NPP for Pediatric Practices — Minor Patient Rights Under HIPAA

NPP Generator Research Team · April 25, 2026 · 6 min read

Pediatric practices follow the same HIPAA NPP requirements as any other covered entity — but the minor patient context introduces unique considerations around who receives the NPP, who holds the patient's HIPAA rights, and what happens when a minor has independent rights to certain services.

Who receives the NPP for a minor patient?

Under HIPAA, a minor patient's parent or legal guardian is the patient's "personal representative." The personal representative has the same HIPAA rights as the patient — including the right to receive the NPP, access medical records, and request amendments. For routine pediatric care:

• Provide the NPP to the parent or guardian at the child's first service date
• Request the parent's written acknowledgment of receipt (not the child's)
• Document the delivery in the patient's record, noting the relationship of the person who received the NPP

For adolescent patients who accompany themselves to appointments, best practice is still to provide the NPP to the parent (the legal personal representative) unless the services fall into an independent consent category.

When minors have independent HIPAA rights

HIPAA defers to state law on minor consent. When state law permits a minor to consent to a specific health service without parental involvement, the minor — not the parent — controls HIPAA rights for that service. Common categories in many states:

• Mental health and behavioral health services. Most states allow minors above a threshold age (typically 12–16) to consent to outpatient mental health treatment independently.
• Substance use disorder treatment. Many states allow minors to consent to SUD counseling without parental consent.
• Sexual and reproductive health. Contraception, STI testing and treatment, and pregnancy-related care commonly fall under minor consent in most states.
• HIV/AIDS testing and treatment. Widely available without parental consent across most states.

The practical implication: if a 15-year-old presents for STI testing under a state that permits independent minor consent, the minor controls HIPAA access rights to those records — the parent does not automatically have a right of access. The NPP is provided to the minor, not the parent, for that service.

Divorced parents and split custody

Divorced or separated parents create common questions for pediatric NPP distribution. HIPAA's rule: a parent who has authority under state law to make health care decisions for the minor is a personal representative. Typically:

• Both parents with joint legal custody have personal representative status
• A parent with sole legal custody is the only personal representative
• A parent whose rights have been terminated under state law is not a personal representative

Practices can request copies of custody orders to resolve ambiguous situations. You are not required to adjudicate custody disputes — when in doubt about legal authority, request documentation.

When minors turn 18

At 18, the minor becomes an adult and acquires full HIPAA rights. Parents lose their automatic personal representative status. In practice:

• Update the patient record to recognize the now-adult patient as their own personal representative
• The former minor must provide written authorization for a parent to access their records after age 18
• Consider re-obtaining NPP acknowledgment from the adult patient at their next appointment — this is a clean record-keeping practice

What to include in your pediatric NPP

The required content is the same as any HIPAA NPP. Optional additions for pediatric practices:

• A note that for minor patients who have consented to certain services independently under applicable state law, the minor controls access to those records
• Contact information for parents with questions about records access

Adding this language is best practice for practices that treat adolescent patients for services commonly subject to minor consent. It sets expectations and reduces parent/minor conflicts over records access.

Frequently Asked Questions