I agree that the situation OP describes is probably an example of state law overriding federal HIPAA requirements.
For example, here’s an HHS info page that says that parents have access to their minor child's medical records except under certain circumstances (one of which is state law):
https://www.hhs.gov/hipaa/for-profes...ney/index.html
And here’s what the risk management folks have to say, specifically for N.C. — note the exceptions for legally emancipated minors (I’m not sure if every state uses this term) and for specific kinds of health care:
https://www.medicalmutualgroup.com/ic-nc-minors
My guess is that — like so many other things — it depends. But OP's experience does not seem to be universal.
Sent from my iPad using Baby Bargains