Consent To Share Information Template for England and Wales

When your organization needs to share personal information with third parties, you must obtain proper consent under England and Wales law. A Consent To Share Information document provides the legal framework to ensure compliance with UK data protection legislation while protecting both your organization and the individuals whose data you're handling.

When do you need this document?

You need this consent form when sharing personal data with external organizations, such as when healthcare providers share patient information with specialists, employers share employee details with pension providers, or educational institutions share student records with examination boards. It's particularly crucial when handling sensitive personal data categories including health information, criminal records, or financial details. The document is also essential when establishing ongoing data sharing relationships where information will be shared regularly rather than as a one-off transaction. Organizations operating in regulated sectors often require these consent forms to demonstrate compliance during audits or regulatory inspections.

Key legal considerations

Under UK GDPR, consent must be freely given, specific, informed, and unambiguous, with clear withdrawal mechanisms. The consent form must clearly identify the data controller, specify exactly what information will be shared, and explain the purpose and legal basis for sharing. You must include details about data retention periods, security measures, and the data subject's rights including the right to withdraw consent at any time. The document should address whether data will be transferred outside the UK and what safeguards apply. Consider including clauses about data processing by third party recipients and whether they can share the information further. Professional confidentiality obligations may also apply, particularly in healthcare, legal, or financial services contexts.

Legal requirements in England and Wales

UK GDPR and the Data Protection Act 2018 establish strict requirements for valid consent in England and Wales. The consent must be documented with clear evidence that it was given, and you must be able to demonstrate compliance if challenged by the Information Commissioner's Office. Special category data requires explicit consent and additional safeguards, particularly for health, genetic, or biometric information. The Human Rights Act 1998 reinforces privacy rights, requiring that information sharing be proportionate and necessary. For public sector organizations, the Freedom of Information Act 2000 may also apply, creating potential disclosure obligations. Your consent form must comply with common law duties of confidentiality, particularly where professional relationships exist. Consider sector-specific regulations such as those governing healthcare, education, or financial services, which may impose additional consent requirements or restrictions on information sharing.