General Consent To Release Information Form Template for England and Wales

The General Consent To Release Information Form provides a legal framework for sharing personal data between organizations and individuals in England and Wales. This document establishes clear authorization from the data subject, ensuring compliance with strict data protection laws while protecting individual privacy rights. You'll need this form whenever personal information must be disclosed to third parties, creating a transparent and legally compliant process for information sharing.

When do you need this document?

You need this form when sharing personal data across organizational boundaries in various professional contexts. Healthcare providers use it to share medical records between hospitals, GPs, and specialists, or when releasing information to insurance companies for claims processing. Educational institutions require it when transferring student records between schools or sharing academic information with potential employers. Financial institutions use these forms to share account information with legal representatives, accountants, or during merger processes. Legal professionals need it when accessing client information from other service providers or when coordinating with multiple legal firms on complex cases.

Key legal considerations

The form must establish a clear lawful basis for processing under UK GDPR, with explicit consent being the most common justification for information sharing. You must specify exactly what information will be shared, avoiding blanket authorizations that could be deemed invalid. The document should identify specific recipients rather than general categories, and include time limits for how long the consent remains valid. Special category data, such as health information or criminal records, requires additional safeguards and more explicit consent provisions. The form must inform the data subject of their right to withdraw consent at any time and explain how to exercise this right. Consider including data security provisions outlining how recipients will protect the shared information.

Legal requirements in England and Wales

Under UK GDPR and Data Protection Act 2018, consent must be freely given, specific, informed, and unambiguous, with clear affirmative action required from the data subject. The form must use plain English and avoid complex legal jargon that could invalidate consent. You must provide clear information about data processing purposes, storage periods, and third-party sharing arrangements. When dealing with health records, compliance with Access to Health Records Act 1990 may be required, particularly regarding deceased persons' records. Mental Capacity Act 2005 considerations apply when the data subject may lack capacity to provide valid consent, requiring appropriate legal representation. Professional bodies such as the General Medical Council or Solicitors Regulation Authority may have additional requirements for their members when sharing confidential information.