Authorisation For Disclosure Of Medical Information Template for England and Wales

An Authorisation For Disclosure Of Medical Information is a legal document that gives your explicit consent for healthcare providers to share your medical records with specific third parties. Under England and Wales law, your medical information is protected by strict confidentiality rules, and healthcare providers cannot disclose your records without proper authorization except in very limited circumstances.

When do you need this document?

You'll need this authorization whenever you want your medical information shared beyond your direct healthcare team. Common situations include applying for life insurance where insurers require access to your medical history, pursuing personal injury claims where your solicitor needs medical evidence, or when switching between private healthcare providers who need your treatment history. Employment health assessments, disability benefit applications, and court proceedings also frequently require medical record disclosure. Without proper authorization, healthcare providers are legally prohibited from sharing your information, which could delay important processes like insurance claims or legal proceedings.

Key legal considerations

Your authorization must be specific and informed to be legally valid. You need to clearly identify what medical information can be disclosed, covering which time periods, and specify exactly who can receive this information. The document should include limitations on use, ensuring recipients can only use your medical data for the stated purpose. You retain the right to withdraw your consent at any time, though this won't affect information already disclosed. Healthcare providers must ensure the recipient has legitimate grounds for accessing your medical records and appropriate data protection measures in place. Consider including expiry dates to prevent indefinite access to your medical information.

Legal requirements in England and Wales

Under the Data Protection Act 2018 and UK GDPR, medical information is classified as special category data requiring explicit consent for processing. Your authorization must meet strict legal standards, including being freely given, specific, informed, and unambiguous. Healthcare providers must verify your identity before processing any disclosure request and maintain records of all information shared. The Access to Health Records Act 1990 governs disclosure of deceased patients' records, requiring different authorization procedures. Recipients of your medical information become data controllers under UK GDPR, meaning they must protect your data according to the same standards as healthcare providers. Common law confidentiality duties continue to apply alongside statutory requirements, creating additional legal obligations for all parties handling your medical information.