Printable Medical Records Release Authorisation Form Template for England and Wales

When you need to share your medical records with third parties in England and Wales, a Medical Records Release Authorisation Form provides the legal framework to do so safely and compliantly. This essential document protects both your privacy rights and ensures healthcare providers can legally transfer your sensitive medical information while adhering to strict UK data protection laws.

When do you need this document?

You'll require this authorisation form whenever medical records need to be shared beyond your current healthcare provider. Common scenarios include transferring to a new GP practice or specialist, providing records for insurance claims or pre-employment medical assessments, sharing information with solicitors for personal injury claims, or allowing family members to access records under specific circumstances. The form is also essential when changing healthcare providers or seeking second medical opinions, as it provides legal permission for your new provider to access your complete medical history.

Key legal considerations

Under UK GDPR and the Data Protection Act 2018, medical records are classified as special category personal data requiring explicit consent for processing and sharing. Your authorisation must specify exactly which records can be released, the time period covered, and the specific recipient. The form should include clear limitations on use and establish an expiry date for the authorisation to prevent indefinite access. Healthcare providers must verify your identity and capacity to consent before releasing any information. If you lack mental capacity, authorisation may be given by someone with lasting power of attorney for health and welfare, or in some cases, by next of kin under the Mental Capacity Act 2005. The common law duty of confidentiality also applies, meaning healthcare providers have ongoing obligations to protect your medical information even after authorised disclosure.

Legal requirements in England and Wales

England and Wales law requires that medical record releases comply with multiple legislative frameworks simultaneously. Under the Access to Health Records Act 1990, specific procedures apply when accessing records of deceased patients or historical records. The UK GDPR mandates that you have the right to withdraw consent at any time, and this must be clearly stated on the authorisation form. Healthcare providers must maintain detailed logs of all disclosures and ensure recipients understand their own data protection obligations. For NHS records, additional internal governance procedures may apply, and private healthcare providers must follow equivalent standards. The authorisation must be freely given, specific, informed and unambiguous, meeting the UK GDPR's consent requirements. Mental capacity considerations under the Mental Capacity Act 2005 require additional safeguards when patients cannot provide consent themselves, including best interests assessments and involvement of appropriate representatives.