HIPAA Disclosures to Family and Friends - Of Course I Want My Spouse to Know/Not Know!
02/25/2026 Live WebinarDescription
This webinar explores how to handle disclosures to support systems in all forms, whether it be a spouse, other family member, a friend, or caregiver, and how to weigh a patient’s preferences with the need to effectively communicate status updates, decision making, and care instructions.
Under the HIPAA Privacy Rule, health care providers are permitted to share a patient’s protected health information (PHI) with family members, spouses, friends, or other persons involved in the individual’s care or payment responsibilities, but there are important conditions and safeguards that must be observed. First is the requirement of patient consent. Some patients would want their significant other to know, and others – absolutely not!
Fundamentally, the Privacy Rule seeks to respect and protect patient privacy while still recognizing that personal relationships and caregiving roles often require transparent communication about an individual’s health situation.
If a patient is present and capable of making their own health care decisions, a provider may disclose relevant health information to family members or friends only with the patient’s agreement or after offering the chance to object and the patient does not object. This means verbal consent can suffice in many routine situations, such as explaining mobility limitations to a friend who will be assisting the patient after discharge or discussing treatment with an adult child helping to manage care.
When the patient is not present, unavailable, or incapacitated, HIPAA still allows disclosures if, in the provider’s professional judgment, sharing the information is in the patient’s best interest. For example, during emergency care where the patient cannot communicate, a clinician might update a spouse about a heart attack and ongoing treatment decisions. Similarly, a physician may discuss details by phone with a family member if it will benefit the patient’s care.
Importantly, the Privacy Rule extends beyond legally recognized relatives. A covered entity may share PHI with any individual identified by the patient (including close friends, caregivers, partners, or others involved in care or payment of sad care) without having to verify their legal status. This flexibility ensures that support persons in all forms can be informed when appropriate.
Patients who want to make sure their providers communicate with specific people are encouraged to proactively discuss their preferences with their health care team. A formal advance directive or written authorization can further guide providers and ensure that the right people receive the right information when consent might otherwise be uncertain.
Ultimately, this area of HIPAA balances patient autonomy, privacy protections, and practical needs for communication and is central to understanding when and how PHI can be appropriately disclosed to spouses, family, and friends.
Focus as well on state licensure laws and how they can apply to this situation.
Areas Covered in the Session
- Overview of HIPAA Privacy Rule permissions
- Conditioners where a provider may disclose PHI with patient agreement or non-objection
- Who can qualify as a recipient
- Professional judgement and best interest standards
- Practical steps patients can take
- Examples of State Licensure Laws that Apply to the Health Care Professional
Who will Benefit?
Healthcare providers who have patients with support systems
Why should you Attend?
One should attend so that they are aware of patient preferences regarding communication and instances where information can be given when preferences are unable to be given or are unclear.
Webinar Details
- Date: 02/25/2026
- Time: 12:00 PM - 01:00 PM (EST)
- Registration Deadline: 02/24/2026
- Venue: Live Webinar
Speaker:
Mark R. Brengelman
Attorney at Law, Frankfort, Kentucky
Mark holds Bachelor’s and Master’s degrees in Philosophy from Emory University and a Juris Doctorate from the University of Kentucky. Retiring as a...
Related Events
HIPAA in 2026: What Changed, What’s Coming, and Wh...
Over the last few years, the U.S. Department of Health and Human Services, Office for Civil Rights h..
HIPAA Breach Risk Assessment for Ransomware Attack...
HIPAA Breach Risk Assessments determine whether a Ransomware attack constitutes a HIPAA Breach that ..
Psychotherapy notes - Are They Really Private Unde...
HIPAA is often described as giving patients broad rights to access their own medical records, and in..
Upcoming Webinars
HIPAA in 2026: What Changed, What’s Coming, and Wh...
Over the last few years, the U.S. Department of Health and Human Services, Office for Civil Rights h..
HIPAA Breach Risk Assessment for Ransomware Attack...
HIPAA Breach Risk Assessments determine whether a Ransomware attack constitutes a HIPAA Breach that ..
E&M Coding Guidelines and Documentation Requir...
During this presentation we will Review current documentation guidelines for different location that..




