Back to Blog
•Steve Davie•7 min read

How to Get Medical Records for an Elderly Parent: Legal Rights and Practical Steps

Learn how to legally obtain your aging parent's medical records, including HIPAA requirements, healthcare proxy setup, and step-by-step instructions for different scenarios.

You need your mom's lab results from last month. Or the surgical notes from dad's procedure. But when you call the doctor's office, they say they can't release the information to you.

This is one of the most frustrating experiences for adult children trying to get medical records for an elderly parent. You're trying to help, but privacy laws seem to block you at every turn.

The good news: there are legal, straightforward ways to get your parent's medical records. This guide explains your rights and the exact steps to take — for every type of provider.

Understanding HIPAA: It's Not the Enemy

HIPAA (Health Insurance Portability and Accountability Act) protects your parent's medical privacy. This is actually a good thing—it prevents random people from accessing sensitive health information.

But HIPAA also has clear provisions for family caregivers. The key is having the right documentation.

What HIPAA Actually Says

  • Patients can authorize anyone to access their records
  • Healthcare providers CAN share information with family caregivers when appropriate
  • Written authorization makes everything smoother
  • Emergency situations have different rules

The Three Ways to Access Records

Option 1: Patient Authorization (Simplest)

If your parent is mentally competent, they can simply authorize you to access their records.

How to do it:

  1. HIPAA Authorization Form

    • Request the provider's specific form OR use a general HIPAA release
    • Parent signs, authorizing release to you specifically
    • Can specify: all records, specific records, specific time periods
    • Can be revoked at any time

  2. Patient Portal Proxy Access

    • Most health systems allow patients to grant portal access to family
    • Parent logs in and adds you as an "authorized representative"
    • You get your own login credentials
    • Can view records, messages, and test results

  3. Verbal Authorization (Limited)

    • Parent can verbally authorize sharing during appointments
    • Provider may document this in the chart
    • Less reliable than written authorization

Sample HIPAA Authorization Language:

I, [Parent Name], authorize [Provider Name] to release my 
protected health information to [Your Name] for purposes 
of coordinating my healthcare. This authorization covers 
all medical records from [Date] forward until revoked.

Signature: _______________ Date: ___________

Option 2: Healthcare Power of Attorney (Best Long-Term)

A Healthcare Power of Attorney (HCPOA), also called a healthcare proxy, gives you legal authority to make medical decisions AND access records.

Benefits:

  • Works even if parent becomes incapacitated
  • Recognized by all healthcare providers
  • One document covers all providers
  • Survives cognitive decline

How to get it:

  1. Use your state's official HCPOA form (free online)
  2. Parent completes while mentally competent
  3. Some states require notarization
  4. Some states require witnesses
  5. Provide copies to all healthcare providers

Important: HCPOA typically only activates when the patient cannot make decisions. For immediate access, combine with HIPAA authorization.

Option 3: Court-Appointed Guardianship (Last Resort)

If your parent is incapacitated and never created authorization documents, you may need legal guardianship.

When needed:

  • Parent has dementia and never signed POA
  • Parent is unconscious long-term
  • Family disputes about care decisions

Process:

  • Petition family court
  • Medical evaluation required
  • Court hearing
  • Can take weeks to months
  • Costs $2,000-$10,000+

Avoid this by planning ahead. Get HCPOA in place while your parent can still sign.

Step-by-Step: Getting Records from Different Sources

From a Doctor's Office

  1. Call and ask for their "medical records release process"
  2. Request their specific authorization form
  3. Have parent sign (or provide your HCPOA)
  4. Submit form with copy of your ID
  5. Specify exactly what records you need
  6. Ask about fees (they can charge for copies)
  7. Request timeline for receiving records

Typical timeline: 5-30 days (HIPAA allows up to 30)

From a Hospital

  1. Contact the Health Information Management (HIM) department
  2. Request records release form
  3. Be specific: admission dates, types of records needed
  4. Submit authorization with ID
  5. Ask about electronic delivery options (faster)
  6. Request itemized bill separately if needed

Pro tip: Hospital records are often extensive. Ask for discharge summaries first—they contain the key information.

