Authorisation To Release Health Care Information Template for England and Wales

An Authorisation To Release Health Care Information is a legal document that grants permission for healthcare providers to share your medical records with specified third parties in England and Wales. This document serves as formal consent under data protection legislation, ensuring that your sensitive health information is only disclosed to authorized recipients for legitimate purposes. The document establishes clear parameters for what information can be shared, who can access it, and under what circumstances the release is permitted.

When do you need this document?

You need this document when transferring care between different healthcare providers, such as moving from NHS to private care or switching GP practices. It's essential when applying for life insurance or income protection policies that require medical history disclosure. Legal proceedings often require this authorization to obtain medical evidence, particularly in personal injury claims or employment disputes. Mental health services may need this document to coordinate care with other healthcare professionals or social services. You'll also need it when family members or legal representatives need access to medical records, especially in cases involving mental capacity issues or estate administration.

Key legal considerations

The document must clearly identify what specific medical information is being authorized for release, including date ranges and types of records. You should specify the exact purpose for the disclosure and ensure it's proportionate to the legitimate need. The authorization should include an expiry date or specific circumstances that will terminate the consent. Under UK GDPR, you retain the right to withdraw your consent at any time, and this should be clearly stated in the document. Special consideration must be given to mental health records, which have additional protections under the Data Protection Act 2018. The document must identify whether the patient has mental capacity to give consent, and if not, who has authority to provide consent on their behalf under the Mental Capacity Act 2005.

Legal requirements in England and Wales

Under UK GDPR and the Data Protection Act 2018, healthcare providers must have a lawful basis for processing personal health data, with explicit consent being the most common basis for disclosure to third parties. The Common Law Duty of Confidentiality requires that any disclosure serves the patient's best interests or has clear legal justification. Healthcare providers must ensure that only the minimum necessary information is disclosed for the stated purpose. The Access to Health Records Act 1990 governs access rights, particularly for deceased patients' records where different rules apply. Mental Capacity Act 2005 provisions apply when patients lack capacity to give consent, requiring proper assessment and involvement of authorized representatives. The document must comply with NHS information governance standards and any relevant professional regulatory requirements from bodies like the General Medical Council.