Authorisation For Release Of Information Form Template for England and Wales

An Authorisation For Release Of Information Form is a critical legal document that enables the lawful sharing of personal information between parties in England and Wales. Under the Data Protection Act 2018 and UK GDPR, you need explicit consent before processing or transferring personal data. This form provides that consent while ensuring compliance with strict data protection requirements and creating a clear record of authorisation.

When do you need this document?

You require this form whenever personal information needs to be shared between organisations or individuals. Healthcare providers use it to release medical records to specialists or insurance companies. Educational institutions need it to share student records with prospective employers or other schools. Social services departments require it when coordinating care between agencies. Legal professionals use it to obtain client information from third parties during proceedings. Employers need it when conducting background checks or sharing employee information with pension providers.

Key legal considerations

The form must clearly identify the data subject, authorising party, information holder, and recipient. You must specify exactly what information is being released, avoiding broad or vague descriptions that could exceed the intended scope. The purpose for sharing must be legitimate and clearly stated, as consent is only valid for the specific purpose given. Consider including time limits on the authorisation to prevent indefinite data sharing. Special category data, such as health records or criminal convictions, requires additional safeguards and more explicit consent. If the data subject lacks mental capacity, ensure the authorising party has proper legal authority under the Mental Capacity Act 2005.

Legal requirements in England and Wales

Under the Data Protection Act 2018, consent must be freely given, specific, informed, and unambiguous. The form must use plain English that clearly explains what information will be shared and why. Data subjects have the right to withdraw consent at any time, so include clear instructions on how to do this. For health records, comply with additional requirements under the Access to Health Records Act 1990, particularly regarding deceased patients' information. Public sector organisations must also consider obligations under the Freedom of Information Act 2000. Ensure the form includes data protection notices explaining how the information will be processed, stored, and potentially transferred. Both parties must maintain records of the authorisation as evidence of lawful processing should regulators investigate.