How to Get Proxy Access to a Parent's Patient Portal

If you help an aging parent with their health care, you’ve probably found yourself juggling their appointments, refill requests and test results from your own phone. Many caregivers end up logging in with their parent’s username and password. It works, until a security code goes to a phone you don’t have, or the health system locks the account.

There’s a better way. Most patient portals offer proxy access: your own login that lets you see and act on your parent’s account, with a record showing that you, not they, did it. This guide walks through the 2 routes to getting it, the legal paperwork that may be required and the settings to check once you’re in.

What proxy access is, and why not just share a password

Proxy access links your portal account to your parent’s account. Once approved, you switch between your own record and theirs from one login. Depending on the health system and the level granted, a proxy can typically:

• See upcoming appointments and visit summaries
• Read test results
• Message the care team
• Request prescription refills
• View and pay bills
• Schedule or cancel appointments

Sharing your parent’s password feels simpler, but it causes real problems. Many portals’ terms of use prohibit it. Two-factor codes go to your parent’s phone or email. Messages you send appear to come from your parent, which can confuse the care team. And if something goes wrong, there’s no clear record of who did what. Proxy access fixes all of that.

Key takeaway: Proxy access gives you your own login and a clear audit trail. It’s safer for your parent and more useful for you than sharing their password.

Route 1: Your parent invites you

If your parent can still make their own decisions, this is usually the fastest option. Many health systems that use Epic’s MyChart, for example, let the patient invite a family member directly from their account. Menu names vary, but look for terms like Share My Record, Sharing Hub or Friends and Family Access.

A typical flow looks like this:

1. Create your own portal account at the same health system, if you don’t already have one. Some systems require the proxy to be at least 18 and to have their own account.
2. Your parent logs in and opens the sharing or proxy menu.
3. They invite you by entering your name and email address and choosing the level of access.
4. You accept the invitation from the email, sign in to your own account and verify their details, often their date of birth.
5. Switch accounts inside the portal to see their record.

If your parent struggles with technology, sit with them and do it together. It usually takes about 10 minutes. Health systems also typically offer a paper or online proxy request form that the patient signs, if the invitation option isn’t available.

Doing it with more than one health system

Your parent may see a primary care doctor at one system, a cardiologist at another and use a separate lab. Each needs its own proxy setup. Make a list of every portal your parent uses before you start.

Route 2: Your parent can’t consent

If your parent has dementia, a serious illness or another condition that prevents them from making decisions, they can’t send an invitation. In that case, you need legal authority, and you’ll submit a proxy form to the health system’s medical records or health information management office.

Under HIPAA, the person who can act for an adult is called a personal representative. The US Department of Health and Human Services says this is someone with authority under state or other law to make health care decisions for the individual. Common examples:

To apply:

1. Find the health system’s proxy or caregiver access form, usually on its portal help page or medical records page.
2. Fill it out, naming yourself as the proxy and your parent as the patient.
3. Attach a copy of your health care power of attorney, guardianship order or other legal documents.
4. Submit it through the method listed, which may be online upload, email, fax or mail.
5. Watch for an activation email, then link the access to your own portal account.

HHS also notes that a provider can decline to treat someone as a personal representative if it reasonably believes that person has abused or endangered the patient. That’s a safeguard, not a common obstacle.

This is general information, not legal advice. Laws on health care powers of attorney and guardianship vary by state, so talk to an elder law attorney if you’re unsure which documents you need.

What if you don’t have legal paperwork yet?

You still have options while you sort out the documents:

• Ask your parent to sign the health system’s proxy form now, while they can. This is the single best thing you can do in advance.
• Get a health care power of attorney in place. Many states provide standard forms, and an attorney can help.
• Be present and involved. HHS says providers may share relevant information with family members involved in a patient’s care when the patient doesn’t object or, if the patient can’t agree, when the provider judges it’s in their best interest. You may not get portal access, but you can talk with the care team.

Don’t forget Medicare and insurance

Portal access covers your parent’s doctors, not their insurer. If your parent has Medicare, they can authorize 1-800-MEDICARE to talk with you using Form CMS-10106, Authorization to Disclose Personal Health Information. According to CMS, it can be submitted through your parent’s secure Medicare.gov account or by mail, and your parent can choose whether to share all information or only certain kinds, and for how long.

Medicare Advantage plans, Part D drug plans, supplemental insurers and pharmacies each have their own authorization processes. Call the number on each card and ask how to add an authorized representative.

Settings to check once you’re in

Once your proxy access is live, take 15 minutes to set things up:

1. Notifications. Turn on alerts for new messages, results and appointment changes in your own account settings.
2. Access level. Confirm whether you have full access or limited access, such as scheduling and billing only. Request a change if needed.
3. Contact preferences. Decide whether reminders should go to you, your parent or both.
4. Medication list. Review it against the bottles at home and flag differences to the care team.
5. Security. Use a unique password and two-factor login for your own account. A password manager makes this painless.
6. Shared calendar. Add appointments to a family calendar so siblings or other caregivers stay in the loop.

When results come in, our guide to reading lab results in your patient portal explains what you’re looking at. If your parent’s care includes home health visits or remote monitoring, see how home health agencies and remote patient monitoring feed data back to the care team.

Where to start this week

1. List every health system, specialist, lab, pharmacy and insurer your parent uses.
2. Create your own portal account at each health system.
3. If your parent can consent, have them invite you or sign each proxy form now.
4. If they can’t, gather your health care POA or guardianship papers and submit proxy forms.
5. File Medicare’s CMS-10106 authorization and contact other insurers.
6. Set up notifications and a shared family calendar.

If your parent later changes doctors, our guide to transferring medical records to a new doctor covers the next step.

The bottom line

Proxy access is one of the most useful, and most overlooked, tools for family caregivers. If your parent can still decide for themselves, get it set up now with a simple invitation or signed form. If they can’t, a health care power of attorney or guardianship order is the key. Either way, you’ll stop guessing at passwords and start seeing the full picture of their care.

Sources

• HHS: Personal representatives — who can act for an adult under HIPAA, including health care POA and guardians
• HHS: Can personal representatives access health information based on a non-health care power of attorney? — limits of financial or general POAs
• HHS: When can a family member access an individual’s health information? — sharing with family involved in care
• HHS: Health information of deceased individuals — executors and administrators as personal representatives
• CMS: Form CMS-10106, Authorization to Disclose Personal Health Information — letting Medicare share information with a caregiver