Legal documents for elderly parents: what you need, and when

The list, organized by when you need it

There are around 63 million family caregivers in the United States, and 47% of them are caring for a parent or a parent-in-law, according to AARP and the National Alliance for Caregiving’s Caregiving in the US 2025 report, fielded in late 2024. Among caregivers aged 50 to 64, that share rises to 60%. It is the most common version of this job, and almost everyone arrives at it unprepared: the same report found only 43% of care recipients have any plan in place for finances, health decisions, or living arrangements. 38% have none, and another 19% of caregivers do not know whether one exists.

What follows is the full document set, in three phases. The phases matter more than the categories, because they map to how the job actually arrives.

• Phase 1, this week. The cards and lists you will physically use over and over: Medicare and its companion cards, the pharmacy information, the medication list, the physician roster. Low drama, high frequency.
• Phase 2, authority while they are alive. The documents that let you act and let providers talk to you: two different powers of attorney, a HIPAA authorization, an advance directive, and the separate federal forms that a power of attorney does not cover.
• Phase 3, after death. The will, any trust, and the beneficiary designations that quietly override both. Important, and almost never urgent in the first week.

The most common mistake is spending the first month on Phase 3 because that is what “getting affairs in order” sounds like, while Phase 1 and Phase 2 are what you need on a Tuesday afternoon when a nurse says she cannot discuss the chart with you.

Phase 1: the documents you use every week

This is the set that gets skipped. Every checklist treats an aging parent’s paperwork as a one-time legal provisioning exercise, and none of them treat caregiving as the ongoing operational job it is. The power of attorney sits in a drawer for years. These cards come out weekly.

The insurance cards, which are usually more than one.This is where families get confused at the pharmacy counter, because “Medicare card” can mean four different pieces of plastic:

• The red, white, and blue Medicare card. Original Medicare, Parts A and B. It carries the Medicare Beneficiary Identifier, an 11-character code that replaced the Social Security number on these cards.
• A Medicare Advantage (Part C) card. If your parent has an Advantage plan, this card replaces the red-white-and-blue card at the point of service. Handing over the wrong one is a common source of billing chaos. Do not throw the Medicare card away, though: Medicare tells you to keep it somewhere safe in case your parent switches plans or returns to Original Medicare, and it can still be asked for on hospital admission.
• A Medigap or Medicare Supplement card. This one accompanies Original Medicare rather than replacing it, which is why some parents correctly hand over two cards and others incorrectly hand over one.
• A Part D prescription drug card. Sometimes standalone, sometimes folded into the Advantage plan.

Photograph both sides of every card. Our guide to reading a health insurance card covers what each field means and which numbers a billing office will ask you to read back over the phone.

The current medication list. Drug name, dose, frequency, prescribing physician, and pharmacy. Keep the date on it. This is the single document most often requested and least often current, and it is the one an emergency room will ask for first. Our free medication list builder formats one with those exact fields and saves it on your device, so keeping it current is an edit, not a rewrite.

The physician roster and the pharmacy.Names, practices, phone numbers, and which condition each doctor is treating. Add the pharmacy’s phone number and your parent’s date of birth, because you will be asked to verify it constantly.

Keeping all of that current across several specialists is its own job, and honestly a different one from filing documents. We also build KeptWell, which is aimed squarely at it: medical records for an aging parent, with medication changes and lab trends tracked over time and shared with siblings.

The distinction that trips up everyone

Here is the single most useful thing on this page, and it is missing from the pages that currently rank for this topic.

A financial power of attorney does not get you your parent’s medical records.Not “sometimes.” Not “depending on the hospital.” The Department of Health and Human Services was asked precisely this question, and its published answer begins with one word:

“No. Except with respect to decedents, a covered entity must treat a personal representative as the individual only when that person has authority under other law to act on the individual’s behalf on matters related to health care. A power of attorney that does not include decisions related to health care in its scope would not authorize the holder to exercise the individual’s rights under the HIPAA Privacy Rule.”

