Pennsylvania Minor Medical Records Access Laws: What Parents and Teens Should Know

As of March 26, 2026, Pennsylvania minor medical records access laws weave together HIPAA, state “Minor Consent” statutes, and special confidentiality protections. This guide translates those rules into plain English so you can understand when parents, legal guardians, and teens may see or shield medical information. ([hhs.gov](https://www.hhs.gov/hipaa/for-professionals/privacy/guidance/personal-representatives/index.html?utm_source=openai))

Parental Access to Minor's Medical Records

General rule: under HIPAA, a parent or legal guardian is usually a minor’s “personal representative” and may access the child’s protected health information if doing so is consistent with state law. That right includes getting copies under the HIPAA right of access, with limited exceptions. ([hhs.gov](https://www.hhs.gov/hipaa/for-professionals/privacy/guidance/personal-representatives/index.html?utm_source=openai))

Pennsylvania law narrows this default in important ways. When a minor can consent to specific services under state law (for example, certain sexual and reproductive health care, outpatient mental health care at age 14+, or substance use care), the parent is not the personal representative for those services and records. ([legis.state.pa.us](https://www.legis.state.pa.us/WU01/LI/LI/US/HTM/1970/0/0010..HTM?utm_source=openai))

Even outside those areas, HIPAA lets a provider decline parental access if, in professional judgment, treating the parent as the child’s representative could endanger the child (for example, abuse or neglect). School health records are generally governed by FERPA, not HIPAA, and follow separate access rules. ([hhs.gov](https://www.hhs.gov/hipaa/for-professionals/privacy/guidance/standards-privacy-individually-identifiable-health-information/index.html?utm_source=openai))

Exceptions to Parental Access

• Minor consent statutes: Teens may control records when they lawfully consent to care themselves (see the next section for specifics). ([legis.state.pa.us](https://www.legis.state.pa.us/WU01/LI/LI/US/HTM/1970/0/0010..HTM?utm_source=openai))
• Substance use disorder confidentiality: Records from federally assisted SUD programs are protected by 42 CFR Part 2; if state law lets the minor consent, only the minor can authorize disclosure (with narrow exceptions). ([law.cornell.edu](https://www.law.cornell.edu/cfr/text/42/2.14?utm_source=openai))
• Mental health records: Pennsylvania’s Mental Health Procedures Act (MHPA) strictly limits disclosure; Act 65 of 2020 confirms minors 14–17 who consent to outpatient or voluntary inpatient mental health treatment largely control those records. ([law.justia.com](https://law.justia.com/cases/pennsylvania/superior-court/2020/3097-eda-2018.html?utm_source=openai))
• HIV-related information: Pennsylvania’s HIV Confidentiality Act tightly restricts disclosure, including redisclosure notices. ([legis.state.pa.us](https://www.legis.state.pa.us/WU01/LI/LI/US/HTM/1990/0/0148..HTM?utm_source=openai))
• Communicable disease reporting data: Reports and related records held by health authorities are confidential under the Disease Prevention and Control Law of 1955. ([legis.state.pa.us](https://www.legis.state.pa.us/WU01/LI/LI/US/PDF/1955/0/0500..PDF?utm_source=openai))
• Court orders and safety: Custody or protection-from-abuse orders can limit access; providers may also withhold access if disclosure could put the child at risk. ([law.justia.com](https://law.justia.com/codes/pennsylvania/2022/title-23/chapter-53/section-5336/?utm_source=openai))
• Child abuse reporting laws: Mandated reporters must report suspected abuse to authorities even when records are otherwise confidential. ([legis.state.pa.us](https://www.legis.state.pa.us/WU01/LI/LI/CT/HTM/23/00.063.011.000..HTM?utm_source=openai))

Minor's Consent to Medical Services

Pennsylvania’s Minor Consent Statutes allow teens to obtain certain care without parental approval—often with strong confidentiality protections. Here are the key categories. ([legis.state.pa.us](https://www.legis.state.pa.us/WU01/LI/LI/US/HTM/1970/0/0010..HTM?utm_source=openai))

