Authorisation For Disclosure Of Information Form Template for England and Wales

An Authorisation For Disclosure Of Information Form is a legal document that grants permission for your personal information to be shared with specified third parties. Under England and Wales law, this form serves as documented proof of your consent for data disclosure, ensuring compliance with strict data protection regulations while facilitating legitimate information sharing when required.

When do you need this document?

You'll need this form when requesting access to someone else's confidential records as their legal representative, when switching healthcare providers and need medical records transferred, or when applying for insurance and insurers require access to your medical history. It's also essential when dealing with deceased relatives' records, as executors often need formal authorisation to access financial or medical information. Employment situations may require this form when new employers need to verify your work history or qualifications with previous employers.

Key legal considerations

The scope of disclosure must be clearly defined to prevent unauthorised access to irrelevant information. You should specify exactly what information can be shared, who can receive it, and for what purpose. Duration clauses are crucial—the authorisation should have a clear expiry date to prevent indefinite access to your personal data. Include withdrawal provisions that allow you to revoke consent at any time, as this is a fundamental right under data protection law. Consider including restrictions on further disclosure to prevent your information being shared beyond the intended recipient without additional consent.

Legal requirements in England and Wales

Under UK GDPR and the Data Protection Act 2018, your consent must be freely given, specific, informed, and unambiguous. The form must clearly explain what information will be disclosed and why, ensuring you understand the implications of giving consent. Special category data, including health information, requires explicit consent and additional safeguards. The Mental Capacity Act 2005 governs situations where individuals lack capacity to give consent, requiring appointed deputies or attorneys to act on their behalf. Healthcare records are subject to specific provisions under the Access to Health Records Act 1990, while professional relationships involving lawyers, doctors, and financial advisors are protected by common law duties of confidentiality. Data controllers must have lawful basis for processing your information beyond consent, and recipients must handle disclosed information according to data protection principles, including security measures and retention limits.