be taken when sharing information about one parent to the other. This especially concerns location, credit card numbers, and insurance numbers. If possible, that information should not be included in the minor’s medical record. If this is not possible, and one parent has concerns, they should consult with an attorney on how to legally revoke this access.

Minor Control: Some minors have control of their own records. In general, HIPAA says that if the minor can consent to their own treatment then the minor alone has access rights. State law determines when a minor can consent to their own treatment.

Familiarity with the basics of parental rights as it pertains to contentious custody arrangements is critical in avoiding a hefty fine from HIPAA. If you have questions, do not hesitate to contact Client Services or your personal consultant. TMC is here and eager to help you. With our decades of experience, we are equipped to find the solutions for your compliance issues.