In most cases, a doctor cannot share your medical information with your spouse unless you give permission. Being married does not automatically grant your spouse access to your health records or the right to receive updates from your healthcare provider. Federal privacy law, known as HIPAA, treats your medical information as yours alone, regardless of your marital status.
That said, the rules are more flexible than many people realize. There are several common situations where a doctor can, and often does, share information with a spouse.
When Your Doctor Can Share With Your Spouse
The simplest path is your own consent. If you’re sitting in the exam room and your spouse is with you, your provider can reasonably assume you’re comfortable having your health discussed in front of them. You don’t need to sign a form for this. Your presence and lack of objection count as informal permission. The same applies if your spouse is on the phone and you tell the doctor it’s fine to talk.
You can also sign a written HIPAA authorization form that specifically names your spouse as someone allowed to receive your health information. This is a more formal route, and it gives your spouse access even when you’re not in the room. Many hospitals and clinics offer these forms during intake paperwork.
What Happens in an Emergency
If you’re unconscious, in surgery, or otherwise unable to communicate, your doctor can share information with your spouse without your direct permission. The provider uses their professional judgment to decide whether disclosure is in your best interest, and they limit what they share to what your spouse needs to know about your care or payment. For example, a surgeon who performs emergency surgery can update your spouse on your condition while you’re still under anesthesia.
This exception exists because requiring written consent in every emergency would create dangerous delays. Once you regain the ability to communicate, your provider should defer to your wishes again.
Personal Representatives Have Full Access
There is one situation where a spouse gets the same access rights as the patient: when they are designated as a “personal representative” under the law. This typically means they hold a healthcare power of attorney or have been appointed by a court as a legal guardian for medical decisions.
A personal representative can request a complete medical record, including mental health information, with some narrow exceptions. Psychotherapy notes that a therapist keeps separately from your main chart, for instance, are not included in this right of access. The power of attorney document itself determines when the authority kicks in. Some are effective immediately, while others only activate if the patient loses the capacity to make their own decisions.
One important safeguard: a provider can refuse to treat someone as a personal representative if they believe the patient has been, or may be, subject to violence, abuse, or neglect by that person. If treating someone as the personal representative would endanger the patient, the provider can override the legal designation based on their professional judgment.
How to Revoke Access
If you previously authorized your spouse to receive your medical information and want to take that back, you have the right to revoke the authorization at any time. The revocation must be in writing, and it takes effect once your healthcare provider receives it. It cannot undo information that was already shared while the authorization was active, but it stops any future disclosures.
The original authorization form is required to clearly explain your right to revoke and how to do it. If the form doesn’t spell out the process directly, it should point you to the provider’s Notice of Privacy Practices, which will contain instructions.
Sensitive Health Information Gets Extra Protection
Certain categories of health information carry stricter rules even beyond standard HIPAA protections. Substance abuse treatment records, for example, are governed by a separate federal regulation that requires explicit written consent before any disclosure, including to a spouse. Psychotherapy session notes kept apart from your regular medical chart also have heightened protection and cannot be shared through the normal personal representative pathway.
If you’re receiving care in one of these sensitive areas and want your spouse involved, you’ll generally need to sign a specific release that names them. A general HIPAA authorization may not be sufficient.
After a Patient’s Death
A deceased person’s health information remains protected for 50 years. During that time, the personal representative of the deceased (often the executor of the estate or someone with legal authority to act on their behalf) can access the records and authorize disclosures.
A surviving spouse who was involved in the patient’s care or payment before death can receive relevant health information without being the personal representative, as long as sharing it doesn’t contradict any preference the deceased person expressed while alive. This disclosure is limited to information connected to the spouse’s involvement in care or payment. For anything beyond that, a personal representative must provide written authorization.
What This Means in Practice
Marriage alone does not create a right to your spouse’s medical information. If you want your spouse included in your care, the most reliable step is to complete a HIPAA authorization form at your provider’s office and, if appropriate, establish a healthcare power of attorney. These two documents serve different purposes. The HIPAA authorization allows access to your records and information. The power of attorney grants decision-making authority if you become unable to make choices yourself.
If you want to keep your medical information private from your spouse, you have every legal right to do so. Simply don’t sign an authorization naming them, and let your provider know your preference directly. Your doctor is legally obligated to respect that boundary, even if your spouse calls the office asking for updates.