Authorisation To Release Information To A Third Party Form Template for England and Wales

The Authorisation To Release Information To A Third Party Form is a critical legal document that enables you to formally grant permission for your personal information to be shared with designated third parties. Under England and Wales law, this form ensures compliance with strict data protection requirements while providing clear legal authority for information disclosure.

When do you need this document?

You will need this authorization form whenever your personal information must be shared between organizations or individuals for legitimate purposes. Common scenarios include authorizing your GP to share medical records with a specialist consultant, permitting your bank to provide financial information to a mortgage broker, or allowing your employer to verify employment details with a potential landlord. Educational institutions may require this form to share student records with prospective employers, and insurance companies often need authorization to access medical or employment histories when processing claims.

Key legal considerations

The form must clearly specify what information can be shared, with whom, and for what purpose to meet legal requirements for informed consent. You retain the right to limit the scope of information disclosure and can specify time restrictions on the authorization. The document should identify all parties involved, including your details as the data subject, the organization holding your information, and the authorized third party recipient. Consider including provisions for data security requirements and specify whether the third party can further share the information. Be aware that you can revoke this authorization at any time, though this may not affect information already shared under the original consent.

Legal requirements in England and Wales

Under UK GDPR and the Data Protection Act 2018, your consent must be freely given, specific, informed, and unambiguous for the authorization to be legally valid. The information holder must have a lawful basis for processing your data, and sharing with third parties requires explicit consent unless another legal exception applies. If you lack mental capacity, authorization may need to come from someone with legal authority under the Mental Capacity Act 2005, such as a lasting power of attorney. Public authorities subject to the Freedom of Information Act 2000 may have additional disclosure obligations, but personal data remains protected under data protection laws. The common law duty of confidentiality also applies, meaning professionals like doctors and lawyers have heightened obligations to protect your private information unless you provide clear authorization for disclosure.