Kentucky Minor Medical Records Access Laws: Parents’ and Teens’ Rights Explained

Parental Rights to Minor Medical Records

In Kentucky, a parent—or a personal representative authorized under state law—has a right to access a minor’s medical record maintained by a health care provider, unless another federal or state law says otherwise. This right was expressly codified in Kentucky Revised Statutes § 422.355, effective July 15, 2024, which also defines “personal representative.” ([apps.legislature.ky.gov](https://apps.legislature.ky.gov/law/statutes/statute.aspx?id=55379))

Under the HIPAA Privacy Rule, parents are generally treated as the minor’s personal representative and may exercise the child’s HIPAA right of access to protected health information (PHI), subject to specific exceptions discussed below. In practice, that coverage typically includes visit summaries, lab results, medications, immunizations, and other records used to make decisions about the child’s care. ([hhs.gov](https://www.hhs.gov/hipaa/for-professionals/privacy/guidance/personal-representatives/index.html?utm_source=openai))

HIPAA Exceptions for Minor Records Access

HIPAA creates targeted situations where a parent is not treated as the minor’s personal representative. Key exceptions include: when the minor may lawfully consent to the care and does so; when someone other than the parent is authorized by law or court order to consent; or when a parent agrees that the minor and provider may maintain confidentiality. In these cases, the provider need not grant the parent access to related PHI. ([law.cornell.edu](https://www.law.cornell.edu/cfr/text/45/164.502?utm_source=openai))

HIPAA also contains a Domestic Violence Exception. If a provider reasonably believes a minor has been or may be subject to abuse, neglect, or domestic violence, and that disclosure to the parent could endanger the child, the provider may decline to treat the parent as the minor personal representative and withhold information, using professional judgment. ([law.cornell.edu](https://www.law.cornell.edu/cfr/text/45/164.502?utm_source=openai))

Minor Consent to Health Care

Kentucky law allows Confidential Healthcare Consent by minors in several defined circumstances. Under KRS 214.185, a minor may consent—without parental notice—to diagnosis and treatment related to sexually transmitted infections, contraception, pregnancy and childbirth (not including abortion or sterilization), and substance use disorder; emergency care may be provided without parental consent when delay risks the minor’s health; certain 16- or 17-year-olds may consent to outpatient mental health counseling, including unaccompanied youth. The statute also recognizes emancipated, married, or minor parents’ authority to consent for themselves and their child. ([law.justia.com](https://law.justia.com/codes/kentucky/chapter-214/section-214-185/))

For Substance Use Disorder Treatment Consent, federal 42 CFR Part 2 adds strong privacy protections. When a minor is allowed by state law to consent to SUD treatment, only the minor can authorize disclosures of Part 2 program records, with narrow exceptions. These confidentiality rules can further limit parental access to those specific records. ([law.cornell.edu](https://www.law.cornell.edu/cfr/text/42/2.14?utm_source=openai))

Confidentiality Protections for Minors

Even when a parent is the minor’s personal representative, certain categories of records remain confidential by rule. HIPAA’s right of access does not extend to psychotherapy notes kept separate from the general medical record, and information compiled for legal proceedings can also be withheld. ([hhs.gov](https://www.hhs.gov/hipaa/for-professionals/faq/2094/does-parent-have-right-receive-copy-psychotherapy-notes-about-childs-mental-health-treatment.html?utm_source=openai))

HIPAA permits denying access—by the individual or a personal representative—if a licensed professional determines that releasing the information would be reasonably likely to endanger the life or physical safety of the patient or another person, or cause substantial harm to a referenced person. Providers must document the basis for such determinations. ([hhs.gov](https://www.hhs.gov/hipaa/for-professionals/privacy/guidance/access/index.html?utm_source=openai))

Substance use disorder records from federally assisted programs are protected by 42 CFR Part 2, which generally prohibits disclosure without the patient’s written consent, including when the patient is a minor who can lawfully consent to their own treatment. ([hhs.gov](https://www.hhs.gov/hipaa/for-professionals/special-topics/hipaa-part-2/index.html?utm_source=openai))

Court-Ordered Care

Kentucky courts can direct examination, evaluation, or treatment of a child involved in juvenile proceedings and may authorize necessary medical care. When a court issues such an order, access and consent follow the terms of the order and the appointed decision-maker’s authority. ([law.justia.com](https://law.justia.com/codes/kentucky/chapter-610/section-610-310/?utm_source=openai))

