Authorisation To Release Information Template for England and Wales

An Authorisation To Release Information is a crucial legal document that allows you to give formal permission for your personal or confidential information to be shared with specified parties. Under England and Wales law, this document serves as evidence of your informed consent for data sharing, ensuring compliance with strict data protection regulations while protecting your privacy rights.

When do you need this document?

You need this authorization in various situations where your personal information must be shared legally. Healthcare providers require it when transferring medical records between hospitals or to insurance companies. Financial institutions use it when sharing credit information with mortgage brokers or accountants. Employers may need it when conducting background checks or sharing employment records with potential new employers. Educational institutions require authorization before releasing academic transcripts or student records to third parties. The document is also essential when dealing with legal representatives who need access to your personal information to provide services.

Key legal considerations

The authorization must clearly specify what information will be released and to whom, ensuring you understand exactly what data is being shared. The document should include a defined time limit for the authorization, preventing indefinite access to your information. You have the right to limit the scope of information released and can specify particular records or categories of data. The purpose for which the information is being shared must be clearly stated and legitimate. Under data protection law, you can withdraw your consent at any time by providing written notice, though this may not affect information already shared. The recipient organization must handle your data in accordance with UK GDPR principles, including keeping it secure and using it only for the stated purpose.

Legal requirements in England and Wales

Under the UK GDPR and Data Protection Act 2018, your authorization must meet specific criteria to be legally valid. The consent must be freely given, specific, informed, and unambiguous, meaning you cannot be pressured into signing and must understand what you are agreeing to. The document must identify the data controller and provide clear contact information for data protection queries. When health information is involved, the Access to Health Records Act 1990 imposes additional requirements for medical data sharing. For public sector information sharing, the Freedom of Information Act 2000 may apply, particularly when dealing with government departments or public bodies. The authorization must be written in plain English that you can easily understand, and any complex legal terms must be explained. Organizations receiving your information must have appropriate technical and organizational measures in place to protect your data from unauthorized access or breaches.