Part 2 adult personal-representative consent

Editorial approval scope: The team checked current source fidelity, scope boundaries, dates, arithmetic, reader usefulness, practical workflow, and general-information limitations.

Current rule checkpoint

Under live 42 CFR 2.15(a)(1), a personal representative may give Part 2 consent for an adult patient only when a court has adjudicated that patient as lacking capacity to make their own health-care decisions for a reason other than age. Current section 2.31 supplies the written-consent requirements. The HHS fact sheet identifies February 16, 2026 as the amended framework's compliance date.

Representative status needs source evidence

The current Part 2 rule connects representative consent to the adjudication. Verify identity, order, appointment, legal authority, scope, restrictions, effective period, successor status, conflict rules, and the representative's connection to the proposed consent.

The consent itself remains scoped

Document patient, recipient, information, purpose, expiration, revocation, signature, date, delivery, and any required accompanying notice. A representative's broad appointment does not convert one consent into indefinite access or unrestricted redisclosure.

Keep the patient involved where possible

Use accessible language, communication supports, preferred format, adequate time, assent or objection processes where applicable, and a route to raise concerns. Clinical, legal, privacy, and representative roles should remain distinct.

Verify the chain from court finding to signer

Preserve the operative court order, appointment, applicable representative law, identification, acceptance or qualification document, scope, restrictions, start date, end date, and successor information. Confirm that no restoration, modification, appeal, removal, conflict order, or jurisdictional change has displaced the authority.

Relationship, next-of-kin status, a financial power of attorney, insurance subscription, facility contact designation, or day-to-day caregiving does not by itself establish the personal-representative route in paragraph (a)(1). Do not confirm patient or treatment status while requesting missing proof.

Prepare a complete, decision-specific consent

Identify the patient, specific recipient or permitted class, information, purpose, expiration or event, revocation process, consequences of refusal, possible redisclosure, signature, and date required by the current rule. Explain the form accessibly and provide a copy. Verify that the representative signs in the documented capacity.

Match the consent to the proposed transmission immediately before use or disclosure. A consent for payment does not automatically cover litigation, family access, marketing, research, or another episode. A record-access request and a consent for disclosure may also require different analysis.

Address the patient's voice and competing interests

Offer the patient communication, language, disability, and decision supports and record preferences or objections where possible. An adjudication does not make the patient absent from care or erase dignity, safety, and clinical participation.

Escalate requests involving representative self-interest, family conflict, suspected exploitation, custody of records, litigation against the patient, or disclosure likely to cause harm. Separate the clinical recommendation, representative's legal choice, privacy decision, and organizational response.

Control access and later changes

Record consent version, signer's authority, recipient, information, purpose, expiration, restrictions, delivery, revocation, disclosures made, and reassessment trigger. Apply the scope to portals, release systems, billing, messaging, exports, and vendors. Reverify the order and appointment after any reported change.

Test the consent against the planned transmission

Before release, compare the source files, date range, attachments, metadata, recipient endpoint, purpose, and delivery method with the signed scope. Remove unrelated patients and services, correct inaccurate indexing, and obtain a second review for bulk records, litigation, research, or a recipient with a conflict. Confirm receipt without exposing additional information.

If the representative requests more after delivery, treat it as a new request. Recheck authority, consent, purpose, and patient interests instead of assuming the first signature covers follow-up. Preserve corrections, withdrawal, revocation, and any disclosure made before the change.

A representative can ask which court document supports the role, what consent is being requested, whether a narrower data set works, how long authority and consent last, how the patient is involved, and how to report a change or concern. Clear answers reduce both delay and excess disclosure.

Example

Twelve representative consents are sampled. Nine have adjudication, authority, representative identity, matched scope, consent elements, signature, and delivery evidence; three rely on family relationship. Readiness is 9 of 12 consents.

Representative-consent checklist

• authenticate the court adjudication and current representative appointment;
• confirm authority for the exact health-care and disclosure decision;
• complete every applicable section 2.31 consent element;
• support the patient's communication, preferences, and safety;
• limit systems and disclosures to the verified recipient, purpose, information, and time; and
• record reliance, revocation, changes, disputes, and reassessment.

Personal-representative authority is document-specific and jurisdiction-specific. Family role, payment responsibility, or possession of records cannot replace the required chain of authority.