Texas Attorney General Ken Paxton has launched a legal battle against Epic Systems, claiming the health records giant unlawfully restricts parents from accessing their children’s medical information — a move that could reshape how pediatric health data is managed nationwide.
The lawsuit targets Epic’s practice of automatically limiting parental access to medication lists, treatment notes, and provider messages once a child turns 12 years old. Epic’s software currently houses more than 325 million patient records, representing approximately 90% of the U.S. population, making this challenge particularly significant for healthcare providers and families across America.
“We will not allow woke corporations to undermine the sacred rights of parents to protect and oversee their kids’ medical well-being,” Paxton declared in a statement announcing the legal action. “This lawsuit aims to ensure that Texans can readily obtain access to these records and benefit from the lower costs and innovation that come from a truly competitive electronic health records market.”
Parental Rights vs. Corporate Policy
At the heart of the dispute is Texas Health & Safety Code § 183.006, which Paxton contends grants parents complete and unrestricted access to their minor children’s medical records. Epic’s age-based restrictions, he argues, directly contradict this state law and “undermine the fundamental right of parents to direct their children’s healthcare.”
The case raises thorny questions about the balance between parental oversight and adolescent privacy in healthcare settings. While some medical professionals support limited confidentiality for adolescents in sensitive areas like reproductive health, Texas officials maintain that such policies should be established by elected representatives, not software companies.
Is this simply about parental rights? Not quite. The lawsuit also appears aimed at Epic’s dominant market position in the electronic health records (EHR) industry, with Paxton explicitly mentioning the need for “a truly competitive electronic health records market” in his public statements.
Growing Scrutiny of Health Data Practices
The Texas lawsuit comes amid increasing state-level scrutiny of how health information is managed and marketed to consumers. In a parallel development, Arizona Attorney General Kris Mayes recently defeated a motion to dismiss a consumer fraud lawsuit against CBR Systems, Inc. for allegedly misleading consumers about umbilical cord blood banking services, according to the State AG Blog.
Epic has yet to respond publicly to the Texas lawsuit. Healthcare providers using Epic’s systems now find themselves caught between potentially conflicting obligations — following their software vendor’s protocols versus adhering to state laws regarding parental access.
For parents of pre-teens in Texas, the outcome could determine whether they’ll continue to have complete visibility into their children’s medical treatments or face unexpected barriers when attempting to review certain health information.
The case highlights a growing tension between standardized software implementations and the patchwork of state healthcare regulations across the country — leaving many to wonder whether technology companies or elected officials should ultimately determine who gets to see a child’s medical records.
