Medical Records Transfer Form Template for England and Wales

When you need to transfer your medical records between healthcare providers in England and Wales, you require a Medical Records Transfer Form to ensure the process complies with strict data protection laws and healthcare regulations. This document serves as both a consent mechanism and an instruction sheet, facilitating the secure movement of your sensitive health information while protecting your rights as a data subject under UK legislation.

When do you need this document?

You'll need a Medical Records Transfer Form whenever you change GP practices, move to a new area, or require specialist care that necessitates sharing your medical history. The form is essential when transitioning between NHS trusts, private healthcare providers, or when seeking second opinions from consultants who need access to your complete medical records. It's also required when family members need access to deceased relatives' health records, or when you're transferring care coordination between different healthcare teams. Additionally, you'll need this form when moving abroad and require your UK medical records to be sent to overseas healthcare providers, ensuring continuity of care across international boundaries.

Key legal considerations

Under UK GDPR and the Data Protection Act 2018, your medical records are classified as special category data requiring enhanced protection and explicit consent for processing and transfer. The form must clearly identify the lawful basis for processing, typically your explicit consent or the need for healthcare provision. Your current healthcare provider has a common law duty of confidentiality that can only be breached with your express permission or in specific legal circumstances. The receiving provider must demonstrate appropriate technical and organizational measures to protect your data, and you retain the right to withdraw consent, request rectification, or object to processing at any time. The form must specify exactly which records are being transferred and for what purpose, ensuring proportionality and data minimization principles are observed.

Legal requirements in England and Wales

Healthcare providers in England and Wales must comply with NHS Information Governance frameworks and the Access to Health Records Act 1990 when processing transfer requests. The transferring provider must verify your identity and ensure you have the legal right to request the records being transferred. Under the Health and Social Care Act 2012, providers must maintain detailed audit trails of all data sharing activities and implement appropriate security measures during transmission. Electronic transfers must use NHS-approved secure email systems or encrypted file transfer protocols, while physical transfers require recorded delivery and confidential handling procedures. Providers have 40 calendar days to respond to access requests, though urgent clinical needs may expedite this timeframe. Both providers must maintain records of the transfer for at least six years, and any third-party information within your records may require separate consent before disclosure.