If you’re involved in a criminal case and I ask you to sign a HIPAA waiver, that request is not routine paperwork. It serves a specific legal purpose, and it should be handled deliberately.
HIPAA Waivers: What They Are and Why Your Attorney May Need One
What Is a HIPAA Waiver?
HIPAA refers to the Health Insurance Portability and Accountability Act (HIPPA), a federal law that protects the privacy of our medical and mental-health records. A HIPAA waiver (or authorization) is a written document that allows specified medical providers to release health information to certain people (in my case–to your attorney).
Without a valid HIPAA authorization:
- Doctors, hospitals, therapists, and treatment programs generally cannot release records
- Even records that may be critical to your defense remain legally sealed
In short: HIPAA blocks access unless you open the door.
Why Would a Criminal Defense Attorney Need a HIPAA Waiver?
Not every case requires one—but when it does, it’s usually because your medical or mental-health history intersects directly with the charges.
Common situations include:
1. Mental Health Diversion or Mitigation
If you are seeking:
- Mental health diversion
- Sentencing mitigation
- Alternative resolutions based on diagnosis or treatment
Your attorney must often prove:
- A qualifying condition exists
- It existed at the relevant time
- You are receiving, or are willing to receive, treatment
That proof almost always requires medical records, which cannot be obtained without your authorization.
2. DUI or Drug-Related Cases
Medical records may matter where:
- Prescription medications affect impairment
- Medical conditions mimic intoxication
- Blood draws or hospital records are involved
Hospitals will not release toxicology results or treatment notes without a HIPAA waiver—even if law enforcement already has partial information.
3. Injury, Memory, or Capacity Issues
In some cases, records are relevant to:
- Head injuries
- Loss of consciousness
- Cognitive impairment
- Medication side effects
- Ability to form intent
These issues can affect:
- Guilt
- Enhancements
- Credibility
- Sentencing exposure
4. Protecting You from Worse Outcomes
Sometimes the waiver is defensive, not affirmative.
Your attorney may need records to:
- Preempt prosecution narratives
- Control what is disclosed (instead of letting the prosecution subpoena blindly)
- Negotiate from a position of verified facts rather than speculation
What a HIPAA Waiver Actually Does (and Does Not Do)
What It Does
A properly drafted HIPAA waiver:
- Identifies specific providers
- Limits disclosure to specific records
- Allows release only to designated recipients
- Is time-bounded or purpose-bounded when appropriate
What It Does Not Do
A HIPAA waiver does not:
- Automatically give records to the prosecutor
- Waive all medical privacy forever
- Allow unrestricted fishing through your medical history
- Replace attorney-client privilege
Your attorney controls how, when, and whether records are disclosed further—often under court supervision.
Why You Should Not Sign Generic or Overbroad Waivers
This matters.
Signing a blanket HIPAA authorization—especially one drafted by a third party or treatment provider—can:
- Expose irrelevant or damaging history
- Create impeachment material
- Undermine future motions or negotiations
- Open doors that cannot be closed later
A defense-side HIPAA waiver should be:
- Narrow
- Purpose-built
- Strategically timed
Next Step
If you’re unsure whether a HIPAA waiver is necessary in your case—or you’ve been asked to sign one and want to understand the consequences—you can provide your information here for a confidential review: