MOLST Form and HIPAA: What You Need to Know About Privacy, Access, and Sharing

Understanding how a Medical Orders for Life-Sustaining Treatment (MOLST) form interacts with the Health Insurance Portability and Accountability Act is essential to protect Patient Health Information Privacy while ensuring your medical wishes are honored. This guide explains what a MOLST is, how HIPAA applies, who may access the form, and when sharing is appropriate.

You will learn how MOLST form confidentiality works in practice, what “Disclosure for Treatment Purposes” means, how Personal Representative Access is determined, and the additional protections that apply to mental health and Substance Use Disorder Information Protection.

Medical Orders for Life-Sustaining Treatment Overview

What a MOLST Is—and Is Not

A MOLST is a set of actionable medical orders that translates your current goals of care into clinician-signed instructions that emergency personnel and healthcare teams must follow. Unlike an advance directive that names a decision-maker for future scenarios, a MOLST applies now and guides real-time treatment across settings.

Typical Content and Scope

While formats vary by state, a MOLST commonly addresses resuscitation status (such as Do Not Resuscitate), intubation and ventilation, hospitalization versus comfort-focused care, artificial nutrition and hydration, and use of antibiotics. The form is designed to be concise, portable, and immediately usable in emergencies.

Portability and Recognition

A completed MOLST accompanies you between home, hospital, nursing facility, and hospice. Because it is a medical order, emergency medical services can rely on it during time-critical situations, reducing delays and avoiding unwanted interventions.

Relationship to Advance Directives

Advance directives and healthcare proxies remain important to identify who speaks for you and to express values. However, the MOLST converts those values—when clinically appropriate—into orders that the care team can implement at once. When both exist, the most recent, clinically applicable orders generally guide care.

HIPAA Privacy Rule Protections

What HIPAA Protects

HIPAA’s Privacy Rule safeguards protected health information (PHI) held by covered entities and their business associates. A MOLST becomes part of your medical record, so the same Patient Health Information Privacy standards apply to its creation, storage, and disclosure.

Permitted Uses and Disclosures

Under HIPAA, PHI may be used or disclosed without your written authorization for treatment, payment, and healthcare operations. A MOLST can be shared for treatment across providers to coordinate your care. The “minimum necessary” standard does not apply to disclosures for treatment, but teams should still limit access to those who need the information to care for you.

Your Individual Rights

• Right of access: You may obtain a copy of your MOLST and other records.
• Right to request restrictions: You can ask providers to limit certain disclosures, recognizing that treatment-related sharing may still occur when necessary.
• Right to confidentiality: You may request alternative communications or specific contact methods to bolster MOLST form confidentiality.

MOLST Form Disclosure to Healthcare Providers

Disclosure for Treatment Purposes

Clinicians may disclose and use a MOLST to diagnose, treat, and coordinate care. This includes sharing with hospitals, skilled nursing facilities, home health, hospice, and EMS so your orders guide decisions at the bedside and during transfers.

Operational Practices That Support Privacy

• Secure capture: Scanning the MOLST into the electronic health record with access controls protects it while keeping it available for emergencies.
• Transitions of care: Facilities should transmit the MOLST along with discharge summaries or transfer packets to avoid care gaps.
• Verification: When feasible, teams confirm the form is the latest version and consistent with known preferences.

Emergencies and Professional Judgment

When you are incapacitated, providers rely on the MOLST and their professional judgment to disclose PHI necessary to treat you. If rapid disclosure is needed to prevent a serious and imminent threat, HIPAA permits sharing with those able to lessen the threat, consistent with privacy safeguards.

Access Rights of Personal Representatives

Who Qualifies as a Personal Representative

Under HIPAA, a personal representative generally has the same rights to your PHI as you do, including Personal Representative Access to your MOLST. This typically includes a person with Healthcare Proxy Authorization or medical power of attorney, or a court-appointed guardian, as recognized by state law.

Scope and Limits of Access

A personal representative may review, receive copies of, and discuss your MOLST with your care team. Providers may, however, decline to treat someone as a personal representative if they reasonably believe the relationship involves abuse, neglect, or endangerment and that denying access protects you, consistent with professional judgment and applicable law.

Special Considerations for Minors and State Rules

For minors, who can act as a personal representative and what PHI can be shared often depends on state consent laws and specific circumstances. Providers align MOLST sharing with those rules while honoring the minor’s confidentiality interests when permitted.

Sharing MOLST Information with Family and Caregivers

When the Patient Agrees

If you agree—or do not object when given a clear opportunity—HIPAA allows providers to share relevant MOLST information with family members or caregivers involved in your care or payment for care. The disclosure should be limited to what those individuals need to know to support you.

When the Patient Is Incapacitated

When you cannot agree because of incapacity or an emergency, clinicians may, in their professional judgment, disclose MOLST details to family or caregivers if it is in your best interests. Information shared should be directly related to their involvement in your care.

Documenting Preferences

You can specify who may receive MOLST information, who should not, and the preferred communication methods. Clear documentation of your wishes helps the team uphold MOLST form confidentiality while ensuring timely access for those you trust.

Voluntariness and Completion of MOLST Forms

Voluntary, Conversation-Driven Process

Completing a MOLST is voluntary. It should follow a thorough goals-of-care discussion that explores your values, likely clinical scenarios, and trade-offs, ensuring the orders reflect what matters most to you.

How a MOLST Is Completed

• Discussion and decisions: You review options such as resuscitation, ventilation, hospitalization, and comfort measures.
• Signatures: An authorized clinician signs the form; you or your personal representative also sign when required by state rules.
• Distribution: Keep the original accessible and provide copies to your proxy, primary care team, specialists, and care facilities.

Reviewing, Updating, and Revoking

You may revise or revoke a MOLST at any time. Revisit it after major health changes, hospitalizations, or shifts in goals of care so the orders remain current and actionable across settings.

HIPAA Guidelines for Mental Health Information

Psychotherapy Notes and Special Protections

HIPAA gives heightened protection to psychotherapy notes stored separately from the general medical record. These notes usually require separate authorization before disclosure and are distinct from the treatment details that might appear elsewhere in your record.

Family Involvement in Mental Health Care

For adult patients, providers may share mental health information with family if you consent or do not object when asked, or if you are incapacitated and sharing is in your best interests. HIPAA also permits disclosures to prevent or lessen a serious and imminent threat to health or safety.

Substance Use Disorder Information Protection

Records from certain substance use disorder programs are protected by federal confidentiality rules that are stricter than HIPAA in many situations. In general, those records require your written consent for disclosure except in limited circumstances, such as medical emergencies, specific court orders, or as otherwise allowed by law. Your MOLST should still be honored for emergency care, with disclosures tailored to the minimum necessary when those stricter rules apply.

FAQs.

What information does a MOLST form contain?

A MOLST typically includes orders on resuscitation, intubation and mechanical ventilation, hospitalization versus comfort measures, artificial nutrition and hydration, and antibiotics. It distills your current goals of care into clear, portable medical orders.

How does HIPAA protect MOLST form privacy?

HIPAA’s Privacy Rule treats the MOLST as part of your protected health information, enforcing MOLST form confidentiality, secure storage, and controlled disclosures. It permits Disclosure for Treatment Purposes while preserving your rights to access and request restrictions.

Who can access MOLST forms under HIPAA?

Your treating providers may access and share the MOLST for care coordination. Personal Representative Access is available to a legally recognized decision-maker, such as someone with Healthcare Proxy Authorization or a court-appointed guardian, unless a narrow safety exception applies.

Can family members receive MOLST form information without patient consent?

Generally, providers share MOLST information with family only if you agree or do not object. If you are incapacitated, clinicians may disclose relevant details to those involved in your care when, in their professional judgment, it is in your best interests and consistent with privacy rules.