Sexual and reproductive health

• Pregnancy testing and treatment (including prenatal care): Any minor may consent. ([legis.state.pa.us](https://www.legis.state.pa.us/WU01/LI/LI/US/HTM/1970/0/0010..HTM?utm_source=openai))
• Contraception: Minors can obtain birth control without parental consent under Pennsylvania Department of Health guidance. ([pa.gov](https://www.pa.gov/agencies/health/programs/school-health/teen-pregnancy?utm_source=openai))
• STI diagnosis and treatment (including HIV): Any minor may consent; parental approval is not required. ([codes.findlaw.com](https://codes.findlaw.com/pa/title-35-ps-health-and-safety/pa-st-sect-35-521-14a/?utm_source=openai))
• Abortion: Pennsylvania requires consent of one parent for unemancipated minors or a judicial bypass; medical emergencies are excepted. ([legis.state.pa.us](https://www.legis.state.pa.us/WU01/LI/LI/CT/HTM/18/00.032.006.000..HTM?utm_source=openai))

Mental health and substance use

• Mental health care: Minors 14–17 may consent to outpatient treatment and may also consent to voluntary inpatient treatment; parents may also consent in some circumstances, but one cannot cancel the other’s valid consent. Record-sharing rules are specified in Act 65. ([legis.state.pa.us](https://www.legis.state.pa.us/WU01/LI/LI/US/PDF/2020/0/0065..PDF))
• Substance use disorder care: Minors may consent to treatment, and confidentiality is reinforced by 42 CFR Part 2. Providers may be permitted—but are not required—under state law to inform parents. ([legis.state.pa.us](https://www.legis.state.pa.us/WU01/LI/LI/US/HTM/1972/0/0063..HTM?utm_source=openai))

Emergency care

When delay to obtain parental consent would increase risk to life or health, emergency care may be provided to a minor without parental permission. ([legis.state.pa.us](https://www.legis.state.pa.us/WU01/LI/LI/US/HTM/1970/0/0010..HTM?utm_source=openai))

Confidentiality of Minor's Medical Records

Core confidentiality protections

HIPAA generally safeguards a minor’s protected health information and gives an access right to the individual (or to a parent/legal guardian when state law permits). Providers may deny parental access where disclosure could endanger the child. ([hhs.gov](https://www.hhs.gov/hipaa/for-professionals/privacy/guidance/access/index.html?utm_source=openai))

Special Pennsylvania confidentiality rules

• Mental health (MHPA): “All documents concerning persons in treatment” are confidential and may be disclosed only in narrow circumstances or with written consent. ([law.justia.com](https://law.justia.com/cases/pennsylvania/superior-court/2020/3097-eda-2018.html?utm_source=openai))
• SUD records (42 CFR Part 2): If a minor may consent to SUD care under state law, only the minor can authorize disclosure (subject to limited exceptions such as medical emergencies or specific court orders). ([law.cornell.edu](https://www.law.cornell.edu/cfr/text/42/2.14?utm_source=openai))
• HIV-related information: Disclosure and redisclosure are tightly controlled by the HIV Confidentiality Act. ([legis.state.pa.us](https://www.legis.state.pa.us/WU01/LI/LI/US/HTM/1990/0/0148..HTM?utm_source=openai))
• Disease prevention data: Communicable disease reports and related records held by health authorities are confidential. ([legis.state.pa.us](https://www.legis.state.pa.us/WU01/LI/LI/US/PDF/1955/0/0500..PDF?utm_source=openai))
• School health records: Typically governed by FERPA rather than HIPAA; parental access depends on education privacy rules. ([pa.gov](https://www.pa.gov/agencies/health/programs/school-health/confidentiality.html?utm_source=openai))

Retention of Minor's Medical Records

Record retention depends on the setting. Understanding these timelines helps you plan requests—an important part of Medical Records Retention. ([healthit.gov](https://www.healthit.gov/sites/default/files/appa7-1.pdf?utm_source=openai))

