General Authorisation To Release Information Form Template for England and Wales

A General Authorisation To Release Information Form is a legally binding document that allows you to grant permission for your personal information to be shared with specified third parties. Under England and Wales law, this form ensures compliance with strict data protection regulations while facilitating necessary information exchange for legitimate purposes.

When do you need this document?

You'll need this form when you want to authorize someone else to access your personal records or information held by organizations such as healthcare providers, employers, educational institutions, or financial services companies. This commonly occurs when appointing a representative to handle your affairs, applying for insurance or benefits, transferring between service providers, or when legal representatives need access to your records for litigation purposes. The form is also essential when family members or carers need access to your information to provide support or assistance.

Key legal considerations

Your authorization must be specific, informed, and freely given to be legally valid under UK data protection law. The form must clearly identify what information can be released, to whom, for what purpose, and for how long the authorization remains valid. You retain the right to withdraw your consent at any time, and the form should include mechanisms for doing so. Consider including restrictions on further sharing of your information and ensure the recipient understands their obligations to handle your data securely. The form should specify whether the authorization covers sensitive personal data, such as health information or criminal records, which require additional protections.

Legal requirements in England and Wales

Under the Data Protection Act 2018 and UK GDPR, organizations must have a lawful basis for processing personal data, with consent being one such basis. Your authorization must meet the high standards for valid consent, including being specific, informed, unambiguous, and freely given. When health information is involved, the Access to Health Records Act 1990 may apply additional requirements. If the information holder is a public authority, the Freedom of Information Act 2000 may also be relevant. The Human Rights Act 1998 protects your right to privacy under Article 8, meaning any information sharing must be proportionate and necessary. Organizations receiving your information become data controllers and must comply with all applicable data protection obligations, including implementing appropriate security measures and respecting your ongoing rights as a data subject.