So the durable power of attorney your parent signed at the bank, the one that handles the accounts and the house, is not a medical key. Three things do work, and they work in different situations:

• A health care power of attorney makes you a personal representative under HIPAA, with the same right of access your parent has, though that access reaches only the information relevant to the representation. A broad proxy gets you the record; one written for a single treatment decision gets you only what relates to it. If it is a springing proxy, it does nothing until it is triggered by incapacity, and it stops working again if your parent recovers.
• A durable power of attorney that includes the power to make health care decisions also works. HHS lists it alongside a health care proxy and a court-appointed guardian. The health care authority has to actually be in there; a general financial form will not do it by implication.
• A HIPAA authorization is the right instrument for the everyday case, which is the one nobody writes about: your parent is competent, fully in charge, no proxy has been triggered, and they simply want the cardiologist to be able to call you back.

There is also an informal route. Federal privacy rules let a provider share information with family who are involved in someone’s care. But read the verbs: the provider maydisclose, and only the information “directly relevant” to your involvement. A signed authorization is different in kind. It removes the discretion the informal route runs on, because the provider no longer has to judge whether you count as involved, and it is exempt from the minimum-necessary standard that limits the informal route. (HIPAA permits rather than compels a disclosure made under an authorization, so it is not a lever you can force. It is simply the difference between getting fragments and getting the record.)

Among caregivers whose care recipient had been in the hospital overnight in the past year, 70% said they were included in discussions about their care, per the AARP and NAC 2025 report. Among caregivers aged 18 to 49, 64% were. How much of the remainder is HIPAA being misapplied is genuinely unknown, and the honest answer is more interesting than the assumption: the National Academies concluded in 2016 that reliable data on caregivers’ information-access problems is non-existent, and also that most failures to disclose are permissive exercises of discretion rather than violations of the Privacy Rule. In other words, the wall you hit is usually a lawful judgment call, not a legal prohibition. Which is exactly why having the paperwork on file matters: it takes the judgment call off the table.

Phase 2: authority while they’re alive

Four documents, and they do four genuinely different jobs. Getting the vocabulary right matters, because the same words mean different things in different places.

The durable financial power of attorney

This names an agent to handle money: accounts, bills, property, taxes. “Durable” is a term of art with a precise meaning. Under the Uniform Power of Attorney Act it means “not terminated by the principal’s incapacity,” and the act reversed the old default so that a power of attorney is now durable unless the document expressly provides that it terminates on incapacity. That act has been adopted in 32 states and jurisdictions (Uniform Law Commission enactment data, July 2026), so the default where you live depends on whether yours is one of them.

A springing power of attorney only takes effect on incapacity. It sounds prudent and creates a practical problem: someone has to certify that the trigger occurred before anyone will honor it, which is exactly the delay you were trying to avoid.

The health care power of attorney

A different document under a different body of law. Financial powers of attorney are governed by the Uniform Power of Attorney Act; health care agency comes from the Uniform Health-Care Decisions Act. Your state may call the person you name a proxy, a surrogate, an agent, or a representative. The National Institute on Aging treats all of these as the same function, so do not assume a difference in substance when you see a different label.

Note the trap: “durable” appears in both families of document and means something slightly different in each. A “durable power of attorney for health care” is a proxy appointment, not a financial one.

The advance directive, and the living will inside it

“Advance directive” is the umbrella. The two most common are the living will and the durable power of attorney for health care. The division of labor is clean: the proxy names who decides; the living will says what they should decide. A living will cannot name a decision-maker, and it has nothing to do with finances.

One caveat worth knowing before you rely on it, in the NIA’s own words: an advance directive is “legally recognized but not legally binding.” Providers and proxies will do their best to follow it, and circumstances can make exact compliance impossible.

Advance directives generally do not expire. New York’s Attorney General puts the rule precisely: a directive remains in effect indefinitely unless you cancel it, include an expiration date, or describe circumstances that trigger expiration. There are narrow exceptions, and they are easy to miss. Illinois, for instance, allows a mental health treatment preference declaration to be invoked only within three years of signing, though if it has been invoked and is in effect when those three years run out, it stays effective until the person is no longer incapable.

POLST, MOLST, and the DNR

A POLST is not an advance directive, and the difference is the one that matters in an ambulance. An advance directive is a legal document the individual fills out. A POLST is a medical ordera clinician completes after a conversation with a seriously ill or frail patient. National POLST states the consequence directly: legal documents like advance directives “are not orders that EMS providers can follow,” while a POLST is. If your parent is healthy, they do not need one; an advance directive is the right tool.

