How to get MyChart proxy access for a family member

What proxy access is, and what it is not

MyChart is Epic's patient portal, and proxy access is Epic's mechanism for letting one person act inside another's record. Epic sets almost no policy itself. The four shapes most organizations configure, using Yale New Haven Health's tiers as the canonical example:

• Pediatric proxy: full parental access for young children.
• Teen limited proxy: applied automatically in the early teens; typically allergies, immunizations, messaging, and scheduling. Full teen access needs teen, parent, and provider signatures, and terminates automatically at 18.
• Adult proxy: one adult grants another access, through the Sharing Hub or an authorization form.
• Incapacitated adult proxy: a form signed on the patient's behalf, plus power-of-attorney, conservatorship, or guardianship documents.

Two boundaries: proxy access is not a healthcare power of attorney (Mass General Brigham says its feature is “not the same thing as a health care proxy”), and the portal is not the full legal record. Each organization configures what a proxy sees, and it is always a subset of the complete chart.

The adult-to-adult flow: getting access to a parent's record

The in-portal path, where both of you have MyChart accounts at the same organization:

1. The patient signs in to their own MyChart account and opens Sharing Hub.
2. They choose Manage friends and family access, then Invite friends or family, and enter your name and email.
3. Open the invitation email and sign in to your own MyChart account at the same organization.
4. Verify the patient's date of birth to accept. Cleveland Clinic denies access after three wrong entries.
5. Use the Switch menu in MyChart to move between your record and theirs.

The key fact of the whole flow: the parent grants it. The adult child cannot take it. If your parent does not use the portal, or the organization requires paperwork for adult-to-adult access, there is always a form path: Cleveland Clinic requires a signed form for adult-to-adult access, and Yale New Haven Health takes its Adult Access Authorization form by email or fax, with about 3 business days of processing.

When the patient cannot consent

Incapacity means paperwork, not clicks. The pattern across organizations: the organization's proxy form signed on the patient's behalf, plus the legal documents behind your authority, healthcare power of attorney, conservatorship, or guardianship. Two concrete examples: M Health Fairview re-validates court-appointed guardians every five years, and Cleveland Clinic processes dependent-adult caregiver forms with court or POA papers in 1 to 2 weeks.

The legal floor under all of it: under HIPAA, a personal representative, someone with state-law authority to make the patient's health decisions, must be treated as the patient, with the full right of access to the record.

The teen-access cliff

Parents are often surprised to lose access while their child is still a minor. The cause is state minor-consent law: once a teen can consent to certain care on their own, reproductive health, mental health, substance use, the organization must wall those records off from parents, and most do it by downgrading proxy access automatically at a set age.

• M Health Fairview (Minnesota) downgrades at 12; full teen access needs patient and provider signatures. The age-12 policy drew a parental lawsuit, which is how sharp this cliff can feel.
• Novant Health (North Carolina): limited proxy for ages 12 to 17, with notes, the problem list, and sensitive results withheld.
• Cleveland Clinic: parents keep access for teens 13 to 17, but clinical notes are withheld.
• UCLA Health: at 12 the teen can activate their own account, and the parent's view narrows to allergies, immunizations, and test results, with the teen's verbal consent.

At 18 everything resets, everywhere. Cleveland Clinic states it plainly: you automatically lose access on the patient's 18th birthday. From that day, the path is the adult-to-adult flow above, granted by your now-adult child.

Same feature, five names

Proxy access must be set up separately at every organization your family member uses, and each one names it differently:

What proxy access does not get you

A proxy view is whatever the organization configured, not the complete chart. When you need everything, or the organization limits or refuses portal proxy, the law provides two fallbacks:

• The patient, or their personal representative, can direct a complete copy of the record to any named third party in a signed, written request, under 45 CFR 164.524.
• A personal representative with state-law authority must be treated as the patient, with the full HIPAA right of access.

Our system guides cover that formal request path, with each organization's real forms and fees: UCLA Health, Cleveland Clinic, Novant Health, Mount Sinai, Cedars-Sinai.

Related sharing mechanisms, and how they differ

• Share Everywhere: one-time codes the patient generates for a provider; each code is single-use and expires after five minutes, and it shares basic information, not the full record.
• Link My Accounts merges the patient's own records across organizations into one view. It is for the patient themselves, not a caregiver.
• Third-party health apps: Epic's patient-facing APIs let patients or their authorized proxies connect apps using MyChart credentials.

One caution: only use official organization domains when setting any of this up. Third-party lookalike sites rank for “MyChart” searches and are not affiliated with your health system.

FAQ