General Release Of Information Consent Form Template for England and Wales

When you need to share someone's personal information with third parties in England and Wales, you must obtain proper consent to comply with data protection laws. A General Release Of Information Consent Form provides the legal framework for this authorization, ensuring you meet the strict requirements of the UK General Data Protection Regulation and Data Protection Act 2018. This document creates a clear record of consent and protects both the data subject's rights and your organization's legal position.

When do you need this document?

You need this form whenever you plan to share personal information outside your organization. Healthcare providers use it when sharing patient records with specialists or insurance companies. Educational institutions require it when transferring student records to other schools or providing references to employers. Financial organizations need consent before sharing account information with advisors or third-party processors. Employers use these forms when providing employee references or sharing HR information with external consultants. Legal professionals require explicit consent before disclosing client information to experts or other parties involved in proceedings.

Key legal considerations

The form must clearly identify what specific information will be shared and cannot authorize blanket disclosure of all personal data. You must specify the exact recipients of the information and explain the legitimate purpose for sharing. The consent must be freely given, specific, informed, and unambiguous, meeting UK GDPR standards for valid consent. Include provisions for the data subject to withdraw consent at any time and explain how to exercise this right. Special category data, such as health information, requires explicit consent and additional safeguards. The form should reference the legal basis for processing and inform the data subject of their rights under data protection legislation, including the right to complain to the Information Commissioner's Office.

Legal requirements in England and Wales

Under UK GDPR and the Data Protection Act 2018, consent must be documented and demonstrable, making this written form essential. The document must be written in plain English that the data subject can easily understand. You must inform the data subject about their right to withdraw consent and make withdrawal as easy as giving consent initially. For children under 13, you need parental consent, while those aged 13-15 may provide consent depending on their capacity to understand the implications. The form must specify the retention period for both the personal data and the consent record itself. Include your organization's contact details and Data Protection Officer information where applicable. The Human Rights Act 1998 requires balancing privacy rights with legitimate interests, so ensure the information sharing is proportionate and necessary.