Paxton Lawsuit Puts Epic’s Control of Pediatric Health Records Under the Microscope
Texas Attorney General Ken Paxton is challenging Epic Systems’ handling of pediatric medical records, alleging unlawful limits on parental access and raising broader questions about data control, compliance, and oversight for providers and laboratories.
For clinical laboratory leaders, the growing legal and regulatory scrutiny of electronic health record (EHR) vendors is no longer a peripheral issue. How patient data are controlled, shared, and accessed has direct implications for test ordering, result reporting, compliance, and patient trust. That context frames a new lawsuit filed by Texas Attorney General Ken Paxton against Epic Systems Corporation, one of the nation’s most dominant health IT companies.
Paxton alleges that Epic has unlawfully monopolized the EHR market and engaged in deceptive practices that restrict parental access to minors’ medical records, in violation of Texas law. Epic’s software houses more than 325 million patient records, representing roughly 90% of the U.S. population, according to the complaint.
Why Adolescent Consent Laws Drive Parental Access Limits in Patient Portals
Providers and EHRs restrict parental access to adolescent records primarily to comply with state and federal privacy laws. In many states, including Pennsylvania, minors age 13 and older can legally consent to certain types of care—such as mental health services, substance use treatment, sexual and reproductive health, and some infectious disease testing—without parental involvement. When a minor has the right to consent, providers are legally required under state law and HIPAA to keep that related protected health information confidential.
EHR systems like MyChart enforce these rules by automatically limiting parental access when a child turns 13 and masking sensitive results or medications to prevent accidental disclosure. These controls also align with national clinical guidance, including recommendations from the American Academy of Pediatrics, which emphasize protecting adolescent confidentiality to ensure teens seek care and communicate openly with clinicians.
Image by mcmurryjulie from Pixabay
The lawsuit claims Epic uses “exclusionary tactics” to suppress competition, including interfering with hospitals’ ability to use their own patient data and limiting interoperability with competing software. Paxton argues these practices result in incomplete or outdated health records being shared among providers, diminishing care quality for Texas patients and increasing costs for hospitals.
For laboratories, these allegations raise concerns about data liquidity and timely access to diagnostic information. In fragmented or restricted EHR environments, lab results may not follow patients across care settings, potentially affecting clinical decision-making and continuity of care.
Parental Access to Pediatric Records at the Center of Legal Challenge
The suit also focuses on Epic’s handling of pediatric records. Paxton alleges the company automatically restricts parental access to medication lists, treatment notes, and provider messages once a child turns 12. The attorney general argues Epic does not own this data and has no authority to withhold it.
“These deceptive practices undermine the fundamental right of parents to direct their children’s healthcare,” the lawsuit states, citing Texas Health & Safety Code § 183.006, which grants parents “complete and unrestricted access” to their minor children’s medical records.
“We will not allow woke corporations to undermine the sacred rights of parents to protect and oversee their kids’ medical well-being,” Paxton said. “This lawsuit aims to ensure that Texans can readily obtain access to these records and benefit from the lower costs and innovation that come from a truly competitive electronic health records market.”
The Epic lawsuit is part of a broader enforcement push. Earlier this year, Paxton’s office reached a settlement with Austin Diagnostic Clinic requiring full restoration of parental proxy access for patients ages 12 to 17. Civil investigative demands have also been issued to other EHR vendors operating in Texas.
For lab leaders, the case underscores increasing regulatory attention on how diagnostic data are governed inside EHR systems. As states and regulators challenge vendor practices around data access, interoperability, and patient rights, laboratories may find themselves navigating new expectations for transparency, parental access, and compliance—while also reassessing their dependence on a highly consolidated health IT ecosystem.
—Janette Wider