The form goes by MOLST, POST, MOST, and LaPOST among others, depending on where you are. National POLST counts 16 different acronyms across the country and is actively trying to reduce the variation. In New York, the MOLST is the only form the state authorizes for documenting both a non-hospital DNR anda non-hospital DNI order; a DNR on its own can also be written on New York’s form DOH-3474.

One more caveat on the EMS point: exactly which documents responders can act on is set state by state, and National POLST notes that each state writes its own rules. New York, for instance, also requires EMS to honor a non-POLST out-of-hospital DNR. The durable distinction is medical order versus legal document, not POLST versus everything else.

And a widely misunderstood limitation of DNR orders themselves. In a 2012 AHRQ PSNet commentary, UCSF’s Wendy Anderson noted that DNR orders “are facility- and encounter-specific; they are not valid upon transfer to another facility or to the community, or upon re-presentation to the same facility after discharge.” That last clause is the counterintuitive one: a return trip to the same hospital can require a new order. The commentary dates to 2012 and reflects its author rather than the agency, but the structural point still holds, and it is why portable orders exist at all.

The HIPAA authorization

Worth understanding mechanically, because you will sign a lot of them. Federal rules require six core elements: a specific description of the information, who may disclose it, who may receive it, the purpose, an expiration date or event, and your parent’s signature and date. When your parent initiates it, “at the request of the individual” is a sufficient statement of purpose. The rule also requires plain language.

Two consequences people find surprising. First, an expiration is mandatory, so every authorization has an end, and one whose date has passed is simply invalid. Second, there is no federal HIPAA form. The rule specifies required content, not a required document, which is why every practice hands you its own version and why you will sign one at each provider rather than once. Your parent can revoke any of them in writing at any time.

Where a power of attorney stops working

This section does not appear on any page currently ranking for this topic, and it is the one most likely to cost you a wasted afternoon. Several federal agencies do not accept a power of attorney at all. Each runs its own process, and none of them care what your state document says.

Social Security: a POA is not enough, and never has been

Social Security’s own guidance is unambiguous. Power of attorney “typically makes no finding about the individual’s capability or competence,” and:

“The Treasury Department does not recognize power of attorney for negotiating federal payments, including Social Security or SSI checks. This means, if you have power of attorney for someone who is incapable of managing his or her own benefits, you must still apply to serve as his or her payee.”

The mechanism is the Representative Payee. You apply on Form SSA-11-BK and Social Security appoints you; it is not something you assert. A joint bank account does not do it either, and individual payees are never approved to charge a fee. The power of attorney is not quite worthless here. Social Security’s own manual says its presence “indicates that a favorable, trusted relationship exists” between the two of you. But it earns you no place in the payee preference order, which ranks candidates by relationship and custody and never mentions powers of attorney at all.

If your parent still has capacity, there is a better move available today. Advance Designation lets them name up to three people they would want as payee, before anyone needs one.

Medicare: Form CMS-10106

To let Medicare discuss anything with you over the phone, your parent signs the Authorization to Disclose Personal Health Information Release Form, Form CMS-10106. Medicare states that by law it needs written permission before 1-800-MEDICARE can share information with anyone but the beneficiary. The form lets them choose between sharing any information or limiting it to named categories: Medicare eligibility, Medicare claims, health and drug plan enrollment, premium payments, and a free-text “Other” line.

Note the duration field: there is no default. Your parent picks “indefinitely” or a specific date range, so read that box rather than assuming. If you are acting for your parent you can sign on their behalf by checking the personal-representative box and attaching, in the form’s words, “a copy of the paperwork that shows you can act for the person (like a Power of Attorney).”

The IRS: Form 2848 or Form 8821

A generic state durable power of attorney usually fails at the IRS, because it names no tax form numbers and no tax years. Two purpose-built forms exist, and the choice between them is about what you need to do.

• Form 2848 lets you represent your parent. You do not need to be a CPA or an attorney: the form has a category (f) for a family member, defined to include a child, and no credential is required.
• Form 8821 lets you see and receive tax information and nothing more. It has no eligibility restriction at all. If you only need to read the file, this is the simpler instrument.

