The Three Documents That Decide What a Caregiver Can Actually Do for an Aging Parent
By YourResourceHub Editorial Team · Reviewed by Steven Sun · 9 min read · Last updated September 15, 2026
- A HIPAA (Health Insurance Portability and Accountability Act) authorization only permits a hospital to share information. Actual decision-making authority comes from a separate legal status, created by a healthcare proxy or a court, never by a HIPAA form alone.
- A healthcare proxy (medical power of attorney) and a financial power of attorney cover two completely separate kinds of authority, and both must be signed while the parent still has legal capacity.
- A 2025 Pew Research Center survey found only 31% of U.S. adults had completed a living will or advance directive, and just 44% of people in their 60s had one.
- Once a parent loses legal capacity with no valid proxy or power of attorney on file, the family’s remaining option is usually a court guardianship or conservatorship, a slower and more expensive process than signing a form in advance.
A HIPAA authorization lets a hospital or doctor share information with a named person; it does not let that person make medical decisions, which requires a separate healthcare proxy (medical power of attorney), and it does not let them access bank accounts or pay bills, which requires a separate financial power of attorney. All three should be signed while the parent still has the legal capacity to sign them.
In this article
- What a HIPAA authorization actually is
- Who needs a healthcare proxy, and what it actually grants
- What a financial power of attorney covers
- When to sign, and what happens if you wait too long
- What families get wrong about these documents
- Frequently asked questions
When Carol Whitfield’s 79-year-old mother was hospitalized after a fall last spring, the charge nurse would not confirm so much as which floor she was on. Carol’s mother had signed a living will five years earlier, a document spelling out her end-of-life treatment wishes. It said nothing about who could see her chart or speak for her while she was sedated and unable to answer questions herself.
What a HIPAA authorization actually is
A HIPAA authorization is a form permitting a hospital, doctor, or insurer to share your protected health information with a specific named person. It comes from the Health Insurance Portability and Accountability Act (HIPAA), the 1996 federal privacy law. Federal regulation is direct about its limits: a covered entity like a hospital “may not use or disclose protected health information without an authorization that is valid under this section,” and any disclosure must stay consistent with that authorization. That’s it. It is a permission slip for information, not a grant of authority to decide anything.
Decision-making authority comes from a completely different legal status: a “personal representative.” Federal privacy regulation defines that status as coming from whether, under applicable law, a person has authority to act on behalf of an individual in making decisions related to health care. Applicable law here means your state’s law, not the HIPAA form itself. In practice, that authority is created by a healthcare proxy, a medical power of attorney, or a court order, never by a signature on a HIPAA release alone.
Who needs a healthcare proxy, and what it actually grants
A healthcare proxy, also called a durable power of attorney for healthcare or a medical power of attorney, names a specific person, called an agent or proxy, to make medical decisions once the person who signed it can no longer communicate their own wishes. That includes consenting to or refusing treatment, choosing among providers, and accessing medical records directly, not just being told about them after the fact.
The exact form and requirements vary by state. There is no single federal form. The National Institute on Aging’s own guidance on choosing a proxy tells readers to confirm the details locally: contact your state legal aid office or state bar association to confirm your state’s rules on who can serve as your proxy.
A healthcare proxy is not the same thing as a POLST (portable medical orders) form. Nationally, POLST is no longer treated as a true acronym, though it originated as one. A POLST is a medical order signed by a clinician for someone who is already seriously ill or has advanced frailty; a healthy adult planning ahead does not need one yet. A healthcare proxy is the document everyone benefits from having regardless of current health, since anyone can be temporarily unable to communicate after an accident or a sudden medical event at any age.
What a financial power of attorney covers
A durable power of attorney for finances names an agent, sometimes called an attorney-in-fact, to pay bills, manage bank accounts, oversee investments, pay taxes, and handle property on the parent’s behalf. Federal consumer guidance from the Consumer Financial Protection Bureau (CFPB) is blunt about what happens without the right paperwork on file: a bank may refuse to accept the power of attorney and insist the parent sign its own form instead, which becomes a real problem once the parent has already lost the ability to act for herself. If a bank or other business won’t honor a valid power of attorney, the same federal guidance says state law may actually require that business to accept it, which is the leverage behind escalating to a supervisor or, if that fails, a lawyer.
