Access to a child's PHI is typically limited to the child's healthcare providers, parents or legal guardians, and, in certain cases, other individuals involved in the child's care. Under HIPAA, healthcare providers are required to obtain consent from a parent or guardian before sharing a child's PHI with others, except in specific situations such as emergencies.