HIPAA generally treats a parent as a minor child’s personal representative when the parent has the relevant authority under applicable law. A custody dispute does not automatically give every parent unlimited record access or eliminate a parent’s rights. The custody order, state law, and type of care matter. [1]
Rules that determine the answer
Exceptions can apply where the minor lawfully consents to care, another person is legally authorized to consent, or the parent agrees to a confidential relationship under the rules. Providers also have discretion under specified abuse, neglect, or endangerment circumstances. HIPAA’s access right follows the scope of personal-representative authority; it does not decide the underlying custody case. [2]
Permission to receive information and authority to make treatment decisions are related but may not be identical. A court subpoena or litigation request raises separate disclosure rules. Where records involve sensitive minor-consented care, the particular state statute can be decisive, so a general statement that “HIPAA always lets parents see everything” is unreliable. [1] [2]
What to check before taking the next step
- Give the provider the complete current custody or guardianship order, not only a summary.
- Identify the records requested and the legal authority supporting access.
- Ask for the written basis of a denial and whether a review process applies.
- Consider state-law rights and court clarification where the order or decision-making authority is disputed.
Practical example
A parent retains health-care decision authority despite limited physical custody. The provider must evaluate that legal authority and applicable exceptions rather than deny access solely because the child primarily lives with the other parent.
For related situations, see lawyers for medical privacy violations and HIPAA and court testimony.
Primary sources
Sources checked: October 31, 2026.