Release of Information Form Template for the UK

Generate a bespoke document

What is a Release of Information Form?

A Release of Information Form lets you give formal permission for someone to share your private details with others. Common in healthcare, these forms protect both the organization holding your data and you as the data subject under UK privacy laws like GDPR and the Data Protection Act 2018.

The form spells out exactly what information can be shared, who can receive it, and how long the permission lasts. You might need one when requesting medical records be sent to a new doctor, sharing employment details with a potential landlord, or allowing schools to release academic records. You can cancel this permission at any time by notifying the organization in writing.

Frequently Asked Questions

When should you use a Release of Information Form?

You need a Release of Information Form anytime you're sharing sensitive personal data with third parties in the UK. This comes up frequently when transferring medical records between healthcare providers, sharing educational records with potential employers, or providing financial information to mortgage lenders.

The form becomes essential when dealing with data protected under GDPR and the Data Protection Act 2018. For example, insurance companies often require one to access medical histories, employers may need one to verify past employment, and solicitors typically request one to obtain records for legal proceedings. Getting this signed upfront prevents delays and ensures compliance with UK privacy laws.

What are the different types of Release of Information Form?

Who should typically use a Release of Information Form?

  • Data Controllers: Organizations like NHS trusts, schools, or businesses that hold personal information and need authorization to share it.
  • Data Subjects: Individuals whose personal information is being shared, who must give informed consent via the Release of Information Form.
  • Third-Party Recipients: Organizations receiving the information, such as insurance companies, employers, or other healthcare providers.
  • Legal Representatives: Solicitors who draft and review these forms to ensure GDPR compliance and protect client interests.
  • Compliance Officers: Internal staff who oversee proper handling of information releases and maintain data protection standards.

How do you write a Release of Information Form?

  • Basic Details: Gather full names, addresses, and contact information for all parties involved in the information release.
  • Information Scope: Clearly specify what data will be shared, including date ranges and any specific exclusions.
  • Purpose Statement: Document the exact reason for sharing information and how it will be used.
  • Time Limits: Set clear start and end dates for the authorization period.
  • Access Methods: Define how information will be transmitted and who can access it.
  • Data Protection: Include GDPR-compliant privacy statements and data handling procedures.
  • Verification Process: Plan how you'll confirm the identity of all signing parties.

What should be included in a Release of Information Form?

  • Identity Details: Full legal names and contact information of all parties, including the data controller and recipient.
  • Consent Statement: Clear, explicit permission language that meets GDPR Article 7 requirements.
  • Information Scope: Precise description of what data will be shared, including any limitations or exclusions.
  • Time Parameters: Specific dates for when the authorization begins and ends.
  • Rights Notice: Statement of the data subject's right to withdraw consent and how to do so.
  • Data Protection: Description of security measures and compliance with UK data protection laws.
  • Signature Block: Space for dated signatures, including witness provisions if required.

What's the difference between a Release of Information Form and a Consent Form?

A Release of Information Form is often confused with a Consent Form, but they serve distinct purposes in UK law. While both involve permissions, their scope and application differ significantly.

  • Specificity and Scope: Release forms specifically authorize sharing particular information with named third parties, while consent forms cover broader permissions for various activities or data uses.
  • Duration and Revocation: Release forms typically have defined time limits and specific purposes, whereas consent forms often remain active until explicitly withdrawn.
  • Legal Framework: Release forms focus on GDPR and Data Protection Act compliance for information sharing, while consent forms can cover various legal requirements beyond data protection.
  • Usage Context: Release forms are common in healthcare, education, and professional settings for transferring specific records. Consent forms appear in marketing, research, and general business operations.

Reviewed by

Swetha Meenal

Legal Engineer, GenieAI

Swetha Meenal profile photo

A lawyer, legal researcher and legal tech founder, Swetha has built AI products deployed inside Tier 1 firms and enterprises. She ensures GenieAI's alignment with the latest regulation and executes testing on the legal robustness of Genie output.

Reviewed by

Imad Mohammed Nazar

Legal Engineer, GenieAI

Imad Mohammed Nazar profile photo

A Skadden-trained M&A lawyer, Imad advised on cross-border transactions and contractual risk before moving into legal AI. He reviews GenieAI's output for compliance and enforceability across our 150+ supported jurisdictions, as well as facilitating external benchmarking.

Jurisdiction

England & Wales

Publisher

GenieAI

Category

Forms

Cost

Free to use

Last updated

About the Release of Information Form

  • Basic Details: Gather full names, addresses, and contact information for all parties involved in the information release.
  • Information Scope: Clearly specify what data will be shared, including date ranges and any specific exclusions.
  • Purpose Statement: Document the exact reason for sharing information and how it will be used.
  • Time Limits: Set clear start and end dates for the authorization period.
  • Access Methods: Define how information will be transmitted and who can access it.
  • Data Protection: Include GDPR-compliant privacy statements and data handling procedures.
  • Verification Process: Plan how you'll confirm the identity of all signing parties.

All Release of Information Form templates

View more templates

Genie's Security Promise

Genie is the safest place to draft. Here's how we prioritise your privacy and security.

Your data is private:

We do not train on your data; Genie's AI improves independently

All data stored on Genie is private to your organisation

Your documents are protected:

Your documents are protected by ultra-secure 256-bit encryption

We are ISO27001 certified, so your data is secure

Organizational security:

You retain IP ownership of your documents and their information

You have full control over your data and who gets to see it