This authority is different from a Social Security representative payee, a narrower role that manages only a beneficiary’s Social Security funds, not their full finances; see our guide to becoming a representative payee for an aging parent for that specific process.
| Document | What it actually authorizes | When it takes effect | What it does NOT do |
|---|---|---|---|
| HIPAA authorization | Lets a hospital, doctor, or insurer share protected health information with a named person | As soon as signed and on file | Does not grant any decision-making authority over treatment or finances |
| Healthcare proxy (medical power of attorney) | Names a person to make medical decisions: consent to or refuse treatment, choose providers, access records | Typically only once the parent can no longer communicate their own wishes | Does not authorize any financial decisions, bill payment, or account access |
| Financial power of attorney | Names an agent to pay bills, manage accounts, oversee investments, and handle property | Immediately, or “springs” into effect at incapacity, depending on how the document is written | Does not authorize medical decisions or access to health records |
| If none are signed and capacity is later lost | Family has no document-based authority of any kind | N/A | Family must petition a court for guardianship or conservatorship instead |
When to sign, and what happens if you wait too long
All three documents, the HIPAA authorization, the healthcare proxy, and the financial power of attorney, have to be signed while the parent still has legal capacity: the ability to understand what the document does and to sign it knowingly. The National Institute on Aging says this directly of financial advance directives: they must be created while the person still has the legal capacity to make decisions. Its companion guidance on managing money problems recommends a durable power of attorney be arranged while the person can still understand and approve the arrangement. The same capacity requirement applies to a healthcare proxy and a HIPAA authorization for the same reason: a document only works if the person signing it was legally able to sign it.
Once that capacity is gone and no valid proxy or power of attorney exists, the family’s remaining option is usually a court-supervised guardianship or conservatorship. The Iowa State Bar Association describes the mechanics plainly: the court appoints someone to make decisions for another person, and establishing that requires filing a petition with the court. That process takes months, involves attorney fees, and puts a judge, not the family, in charge of who gets appointed.
Free or low-cost help is available. The federal Eldercare Locator (1-800-677-1116), run by the Administration for Community Living, connects families to their local Area Agency on Aging, which can refer callers to legal aid or a state bar association’s lawyer-referral service, and in some areas can help fund respite care through the National Family Caregiver Support Program while paperwork gets sorted out. AARP (originally the American Association of Retired Persons, now used as a standalone name) also publishes free, state-specific advance directive forms covering both a living will and a healthcare power of attorney. If your parent is already living in a nursing home or assisted living facility, our guide to the Long-Term Care Ombudsman Program covers a free advocate who can raise concerns on their behalf even before these documents are in place.
What families get wrong about these documents
The most common mistake is treating a living will, a HIPAA form, and a healthcare proxy as interchangeable. They are three different documents doing three different jobs: a living will states treatment preferences, a HIPAA authorization permits information sharing, and a healthcare proxy grants someone the authority to actually decide. A family can have one of the three on file and still hit a wall, exactly as Carol did.
The second mistake is waiting. A 2025 Pew Research Center survey of U.S. adults found only 31% had completed a living will or advance directive, meaning roughly 69% had not, with the share rising by age: just 44% of people in their 60s had one, compared with 64% of people in their 70s. A University of Michigan National Poll on Healthy Aging fielded during the COVID-19 pandemic, cited by AARP, found only 46% of older adults had documented their advance care preferences at all, an older figure than the 2025 Pew survey above but pointing the same direction. Waiting until a hospitalization forces the question means the harder, slower path, a court proceeding, is often the only one left.
Frequently asked questions
Does a HIPAA authorization let me make medical decisions for my parent? No. A HIPAA authorization only permits a hospital or doctor to share protected health information with you. Decision-making authority comes from a separate document, usually a healthcare proxy or medical power of attorney, created under your state’s law.
Can I use one document instead of both a healthcare proxy and a financial power of attorney? No. They cover separate authority. A healthcare proxy governs medical decisions only. A financial power of attorney governs money, property, and bills only. Most families need both, executed as separate documents, to cover both kinds of decisions.
What happens if my parent loses capacity before signing anything? Without a valid proxy or power of attorney on file, the family typically has to petition a court for guardianship or conservatorship. That process takes months, costs attorney fees, and lets a judge decide who is appointed, unlike a document signed in advance.
Is a living will the same as a healthcare proxy? No. A living will states treatment preferences, such as whether to use life support. A healthcare proxy names an actual person to make decisions, including ones the living will never anticipated. Many people benefit from having both.
Where can I get help creating these documents without hiring a lawyer? The federal Eldercare Locator (1-800-677-1116) connects you to your local Area Agency on Aging, which can refer you to free or low-cost legal help. AARP also publishes free, state-specific advance directive forms covering a living will and healthcare power of attorney.