Neither form has the short expiry people expect. Both run until revoked, and the one-year clock most people are remembering belongs to the Third Party Designee checkbox on the Form 1040 itself, which is a weaker authorization altogether. There are still limits worth knowing: the IRS will not record future tax periods more than three years out, filing a new Form 8821 automatically revokes earlier ones unless you attach copies, and authorizations are purged from the IRS’s central file seven years after the signature date.

One trap worth flagging: an IRS authorization is generally terminated if your parent becomes incapacitated, unless that continuation is specifically authorized on line 5a and the underlying non-IRS durable power of attorney meets the IRS’s requirements.

The VA: a power of attorney earns you nothing

If your parent is a veteran, this is the sharpest edge of all. Asked by a commenter to accommodate durable powers of attorney in its fiduciary rules, the VA declined, explaining in the Federal Register that it “would not be good policy to give a person holding a beneficiary’s POA priority based only upon the existence of a POA,” because beneficiaries can be coerced into signing and the VA cannot tell whether the document is still in effect.

The VA’s preference list for fiduciaries runs ten rungs, and a power-of-attorney holder appears nowhere on it. The good news for most readers of this page: an adult child who has care or custody of the parent or their funds sits at rung three, above “any other relative,” and the beneficiary’s own stated preference outranks everyone. Holding the power of attorney simply is not what puts you there.

To simply receive benefit information, the form is VA Form 21-0845, and there is a deadline hiding in it: it may not be executed by a beneficiary the VA has already recognized as incompetent for VA purposes, and the VA will not accept it from one either. That is a benefits determination rather than a court finding, and it is another argument for doing this early.

Confusingly, the VA calls its claims-representation forms (21-22 and 21-22a) “powers of attorney” too. That is a term of art for claims representation, not financial authority, and generally requires an accredited representative.

After the signature: copies, banks, and refusals

Every checklist ends at “get these signed and put them in a fireproof safe.” That is provisioning. What follows is operations, and it is where the documents actually get tested.

Get it notarized, or lose your best protection

The Uniform Power of Attorney Act’s anti-refusal provisions apply only to an acknowledged, meaning notarized, power of attorney. The act’s own commentary warns that people presented with an unacknowledged one may be reluctant to accept it. Notarizing is the cheapest insurance in this entire process.

Never hand over the original

The CFPB’s guide for agents says it flatly: never give away the original document, and get certified copies instead. Order more than you think you need. Between banks, brokerages, insurers, and medical practices, families routinely need several, and a second trip to the notary or the county is pure waste.

When the bank asks for its own form

This happens constantly, and most families assume the bank is right. Often it is not. In states that have adopted the Uniform Power of Attorney Act, a person presented with an acknowledged power of attorney:

“may not require an additional or different form of power of attorney for authority granted in the power of attorney presented.”

They have seven business days to accept it or request a certification, translation, or opinion of counsel, and five more after receiving one. Refusal in violation of that section exposes the institution to a court order mandating acceptance andliability for your reasonable attorney’s fees and costs.

There are legitimate grounds for refusal, six of them, and some are broader than you would hope: that the institution would not have to do the transaction with your parent anyway, a good-faith belief the document is invalid or the agent lacks authority, actual knowledge that it has terminated, a refused request for certification, inconsistency with federal law, or a report to adult protective services about possible abuse or exploitation by the agent. The second one in particular leaves real room for judgment.

The CFPB’s advice when you meet resistance is to ask for the branch manager or the institution’s attorney, and its best tip is preventive: share the power of attorney with the bank in advance, which it recommends to smooth the way for your agent later. The reason that matters more than it sounds is the one the CFPB’s caregiver guide names elsewhere: a bank wanting your parent to sign its own form is a problem specifically once your parent can no longer sign anything. Sorting it out early is sorting it out while it is still fixable. That this needed two sections of a uniform act, a dedicated CFPB FAQ, and a warning in the CFPB’s own caregiver guide tells you how routine it is.

Crossing state lines

Most states recognize directives executed elsewhere, but “most” is doing real work in that sentence. The uniform fix exists: the Uniform Recognition of Substitute Decision-Making Documents Act, a joint US and Canadian project, was written specifically because most statutes across both countries lack portability provisions. Three jurisdictions have adopted it. The newer Uniform Health-Care Decisions Act, from 2023, also three. Note too that the recognition act covers documents that appoint a decision maker, not ones that merely record instructions, so a standalone living will or DNR order is outside it.

