Answers · Medical practices

Can a practice talk to a patient’s family on the phone?

Usually yes: on HIPAA family member phone calls, a practice may share what a relative needs for their part in the patient’s care, unless the patient objects. HIPAA doesn’t require proof of identity. Staff still use judgment and follow the patient’s recorded wishes.

Last updated November 2, 2026

HIPAA family member phone calls: what the rule says

The patient is available. Under 45 CFR 164.510(b), a provider may share with family and friends involved in care if the patient agrees or doesn’t object (HHS FAQ 2087).

The patient is absent or can’t decide. The provider may share if, in its professional judgment, that’s in the patient’s best interest. It isn’t required to, and can wait until the patient can agree (HHS provider guide).

Only what’s relevant, either way: what the person needs for their part in the patient’s care or payment.

No proof of identity. If a caller says they’re family or a friend involved in care, HIPAA doesn’t require proof, though a practice may set its own checks. For anyone else, staff must be reasonably sure the patient asked that person to be involved (HHS FAQ 534).

The same rules bind anyone who answers for you, including an AI virtual receptionist. General information, not legal or clinical advice. Rules differ by state and province and change over time, so check yours.

Personal representative HIPAA rules: when a relative stands in

HIPAA treats a personal representative as the patient, within their authority (45 CFR 164.502(g), HHS guidance). State law decides who has that authority.

Adults

Someone with legal authority to make health care decisions, such as a health care power of attorney or a guardian. A limited power covers only its subject.

Minors

Usually a parent, except when the minor may consent alone and does, someone else is authorized to consent, or the parent agreed to confidentiality.

After a death

Someone with legal authority over the estate, such as an executor or administrator, or next of kin where the law says so.

The exception

A provider may refuse to treat someone as a representative if it reasonably believes they abuse or endanger the patient, and that it isn’t in the patient’s interest.

When a family member calls: a front desk decision tree

A starting point for your privacy officer. The first yes decides.

A caller says they’re calling about a relative or friend who is a patient.

1Is someone in danger right now?

Yes911 Hang up and call 911. Someone who may harm themselves can also call or text 988. When to tell a caller to call 911
2Has the patient objected to sharing with this person?

YesStop Share nothing. Take a message.
3Is the caller a personal representative on file?

YesRepresentative After the identity check your policy sets, treat them as the patient, within their authority.
4Is the caller involved in the patient’s care, with no objection, or the patient absent and sharing in their interest?

YesInvolved Share only what their role needs, such as a pickup or a ride home.

Everything elseAnyone else, or any doubt: confirm nothing, not even that the person is a patient. Take a message.

Based on HHS FAQ 2087, FAQ 534 and HHS guidance on personal representatives.

Can a doctor talk to family without consent? The US and Ontario

How HIPAA and Ontario’s PHIPA treat a patient’s family on the phone
Item	United States (HIPAA)	Ontario (PHIPA)
Family involved in care	May share what’s relevant unless the patient objects	Disclosure to a non-custodian generally needs express consent, unless PHIPA permits it
The care team	Disclosures to a provider for treatment are exempt from minimum necessary	“Circle of care”: custodians may assume implied consent to share with other custodians for the patient’s care
Who decides for the patient	A personal representative under state law	A substitute decision-maker, from a ranked list that includes a guardian, an attorney, a spouse or partner, a child or parent, a sibling, and last the Public Guardian and Trustee
Proof of identity	Not required for family or friends involved in care	AFHTO advises confirming a calling patient’s identity first
Patient injured, ill or incapacitated	Share if it’s in their best interest	PHIPA allows contacting a relative or friend without consent
The patient says no	Don’t share with someone the patient excluded	Consent can be withheld or withdrawn at any time, not retroactively
Teenagers	A parent is usually the representative, with exceptions	No fixed age: a capable child decides; under 16, a parent may too, with exceptions

Sources: HHS FAQ 2087, FAQ 534, personal representatives, minimum necessary; IPC, Circle of Care (2015), IPC, consent and substitute decision-makers, IPC, PHIPA FAQs (2005), AFHTO (2016). Other provinces have their own laws. General information, not legal or clinical advice. Rules differ by state and province and change over time, so check yours.

When a spouse calls: what 365vox’s agent does

It answers general questions from your rules, such as how a relative becomes an authorized contact or where to send a power of attorney. It takes a message from anyone calling about a patient: who they are, who it’s about, why, and a number. It never confirms anything about a patient, not even that the person is one, unless your rules allow it.

It doesn’t check the chart, so your team checks the file before calling back. Your wording goes in step 9, Business rules. For an agent that hears health information, the call email only says that a call came in. The details stay in your 365vox portal, behind your sign-in.

Family on the phone: questions

Do HIPAA family member phone calls need a signed release first?

No. HIPAA lets a provider share relevant information with family or friends involved in care when the patient agrees or doesn’t object. No signed authorization is needed, and documenting the agreement isn’t required. A list of authorized contacts in the chart still speeds up call-backs.

Can a practice confirm an appointment time to a patient’s spouse?

Often, if the spouse is involved in the patient’s care, such as driving them there, and the patient hasn’t objected. HIPAA limits it to what that role needs. In Ontario, the patient’s recorded choice usually decides, since a spouse isn’t a custodian. When unsure, take a message.

Can staff tell a caller whether someone is a patient at the practice?

A safe default is to neither confirm nor deny, and take a message: being a patient can reveal a condition. In Ontario, the IPC’s PHIPA FAQ says a facility may confirm that someone is a patient or resident, and the status of their health condition, unless the patient asked otherwise. Ask your privacy officer how that applies to your practice.

What if a parent calls about a 17-year-old’s visit?

Under HIPAA a parent is usually the personal representative, unless the law let the teen consent alone and they did, or the parent agreed to confidentiality. In Ontario there’s no fixed age: a capable teen decides. Take a message and let the clinician decide.

Can we talk to an adult child who manages a parent’s care?

Yes, if the parent agrees or doesn’t object, or can’t decide and sharing is in their interest, limited to the child’s role. If the child holds a health care power of attorney in effect, HIPAA treats them as the patient within it: keep a copy on file. See also after-hours family calls.

Can we share information with family after a patient dies?

Under HIPAA, whoever has legal authority over the estate, such as an executor, is treated as the patient for relevant information. In Ontario, the IPC’s FAQ lists disclosures without consent to identify a deceased person or to help a spouse or relative make decisions about their own care. Ask your privacy officer.

Can an AI receptionist verify a power of attorney?

No. 365vox’s agent doesn’t check documents or your chart, and never decides who is authorized. It can say how to send a document, if your rules say how, and take the caller’s details. Your team checks the file and calls back.

What if the patient told us not to share with a certain relative?

Then don’t, even if that relative is involved in care. HHS’s guide gives the example of a nurse who may not discuss a patient’s condition with the patient’s brother after the patient said not to. Flag it in the chart where staff will see it.

Kind to families. Careful with every patient’s privacy.

No credit card required. Cancel anytime.Just forward your phone line — we'll handle the rest.

Or hear it first — call our AI receptionist(450) 367-9990

Not ready to start your free trial? Book a no-obligation discovery call.