HIPAA exists to protect patient privacy. However, Rachel (thatdangrachel), a California mother, learned that she would soon no longer have access to her 11-year-old son’s medical records. Confused, she felt compelled to share it on Instagram. Her post not only got 4 million views, but it also sparked a massive conversation and inspired stitches from other platforms. Rachel began recording midway through a conversation with his doctor’s office. In the video, she laughs helplessly as the receptionist or nurse explains things to her. Seeking confirmation, she states what she understood from the conversation so far, saying, “So, while he’s 11, I’ll have access to his medical records. But once he turns 12, the government locks me out?” She gets the confirmation: “He now has privacy rights under HIPAA at the age of 12.” Rachel asks again, “So as a parent, I can’t see my 12-year-old’s medical records?” The office staff member explains that this was the rule, admitting, “I don’t even agree with it.” The representative then uses her experience to advise that Rachel should request elevated access, but it requires the child to consent. Rachel responds, “He’s not even going to understand what that is.” A nationwide rule with different state thresholds Based on the shock in the comment section, it’s clear that many people didn’t know about the rule either. One user argued, “Minors cannot give consent.” Another asked, “What happened to until 18 years of age? What does a 12 year old know about his or her own health.” CALIFORNIA IS TRYING TO CUT PARENTS OUT OF THEIR OWN CHILDREN’S HEALTH CAREIn California, once a child turns 12, parents can lose access to portions of their medical records and patient portal, even while the parent is still legally responsible for that child’s health,… pic.twitter.com/zmH1toiEem— The Undercurrent (@NotTheirScript) July 19, 2026 Others pointed out the contradiction of parents being responsible for bills while being locked out of the clinical details. One commenter suggested, “So cancel his insurance and let them try to sue a 12 year old for payment.” Another user remarked, “Yet they still come to us when it’s time to pay the bill.” Rachel uploaded a follow-up to share her findings on the California-specific law. She told her viewers that the policy is tied to California AB 499, which was enacted in 2012. She explained, “The only reason us as parents are fully blocked when they turn 12 is because the medical record systems are not smart enough to pick and choose what you can see. And so because they can’t just block out the reproductive stuff, they block out everything unless your child says something.” Medical privacy for minors is a complex issue. According to Kids & Teens SPC, HIPAA laws regarding minors defer to state law. While parents are generally considered the minor’s personal representative, there are key exceptions. When a state law reportedly allows a minor to consent for services like STI testing or mental health care, that specific care becomes confidential. In those instances, the parent is no longer the personal representative for that specific visit, and the provider must protect the teen’s privacy. Kids & Teens SPC explains that this confidential care is intended to build trust. For many teenagers, the fear that their health information will be shared with parents is the primary reason they avoid seeking medical help. When confidentiality is assured, adolescents are more likely to access services for sensitive issues. The American Academy of Pediatrics actually recommends that healthcare providers offer teens time alone with their clinician starting around age 11. This one-on-one time is meant to foster independence and teach young people how to navigate the healthcare system. Despite the intent, the practical application remains a point of contention. Some Instagrammers argued that the law could be exploited. One user questioned, “If a 12-year old is involved with a predator who is not a parent and that predator is directing the child on these steps because of the safety provided from said predator then doesn’t this law work in said predator’s favor?” Others, however, defended the necessity of these provisions. A clinical social worker commented on the post, stating, “The reason for this law is to protect children from abuse regarding largely sensitive topics. Your child can still give permission for you to access medical records. You will also be notified regarding the three exceptions to confidentiality, which are suicidality, homicidality, and child abuse.” For parents, navigating the intersection of state law, federal HIPAA rules, and their child’s growing independence is a challenging process. As Rachel noted in her follow-up, she still has many questions about the system. Kids & Teens SPC advises that parents and teens should ask their doctor at the start of a visit about their specific privacy rules to understand exactly what information will remain confidential and what will be shared.