The NIA suggests that anyone splitting time between states consider preparing directives on each state’s form and keeping a copy in each place. For a POLST, “portable” means across care settings, not across state lines; bring it to the first appointment with a new provider and have it rewritten on the new state’s form.

Phase 3: after death (and what dies with them)

The most important fact in this section is about a Phase 2 document. A power of attorney terminates the moment your parent dies. Every power granted by it is gone. The CFPB spells out the consequence that catches families hardest: even if you can easily pay some of their outstanding bills, you will no longer have the authority to do so.

Authority passes to the executor or administrator named in the will and appointed by the court. The IRS deletes its authorizations at death too. If you have been managing everything for years, the practical shock is that your access ends on the worst possible day.

One narrow mercy in the uniform act: an act performed in good faith by an agent who did not yet know the principal had died still binds the estate, and a third party who accepts the agent’s authority without knowing of the death is protected too. That is a rule about not unwinding honest transactions, though, not permission to keep using the document once you know.

The estate documents themselves (the will, any revocable living trust, and the beneficiary designations on retirement accounts and life insurance that override both) are covered in our estate planning documents checklist, and the sequence for the weeks after a death is in what to do when someone dies. What belongs here is only the handoff: know where the original will is, with its original signature, and know who the named executor is before you need either.

If your parent can’t sign anymore

Every document above requires capacity at the moment of signing. If that window has closed, the remaining route is guardianship or conservatorship, which means a court. The CFPB describes it plainly: without a power of attorney in advance, a friend or family member might have to go to court to have a guardian appointed, and that process “can be lengthy, expensive, and very public.” The Uniform Law Commission’s drafters made the same point, noting that rejection of a substitute decision-making document after capacity is lost often results in guardianship, which burdens courts and undermines the person’s self-determination.

Which is the argument for treating this as urgent while it still feels premature. 27% of care recipients already have Alzheimer’s, dementia, or another memory impairment (AARP and NAC, 2025), and an estimated 7.4 million Americans aged 65 and older are living with Alzheimer’s dementia in 2026, per the Alzheimer’s Association. Set that against the 43% who have any plan at all, and the gap is the whole problem. The conversation is uncomfortable exactly once. The alternative is a court date.

The part that decides whether any of it works

You can do everything above correctly and still lose, because a document nobody can produce is functionally a document that does not exist.

There is a specific, mechanical reason this fails so often. Federal regulation requires providers to document in a prominent part of the medical record whether or notthe individual has executed an advance directive. It does not require them to hold the document. So the record says one exists, and nobody in the room can read it. National POLST concedes the point in its own comparison chart. Against the row “Is the document easily found?” the entry for advance directives reads “Not always”, followed by an instruction to be sure you give a copy to your provider and your surrogate.

Which produces the situation this whole page is really about. It is 2am, your parent is in an emergency room, and the question is not whether the healthcare proxy exists. It is whether you can produce it in the next four minutes, from a phone, in a hallway.

A few things that help regardless of how you store them. Distribute copies beforea crisis: the signed HIPAA authorizations to each practice, the proxy to the hospital system your parent actually uses, the power of attorney to the bank. Ask whether your parent’s health system will attach the directive to the chart or the patient portal. Make sure a sibling has the same access you do, so care does not stall when you are on a plane. And write down where the originals live, which is a different question from where the copies live.

This is the job Granite was built for. Drop in the proxy, the HIPAA forms, the Medicare and Advantage cards, the medication list, and the insurance policies, and it reads each one as it lands, pulls out the details that matter (member IDs, policy numbers, effective dates, expirations), and answers questions in plain English with a citation to the page the answer came from. Everything is encrypted, which matters more than usual for a set that includes Social Security numbers and medical records. And because the point of these documents is that someone else can reach them, Granite’s continuity features (an emergency contact, an opt-in inactivity heartbeat, an always-exportable archive) exist so the archive outlives the person keeping it.

What Granite does not do is draft any of these documents, file them with Social Security or the VA, or give legal advice. For the drafting, and for anything genuinely contested, you want an elder-law attorney. Granite handles the part that comes after: making sure that when it is 2am, the document is a search away instead of a filing-cabinet excavation.