• Physician offices (State Board of Medicine): Keep records at least 7 years from last service; for a minor, retain until 1 year after the 18th birthday (typically to age 19), even if that exceeds 7 years. ([pacodeandbulletin.gov](https://www.pacodeandbulletin.gov/secure/pacode/data/049/chapter16/049_0016.pdf))
• Hospitals: Keep records at least 7 years after discharge; for a minor, retain until majority and then for 7 years (often to about age 25). ([pacodeandbulletin.gov](https://www.pacodeandbulletin.gov/Display/pacode?file=%2Fsecure%2Fpacode%2Fdata%2F028%2Fchapter115%2Fs115.23.html))
• Ambulatory surgical facilities (ASFs): Same rule as hospitals—retain at least 7 years, and for minors, until majority plus 7 years. ([pacodeandbulletin.gov](https://www.pacodeandbulletin.gov/secure/pacode/data/028/chapter563/028_0563.pdf))

Access to Minor's Medical Records After Death

HIPAA protects a decedent’s health information for 50 years after death. During that period, the decedent’s “personal representative” under applicable law (for example, an executor or court-appointed administrator) steps into the patient’s shoes and can request records, subject to any stricter federal or Pennsylvania confidentiality rules. ([hhs.gov](https://www.hhs.gov/hipaa/for-professionals/privacy/guidance/health-information-of-deceased-individuals/index.html?utm_source=openai))

Pennsylvania law also permits courts to issue protective orders concerning medical records in litigation. Special protections—like MHPA and 42 CFR Part 2—continue to apply to sensitive records even after death unless a qualifying exception or court order applies. Providers will usually require documentation proving who the personal representative is. ([palegis.us](https://www.palegis.us/statutes/consolidated/view-statute%26txtType%3DPDF%26ttl%3D42%26div%3D00.%26chpt%3D61%26sctn%3D55%26subsctn%3D0?utm_source=openai))

Parental Rights in Custody Situations

Custody Medical Record Access depends on legal custody, not physical custody time. Pennsylvania’s custody law gives each parent with legal custody the right to access a child’s medical, dental, religious, and school records unless a court orders otherwise. Access cannot be denied solely because of a visitation schedule. ([law.justia.com](https://law.justia.com/codes/pennsylvania/2022/title-23/chapter-53/section-5336/?utm_source=openai))

Courts may restrict disclosure of certain information, including a protected address or records independently protected by the MHPA or other statutes. If your custody order limits information sharing, providers must honor it. ([law.justia.com](https://law.justia.com/codes/pennsylvania/2022/title-23/chapter-53/section-5336/?utm_source=openai))

FAQs.

Who can legally access a minor's medical records in Pennsylvania?

Usually a parent or legal guardian, as the child’s HIPAA personal representative. But when Minor Consent Statutes apply—such as for contraception, pregnancy care, STI treatment, outpatient mental health care (14+), or SUD treatment—the minor often controls those records. Providers may also refuse parental access if disclosure could endanger the child. ([hhs.gov](https://www.hhs.gov/hipaa/for-professionals/privacy/guidance/personal-representatives/index.html?utm_source=openai))

What medical treatments can minors consent to without parental approval?

Among others: pregnancy testing and treatment (including prenatal care), contraception, STI diagnosis and treatment (including HIV), outpatient mental health care at age 14 and older (and voluntary inpatient mental health care), and substance use disorder treatment. Abortion requires a parent’s consent or a judicial bypass, with an emergency exception. ([legis.state.pa.us](https://www.legis.state.pa.us/WU01/LI/LI/US/HTM/1970/0/0010..HTM?utm_source=openai))

How long must minor medical records be retained by healthcare providers?

For physician offices, keep until at least 7 years from the last visit and at least 1 year after the minor turns 18. Hospitals and ambulatory surgical facilities must keep records at least 7 years after discharge and, for minors, until majority plus 7 years (often to around age 25). ([pacodeandbulletin.gov](https://www.pacodeandbulletin.gov/secure/pacode/data/049/chapter16/049_0016.pdf))

Summary: Pennsylvania Minor Medical Records Access Laws balance Legal Guardianship Rights with robust Confidentiality Protections. Minor Consent Statutes and Substance Use Disorder Confidentiality carve out key exceptions; Medical Records Retention rules vary by setting; and Child Abuse Reporting Laws and custody orders can further shape who sees what, and when. ([hhs.gov](https://www.hhs.gov/hipaa/for-professionals/privacy/guidance/personal-representatives/index.html?utm_source=openai))