Only named individuals on the DPA have authority, and ONLY when the person is incapacitated. HLC have zero say if they are not specifically named on the document - as one would expect.
It is/was common for HLC to skirt HIPPA in attempts to circumvent privacy and control the situation. Some sincerely think that they are justified but it is still illegal. Nurses still get fired for violating patient privacy. Putting hospital personnel in a position that could cost them their job is really thoughtless. Violations of this type can follow a medical worker as they seek employment after job loss.