Dad says you may talk to his doctor. The receptionist says, "We cannot speak with you because of HIPAA." Do not start with a lawyer. Start by finding out what the office needs from Dad.
Local option: New Plan Care gives families in the St. Louis area in-home help so a parent can stay home: companionship, help with bathing and dressing, meals, and overnight care. Call (314) 405-0887.
The narrow job is permission to discuss his care with you. That is usually handled with the provider's own authorization or permission form. A durable power of attorney for health care is a different tool. It can appoint someone to make decisions under stated conditions. One document opens a conversation. The other may transfer decision-making authority when its conditions are met.
Keep those jobs separate. Dad may be willing to let you hear the plan without giving you authority to make it.
First, ask the office for the smallest form that works
Call the clinic and say: "Dad wants the care team to discuss his appointments, medications and instructions with me. What form does he need to sign, and can you send it directly to him?"
Ask whether the office calls it an authorization, release of information, permission to discuss care, proxy access or something else. Those labels are not interchangeable. A records-release form may let the office send documents while doing nothing about phone conversations. Portal proxy access may let you view information online without authorizing you to make decisions.
Under the federal privacy rule, a provider may discuss information relevant to Dad's care or payment with a person Dad identifies, if Dad agrees or does not object. The disclosure should stay tied to that person's involvement (45 C.F.R. § 164.510(b)). HIPAA does not require that this agreement always be written, although a provider may choose to document it or require its own workflow. That distinction matters when somebody at the desk says the law forbids the conversation. The law may permit it while the office still wants its form completed.
Do the form yourself when the job is narrow
A lawyer is generally unnecessary when Dad understands the choice, wants one office to speak with one named person and is comfortable signing that office's standard form.
Before he signs, check the form line by line:
Who may disclose information? Name the clinic, hospital system, pharmacy or health plan precisely. "All providers" may not tell a particular records department what to do.
Who may receive it? Use your full name and the phone number or address the office will use to identify you.
What information is covered? Match the permission to the job. Appointment information, medication lists, visit instructions and billing questions may be enough. Do not request the entire chart because the form has an inviting checkbox.
Does the form permit discussion, release of copies or both? If you need to ask questions by phone, a document that only authorizes mailing records may leave you standing outside the same door.
When does permission end? A HIPAA authorization must contain an expiration date or an expiration event related to Dad or the purpose of the authorization (45 C.F.R. § 164.508(c)). Read what the form actually says instead of assuming it lasts indefinitely.
How does Dad revoke it? A valid authorization must explain his right to revoke it in writing and any exceptions to that right (45 C.F.R. § 164.508(c)). He remains in control of the permission.
Where does the completed form go? Get the department name, delivery method and a phone number for confirmation. A signed form in your glove box has excellent privacy and no practical value.
Test the form before you need it
After the office processes it, call from the number listed on the form. Ask the staff member to confirm what they can now discuss with you. Do not ask for a medical judgment as the test. Ask something ordinary: the time of the next appointment, whether you may receive visit instructions, or which number handles medication questions.
Then ask whether the permission follows Dad across the whole health system or only that office. Hospital departments, independent physician groups, laboratories, pharmacies and insurers may keep separate records and separate authorization processes.
Keep a simple list with the organization, form used, delivery location, expiration rule and the date the office confirmed it was active. This is paperwork maintenance, not a family constitution.
Hire legal help when the form is being asked to do a lawyer's job
Stop treating this as a do-it-yourself release when Dad wants you to make health care decisions if he cannot, when several existing documents conflict, or when the office says someone else already holds legal authority.
Legal review is also sensible if Dad wants unusual limits, wants different people responsible for different decisions, has documents signed in another state, or cannot clearly explain what he is authorizing. Missouri durable power of attorney law has specific execution requirements, and health care authority must be expressly granted rather than guessed from a general family understanding (Missouri Revised Statutes §§ 404.705 and 404.710).
A privacy authorization does not make you Dad's health care decision-maker. It does not make you responsible for his bill. It does not give you authority over his bank account, home or driving. It does not cancel his right to speak for himself.
If the dispute is only that the office will not recognize a properly completed form, ask for the privacy officer or health information management department before paying a lawyer to make the same phone call. Bring the blank form, the signed copy, proof of delivery and the office's stated reason for refusing it. That paper trail lets someone identify the actual defect.
Give Dad the smaller choice
Do not walk in asking for control. Put the immediate job on the table: "Would you sign the clinic's form so I can hear the instructions and help with the next appointment? You still make the decisions."
If he says yes to that and no to everything broader, take the yes. The point is not to assemble every possible legal document in one evening. The point is to open the one channel he has agreed to open.
If you need the larger map before deciding what to ask for, use Start Here. The underlying authorities for the privacy and Missouri document rules are identified on the Sources page.
Tonight's move: call the doctor's office, ask for the exact form that permits staff to discuss appointments, medications and instructions with you, and have the office send that blank form directly to Dad.