Skip to main content
Estateur

Healthcare Directives and HIPAA Authorizations

Healthcare proxy, living will, and HIPAA authorization — the incapacity trio, how they interact, and drafting for real hospital use.

Foundational6 min readLast updated 2026-07-31
healthcare directiveliving willHIPAAhealthcare proxyincapacity

Medical incapacity planning rests on three instruments that work together: a healthcare power of attorney (proxy) naming an agent to make medical decisions, a living will (declaration) stating end-of-life treatment preferences, and a HIPAA authorization permitting disclosure of protected health information. Many states combine the first two into a single 'advance directive' statutory form.

Healthcare power of attorney
Appoints an agent to make medical decisions when the principal cannot; broad and situational, unlike the fixed directives of a living will.
Living will / declaration
States preferences for life-sustaining treatment, artificial nutrition/hydration, and comfort care in terminal or permanently unconscious conditions.
HIPAA authorization
Authorizes covered entities to disclose PHI to named persons; without it, even a named agent may face access friction.

Note

The healthcare agent needs information to decide. Grant HIPAA access inside the healthcare POA and also provide a standalone HIPAA authorization, since some providers accept only their own or a standalone form.

  • Use the state statutory form (or track it) so hospitals recognize the document without counsel.
  • Address POLST/MOLST separately — these are portable medical orders signed by a clinician, not a substitute for the directive.
  • Reconcile with organ-donation wishes and any religious-directive addenda.
  • Give agents copies and lodge documents where they are reachable in an emergency; a perfect document in a safe deposit box is useless at 2 a.m.
  • Name successor agents and avoid requiring co-agents to act jointly for time-sensitive decisions.

Key takeaways

  • Pair a healthcare proxy, a living will, and a HIPAA authorization — each does a distinct job.
  • Build HIPAA access into the healthcare POA and also provide a standalone authorization.
  • Track the state statutory form so providers accept it, and address POLST/MOLST separately.
  • Accessibility beats perfection — agents must be able to produce the documents immediately.

Authorities

  • 45 C.F.R. 164.508 (HIPAA authorization requirements)
  • Uniform Health-Care Decisions ActModel for combined advance-directive statutes.

Related resources

Educational reference, not legal advice. Prepared for licensed professionals as general reference; not legal advice and no attorney-client relationship is created. Law varies by state and changes over time — verify transfer-tax figures and statutory citations against current primary authority. This resource was last updated 2026-07-31. Estateur is not a law firm.