Medical Records After Death: HIPAA Rights for Families
Quick Answer
Family members and executors can access a deceased person's medical records. You'll need to provide documentation including a death certificate and proof of your authority (such as being named executor, next of kin, or legal representative). HIPAA continues to protect the deceased's privacy, so providers can only release records to those with legitimate authority.
Understanding HIPAA After Death
When someone passes away, questions often arise about accessing their medical records. HIPAA provides specific rules that balance family access needs with the privacy rights of the deceased patient. The rules depend on your relationship to the deceased and your legal authority.
Key Principles
- HIPAA privacy rules continue to apply after a patient dies
- Designated family members can access records with proper documentation
- Providers must verify your authority before releasing information
- The deceased's documented wishes must be respected
- Only authorized individuals may access the records
Who Can Access a Deceased Person's Medical Records?
Executor of the Estate
The person named in the will to manage the deceased's affairs can typically access medical records. You'll need to provide a copy of the will or court documents showing your appointment as executor.
Legal Representative
If the deceased left instructions appointing someone to handle medical matters (healthcare proxy, medical power of attorney), that person may access records. You'll need to provide the executed legal document.
Next of Kin
In some cases, immediate family members (spouse, adult children, parents, siblings) can access records if no executor or legal representative exists. Requirements vary by state.
Personal Representative Designated by Law
Each state has succession laws that designate who can act if no will exists. This typically follows the order: spouse, then adult children, then parents, then siblings.
Someone with Valid Authorization
If the deceased signed a document authorizing someone to access records after death, that person can request them.
How to Request a Deceased Person's Records
Gather Required Documentation
Collect the death certificate and documents proving your authority: the will (for executor), court documents (for legal guardianship), legal power of attorney, healthcare proxy, or state succession documents showing your relationship and authority.
Contact the Healthcare Provider
Call the provider's medical records department and explain that you're requesting records for a deceased patient. Ask what documentation they require and their process for handling requests for deceased patients.
Submit Your Request in Writing
Send a formal written request including the deceased's full name, date of birth, date of death, the records you want, your name, relationship to the deceased, and your authority to request them.
Include Supporting Documentation
Attach copies of death certificate, will, court documents, or other proof of your authority. Providers will verify your documentation before releasing records.
Specify the Format
Indicate whether you want paper copies or electronic records. Ask about associated costs. Providers may charge reasonable copying and mailing fees.
Wait for Response
Providers typically have 30-60 days to respond to requests for deceased patients. Some may take longer if additional verification is needed.