From a Pharmacy

  1. Contact the pharmacy directly
  2. Provide authorization
  3. Request medication history printout
  4. Can usually get same-day
  5. Ask for records from their entire system (not just one location)

From Insurance Companies

  1. Call member services
  2. Request claims history or Explanation of Benefits (EOB)
  3. May need written authorization
  4. Can often access through online portal
  5. Shows all covered services and providers

Useful for: Discovering providers you didn't know about, tracking what tests were done when.

From Medicare

  1. Create a Medicare.gov account for your parent
  2. Request proxy access OR log in with their credentials
  3. Access claims history going back 3 years
  4. Shows all Medicare-covered services
  5. Blue Button feature allows downloading records

Emergency Situations

If your parent is in the ER and you don't have paperwork:

What providers CAN do:

  • Share information if they believe it's in patient's best interest
  • Use professional judgment about family involvement
  • Share general condition information
  • Allow family presence during care

What helps:

  • Being present and involved
  • Explaining your caregiving role
  • Showing you have knowledge of their medical history
  • Remaining calm and collaborative

What to do after:

  • Get authorization signed as soon as parent is able
  • Provide HCPOA documents to hospital records
  • Request copies of ER records for your files

Your Rights and Their Limits

You CAN:

  • Access records with proper authorization
  • Request copies of all medical records
  • Receive records in the format you prefer (when possible)
  • Appeal if records are denied
  • File complaints about HIPAA violations

You CANNOT:

  • Access records without patient consent (exceptions for guardianship)
  • Force providers to share over the phone without verification
  • Access psychotherapy notes (extra protected)
  • Get records immediately (30-day response window is legal)

Building Your Records System

Once you have access, create a sustainable system:

Request Records Routinely

  • After every hospitalization: discharge summary
  • After specialist visits: consultation notes
  • After tests: results and interpretation
  • Annually: complete medication list from pharmacy

Use Patient Portals

  • Set up portal access for every health system
  • Enable notifications for new results
  • Check messages regularly
  • Download records periodically for your files

Maintain Your Own File

  • Keep copies of everything important
  • Update after each provider interaction
  • Use digital storage with backup
  • Share access with appropriate family members

Common Problems and Solutions

Problem: Provider says they need the patient to call personally. Solution: Schedule a call with your parent present, or have them write a letter authorizing you.

Problem: Records are taking too long. Solution: Follow up at 14 days. If over 30 days, file a complaint with the provider's compliance office or HHS.

Problem: Provider charges excessive fees. Solution: HIPAA limits "reasonable" fees. Push back on charges over $0.50/page, or ask for electronic copies (should be cheaper).

Problem: Parent has dementia and can't sign authorization. Solution: If you have HCPOA that's activated, use that. If not, may need to pursue guardianship.

Problem: Sibling is blocking your access. Solution: If you have authorization, providers must honor it. Document conflicts and consider family mediation.

How to Get Medical Records for Elderly Parent: Quick-Start Checklist

Don't wait for a crisis. Take these steps today:

  • Have parent sign HIPAA authorization forms for key providers
  • Set up patient portal access for all health systems
  • Create Healthcare Power of Attorney
  • Provide HCPOA copies to primary care and hospital
  • Request and organize recent medical records
  • Set up a system to capture records going forward

Summary: The Documents You Need

For immediate access:

  • HIPAA Authorization Form (signed by parent)
  • Patient Portal Proxy Access

For long-term/emergency access:

  • Healthcare Power of Attorney
  • Living Will / Advance Directive

To bring when requesting records:

  • Authorization or POA
  • Your photo ID
  • Parent's date of birth and address
  • Specific dates and types of records needed

Related Caregiver Guides

Once you've obtained your parent's records, the next step is keeping them organized for easy access:

Managing a parent's health information is easier when everything's in one place. SteadyWith helps adult children organize medical records, track medications, and coordinate care. Start free today.

View All Posts