When the court appoints a guardian, that guardian’s Court-Appointed Healthcare Decisions typically include consenting to medical treatment, subject to statutory limits (for example, certain procedures may still require express court approval). In these situations, the guardian is treated as the personal representative for HIPAA purposes. ([law.justia.com](https://law.justia.com/codes/kentucky/chapter-387/section-387-660/?utm_source=openai))

Healthcare Provider Discretion

HIPAA allows providers, using professional judgment, to share limited information relevant to a minor’s care with family involved in that care, or to withhold information if disclosure is not in the patient’s best interests. These decisions are fact-specific and should be the minimum necessary for involvement or safety. ([hhs.gov](https://www.hhs.gov/sites/default/files/ocr/privacy/hipaa/understanding/special/mhguidancepdf.pdf?utm_source=openai))

In abuse, neglect, or Domestic Violence Exception scenarios, a provider may decline to treat a parent as the minor’s personal representative and restrict access to the child’s PHI to avoid endangerment. ([law.cornell.edu](https://www.law.cornell.edu/cfr/text/45/164.502?utm_source=openai))

Limitations on Parental Access

• When Kentucky law authorizes the minor’s own consent (for example, STI care, contraception, pregnancy/childbirth services, substance use disorder treatment, certain mental health counseling, and emergencies), related records may be withheld from parents. ([law.justia.com](https://law.justia.com/codes/kentucky/chapter-214/section-214-185/))
• Substance use disorder treatment records from Part 2 programs require the patient’s written consent for disclosure—even to parents—if the minor lawfully consented to treatment. ([law.cornell.edu](https://www.law.cornell.edu/cfr/text/42/2.14?utm_source=openai))
• Psychotherapy notes and information compiled for legal proceedings are excluded from HIPAA’s right of access. ([law.cornell.edu](https://www.law.cornell.edu/cfr/text/45/164.524?utm_source=openai))
• If disclosure could reasonably endanger the minor or another person, access may be denied based on a licensed professional’s judgment. ([hhs.gov](https://www.hhs.gov/hipaa/for-professionals/privacy/guidance/access/index.html?utm_source=openai))
• Court orders or guardianship arrangements control who may access records; the appointed decision-maker’s authority governs, and specific procedures might still require separate court approval. ([law.justia.com](https://law.justia.com/codes/kentucky/chapter-610/section-610-310/?utm_source=openai))
• Kentucky Revised Statutes § 422.355 confirms parental access in general, but it expressly yields to HIPAA and other federal or state laws where they restrict disclosure. ([apps.legislature.ky.gov](https://apps.legislature.ky.gov/law/statutes/statute.aspx?id=55379))

Bottom line: In Kentucky, parents generally have broad access to a minor’s medical records under KRS 422.355 and the HIPAA Privacy Rule, but that access narrows when state consent laws let a teen obtain confidential care, when federal SUD privacy rules apply, when psychotherapy notes are involved, when a court or guardian controls decisions, or when disclosure could place someone at risk. ([apps.legislature.ky.gov](https://apps.legislature.ky.gov/law/statutes/statute.aspx?id=55379))

FAQs.

What medical records can parents access for minors in Kentucky?

Generally, parents—or a Minor Personal Representative authorized by law—can access a child’s medical records kept by a provider. However, access does not extend to psychotherapy notes and may be limited where other laws apply (for example, when the minor independently consented to care, or where safety concerns exist). ([apps.legislature.ky.gov](https://apps.legislature.ky.gov/law/statutes/statute.aspx?id=55379))

How does HIPAA affect minor medical records access?

The HIPAA Privacy Rule typically treats a parent as the child’s personal representative with the same access rights the child would have, unless an exception applies—such as minor self-consent to care, court or other legal authorization, or the Domestic Violence Exception where disclosure could endanger the minor. ([hhs.gov](https://www.hhs.gov/hipaa/for-professionals/privacy/guidance/personal-representatives/index.html?utm_source=openai))

When can minors consent to medical care without parents?

Under KRS 214.185, minors may consent to diagnosis and treatment for STIs, contraception, pregnancy and childbirth (excluding abortion or sterilization), and substance use disorder; certain 16- or 17-year-olds may obtain outpatient mental health counseling; emergencies can be treated without parental consent. Related records are often confidential from parents, and SUD records in Part 2 programs require the minor’s written consent for disclosure. ([law.justia.com](https://law.justia.com/codes/kentucky/chapter-214/section-214-185/))