Revocation Of Release Of Information Form Template for England and Wales
Generate a bespoke document
What is a Revocation Of Release Of Information Form?
The Revocation Of Release Of Information Form is a critical document used when an individual wishes to withdraw their previous consent for the processing or sharing of their personal information. Under English and Welsh law, and in compliance with UK GDPR and the Data Protection Act 2018, individuals have the right to withdraw consent at any time. This document provides formal notification to organizations to cease processing specified information, maintains an audit trail of the withdrawal request, and helps ensure compliance with data protection regulations. It is particularly important in sensitive sectors such as healthcare, financial services, and education.
Frequently Asked Questions
Is a Revocation of Release of Information Form legally binding in England and Wales?
Yes, a properly completed Revocation of Release of Information Form is legally binding in England and Wales under the UK GDPR and Data Protection Act 2018. Once served, organisations must stop processing your personal data based on the withdrawn consent, though they may continue processing under other lawful bases if applicable.
How long does processing a Revocation of Release of Information Form take in the UK?
Under UK GDPR, organisations must act on your consent withdrawal 'without undue delay' and typically within one month of receiving your revocation form. The form itself can be completed in minutes, but you should allow time for proper delivery and the organisation's response.
Can I withdraw consent for medical information sharing using this form in England and Wales?
Yes, you can use this form to withdraw consent for medical information sharing, but healthcare providers may continue processing your data under other lawful bases such as vital interests or legal obligations. NHS organisations must still comply with your withdrawal of consent where it was the original basis for processing.
Does a Revocation of Release of Information Form differ from a Subject Access Request?
Yes, these are completely different documents. A Revocation of Release of Information Form withdraws your previously given consent for data processing, while a Subject Access Request asks organisations to provide copies of personal data they hold about you under your right of access.
How should I serve a Revocation of Release of Information Form to ensure legal validity?
Send your form by recorded delivery post or secure email to the organisation's Data Protection Officer or designated contact. Keep copies and delivery receipts as proof of service, as organisations must acknowledge receipt and confirm when they've stopped processing based on your withdrawn consent.
Can employers ignore my Revocation of Release of Information Form in England and Wales?
No, employers cannot ignore your valid revocation form under UK GDPR. However, they may continue processing your personal data if they have other lawful bases such as contractual necessity, legal obligations, or legitimate interests, but they must stop processing based on the specific consent you've withdrawn.
Will submitting an incomplete Revocation of Release of Information Form affect my data protection rights?
An incomplete form may delay processing or require clarification from the organisation, but it won't invalidate your right to withdraw consent. Under UK GDPR, consent withdrawal should be as easy as giving consent, so organisations should work with you to clarify any missing information rather than reject your request outright.
About the Revocation Of Release Of Information Form
When you have previously given consent for an organization to process or share your personal information, you retain the legal right to withdraw that consent at any time under England and Wales law. A Revocation Of Release Of Information Form provides the formal mechanism to exercise this right, ensuring your withdrawal is properly documented and legally effective under UK GDPR and the Data Protection Act 2018.
When do you need this document?
You need this form whenever you want to stop an organization from continuing to process or share your personal information based on your previous consent. This commonly occurs when withdrawing consent for medical records sharing between healthcare providers, revoking authorization for employment reference disclosures, cancelling consent for marketing communications or data sharing with third parties, or stopping educational institutions from sharing academic records. The form is also essential when changing legal representatives and needing to revoke their access to your information, or when ending business relationships where ongoing data sharing is no longer required.
Key legal considerations
Your revocation must clearly identify the original consent being withdrawn, including specific reference details and dates where possible. The withdrawal should specify exactly what information processing must cease and from what effective date. Under UK GDPR, organizations must stop processing your data immediately upon receiving valid revocation, except where they have alternative legal grounds for processing. You should be aware that withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal. Organizations may retain certain information where required by law or legitimate interests, but they must clearly explain any such retention. The revocation should be sent to the appropriate data controller or designated contact within the organization, and you should keep copies of all correspondence for your records.
Legal requirements in England and Wales
Under UK GDPR and the Data Protection Act 2018, consent withdrawal must be as easy as giving consent originally. Organizations cannot make withdrawal unreasonably difficult or impose barriers to the process. Your revocation must be specific and unambiguous, clearly stating your intent to withdraw consent for particular processing activities. The withdrawal becomes effective immediately upon receipt unless you specify a different date. Organizations have one month to respond to your request and confirm the action taken, though they should cease processing immediately. If the revocation concerns health records, additional provisions under the Access to Health Records Act 1990 may apply, particularly regarding ongoing treatment relationships. For information held by public authorities, the Freedom of Information Act 2000 may also be relevant to the withdrawal process and any ongoing disclosure obligations.
GOVERNING LAW
Applicable law
This Revocation Of Release Of Information Form is drafted to comply with England and Wales law. Key legislation includes:
Explore 208,390+ legal templates
Explore 208,390+ legal templates
Genie's Security Promise
Genie is the safest place to draft. Here's how we prioritise your privacy and security.
Your data is private:
We do not train on your data; Genie's AI improves independently
All data stored on Genie is private to your organisation
Your documents are protected:
Your documents are protected by ultra-secure 256-bit encryption
We are ISO27001 certified, so your data is secure
Organizational security:
You retain IP ownership of your documents and their information
You have full control over your data and who gets to see it