In most situations, a parent or guardian can see a minor child's medical records. Federal privacy rules generally treat the parent as the child's personal representative — meaning the parent can exercise the child's privacy rights, including the right to access the record. But there are three specific exceptions where the teenager, not the parent, controls a particular piece of health information, and a large amount of the detail is actually decided by state law, not federal law. That is why two families in two states can get very different answers from the same kind of clinic.
Here is the structure underneath it, in plain terms.
The general rule
If, under the law that applies where you live, a parent or guardian has the authority to make health care decisions for an unemancipated minor, then a provider must generally treat that parent as the child's personal representative for the health information related to that care. Practically, that means a parent can request the child's records, receive them, and exercise the child's other privacy rights.
This is the default. It is also why, for young children, the question rarely comes up: the parent consents to the care, the parent receives the results, and everything flows through the parent.
The three exceptions
The federal rule carves out three situations in which the parent is not the personal representative for a specific health care service, and the minor gets to act for themselves as to the information about that service:
- The minor consented to the care, and no other consent was required by law — and the minor hasn't asked for the parent to be treated as their representative.
- The minor can legally get the care without a parent's consent, and the minor, a court, or another person authorized by law consented to it.
- The parent agreed to a confidential relationship between the minor and the provider for that care.
Note what the exceptions are attached to: a specific health care service, not the whole chart. A teenager might control the record of one confidential visit while the parent still has ordinary access to everything else — the broken wrist, the sports physical, the immunizations.
Why state law decides so much
Three things are left to state (or other applicable) law:
- Which services a minor can consent to alone. States commonly address things like reproductive health, sexually transmitted infections, mental health care, and substance use treatment — but the specific ages, services, and conditions vary a great deal from state to state. There is no single national list, and you should not assume your state matches a neighboring one.
- Whether a provider may or must share a minor's information with a parent. Where state law permits disclosure to a parent, the provider may disclose. Where state law prohibits it, the provider may not.
- What happens when state law is silent. If there's no applicable state rule and the parent isn't the personal representative for that service, the decision to grant or deny the parent access must be made by a licensed health care professional exercising professional judgment — not by a receptionist, and not by a billing system.
Federal privacy rules also don't govern consent to treatment at all. They don't create a right for a child to be treated without a parent's permission, and they don't take one away. That is entirely a state-law matter.
What this looks like in the portal
Most of the friction families actually experience is not a legal dispute — it's the patient portal. Many health systems change how a parent's "proxy" portal access works once a child hits a certain age, often the early teens: some information stops flowing to the parent's view, messaging may be restricted, and the teen may be offered their own account.
That change usually isn't the clinic being difficult. It is the system's attempt to implement the exceptions above at scale, because the software can't easily separate a confidential visit from a routine one on the fly. If your proxy access suddenly narrows:
- Ask the clinic what age-based portal policy they use and what it restricts.
- Ask whether you can still request records the ordinary way, in writing — portal design is not the same thing as your legal right of access.
- Expect a period where you and your teen each hold part of the picture. That is the intended design, not a bug.
The safety exception
There is one more provision worth knowing, and it applies to representatives of any age. A provider may choose not to treat a person as a personal representative if the provider reasonably believes that the individual has been or may be subjected to domestic violence, abuse, or neglect by that person, or that treating them as the representative could endanger the individual — and the provider decides, in professional judgment, that doing so is not in the person's best interest.
This is a discretionary judgment call made by clinicians, and it exists to protect people who are unsafe at home. It's rare, but it's real.
What happens at 18
When a minor reaches the age of majority (or becomes emancipated), the picture flips cleanly. The individual can then exercise all privacy rights over all of their health information — including the information created while they were an unemancipated minor, consistent with state law. The parent's authority does not carry forward on its own.
That surprises a lot of families in the first year of college. If a young adult wants a parent to be able to talk to their doctors or get their records, the practical fix is paperwork: a signed authorization form at each provider, or a health care power of attorney. Set it up before you need it.
Practical advice for parents
- Ask early, not in a crisis. Ask the pediatrician's office how they handle records and portal access as your child ages, before you're trying to solve something urgent.
- Don't argue the law at the front desk. If something is refused, ask to speak with the practice's privacy officer or the clinician — they're the people the rules actually route these decisions to.
- Understand what a confidentiality agreement means. If you agree to let your teen speak confidentially with their clinician, you are agreeing that you won't automatically get that information back.
- Get an authorization signed at 18 if continued involvement matters to your family.
Practical advice for teens
- Ask the clinician directly, at the start of the visit, what will and won't be shared with a parent — and ask them to tell you if something can't be kept confidential. It's a normal question and they've heard it before.
- Ask how it will appear on paperwork. Explanations of benefits from an insurance plan can travel to whoever holds the policy, and that's a separate pipe from your medical record.
- Set up your own portal account when you're offered one, and keep the login somewhere you'll still have it after you move out.
The short version
Parents usually can see a minor's records. Teens control the information for care they could legally consent to on their own, care they lawfully obtained without a parent's consent, or care where the parent agreed to confidentiality. Which care that is depends on your state. And at the age of majority, all of it becomes the young adult's to control.
Common questions
Can a parent see their teenager's medical records?
Generally yes. Federal privacy rules allow a parent to access their minor child's records as the child's personal representative, as long as that access is not inconsistent with state or other law.
When does a teen control their own health information?
In three situations tied to a specific health care service: the minor consented to that care and no other consent was legally required; the minor could lawfully obtain that care without a parent's consent and it was consented to by the minor, a court, or another authorized person; or the parent agreed to a confidential relationship between the minor and the provider for that care.
Why does my portal proxy access change when my child becomes a teenager?
Health systems commonly restrict proxy access at certain ages because their software can't reliably separate confidential visits from routine ones. Portal design is a clinic policy choice; it isn't the same thing as your underlying right to request records.
What happens to a parent's access when the child turns 18?
The individual can then exercise all privacy rights over their own information, including records created while they were an unemancipated minor. For a parent to keep receiving information, the young adult generally needs to sign an authorization or grant a health care power of attorney.
Common questions
Can a parent see their teenager's medical records?
Generally yes. Federal privacy rules allow a parent to access their minor child's records as the child's personal representative, as long as that access is not inconsistent with state or other law.
When does a teen control their own health information instead?
In three situations, each tied to a specific health care service: the minor consented to that care and no other consent was legally required; the minor could lawfully obtain that care without a parent's consent and it was consented to by the minor, a court, or another authorized person; or the parent agreed to a confidential relationship between the minor and the provider for that care.
Why did my parent proxy access to the patient portal get restricted?
Health systems commonly narrow proxy access at certain ages because their software cannot reliably separate confidential visits from routine ones. That is a clinic policy choice about the portal, and it is not the same thing as your underlying right to request records in writing.
What happens to a parent's access when the child turns 18?
The individual can then exercise all privacy rights over their own health information, including information created while they were an unemancipated minor. For a parent to stay involved, the young adult generally needs to sign an authorization or grant a health care power of attorney.