Family
HIPAA, Part 2, and family authorization during an inpatient stay
A licensed campus will often refuse to confirm that an adult is even there unless that adult has signed a release. Paying the bill, sharing a last name, or holding a financial power of attorney does not automatically open the chart. This page names the two privacy layers families meet and the papers that actually move information. It is not legal advice and it is not a form bank.
Last reviewed 26 September 2026. Editorial desk. Who publishes this. Educational only. Not legal advice.
Two layers, not one acronym
HIPAA is the general health-privacy rule for most U.S. covered entities. HHS publishes consumer materials at hhs.gov/hipaa/for-individuals.
42 CFR Part 2 is the extra federal rule for many substance-use disorder records. It is stricter than ordinary medical privacy in several places. SAMHSA publishes the rule and FAQs at SAMHSA confidentiality regulations.
A residential addiction program is often bound by both. That is why admissions will not “just tell you if they arrived.” The refusal is usually the law, not a brush-off.
What family can usually hear without a release
- Public facts the campus already posts: visiting sheet, packing list, insurance desk hours. See visiting policy and packing list.
- Whether a written authorization is on file for you, once you identify yourself the way the campus asks.
- In a true emergency, limited disclosure to people needed to prevent serious harm — decided by the clinicians, not by a family script.
Marriage, parenthood of an adult child, or wiring the deposit does not, by itself, create a right to the chart. Questions for the first admissions call: first-call script.
Release of information vs power of attorney
Keep the papers separate in your head:
- Campus release of information (ROI). The program’s own HIPAA / Part 2 form. It names who may hear what, for how long, and for what purpose. Ask for this form on day one. The patient usually signs it on campus.
- Financial power of attorney. May let someone pay a bill or talk to a bank. It does not automatically authorize clinical updates.
- Healthcare proxy / medical POA / advance directive. May let someone make treatment decisions if the patient cannot. The campus still often wants its ROI before staff will discuss the stay with that person by phone.
A lawyer licensed in the patient’s state reads the actual documents. This site does not draft, witness, or store them. Do not invent a form and do not pressure staff to skip theirs.
What to ask the desk, in writing
- Send your ROI form. Who must sign it, and can it name more than one family member?
- Does Part 2 require extra wording on your form?
- If a healthcare proxy already exists, what copy do you need, and does it still require your ROI?
- Who on staff returns family calls, on which facility-owned number, and on what days?
- What will you confirm if no release is on file — nothing, or only that the line reached admissions?
Write the answers on the family brief. Do not use a rented tracking number. See red-flag glossary.
Minors and adults who cannot consent
Rules for a minor, a person under guardianship, or a person who lacks capacity are state-specific and fact-specific. Do not treat this page as a commitment or guardianship guide. If the person is in immediate danger, call 911. Mental-health crisis: 988. Treatment information for the adult: SAMHSA 1-800-662-HELP. How those lines differ: 988, 911, and SAMHSA.
What this page does not do
It does not give legal advice. It does not publish sample authorization language you can copy onto letterhead. It does not tell you how to obtain records against a patient’s wishes. It does not list facilities. It is not a placement service. Confirm a program on FindTreatment.gov and the state directory.
Educational only. Not legal advice. Default crisis line: SAMHSA 1-800-662-HELP. Locator: FindTreatment.gov. Citation-worthy text: llms.txt.