Skip to main content

DAPB3051 Identity Verification and Authentication Standard for Health and Care, Authorisation Use Case: Proxy

Implementation guidance: Version 1 (DAPB3051_Amd 59/2025)
To support the implementation of V3.1 DAPB3051_Amd 59/2025)

Current Chapter

DAPB3051 Identity Verification and Authentication Standard for Health and Care, Authorisation Use Case: Proxy


Data Alliance Partnership Board 

The Data Alliance Partnership Board (DAPB), which holds delegated authority from the Secretary of State for Health and Social Care, has approved a change to an existing information standard for publication under section 250 of the Health and Social Care Act 2012

Assurance that this information standard meets the requirements of the Act and is appropriate for the use specified in the specification document has been provided by the Data Governance, Assurance and Testing (DGAT) team and endorsed by the Data Assurance Board (DAB).  

This information standard comprises the following documents:  

Authorisation use case: Proxy - implementation guidance: Version 1 (DAPB3051 Amd 59/2025)

You can download a pdf of Authorisation use case: Proxy.

An Information Standards Notice (DAPB3051 Amd 59/2025) has been issued as a notification of use and implementation timescales. Please read this alongside the documents for the standard.  

The controlled copies of these documents can be found on the NHS England website. Any copies held outside of that area, in whatever format (e.g. paper, email attachment), are considered to have passed out of control and should be checked for currency and validity.  

Date of publication: 23 December 2025 

Document filename: Authorisation use case: Proxy - Implementation guidance: Version 1 (DAPB3051_Amd 59/2025)

Project/programme: National Proxy Service

Document reference: and 59/2025

Project manager: Paul Harrison

Owner: Melissa Ruscoe

Author: Ameya Krishnamoorthy

Status: Final

Version: 1.0

Version issue date: 02/12/2025


Last edited: 6 May 2026 1:50 pm


Chapters

  1. DAPB3051 Identity Verification and Authentication Standard for Health and Care, Authorisation Use Case: Proxy
  2. Glossary
  3. Use of the terms "must" and "should" in this guidance
  4. 1.0 Overview
  5. 1.1 Purpose of this standard
  6. 1.2 Who this standard applies to
  7. 1.3 What this standard does not cover
  8. 1.4 Compatibility with other standards and guidelines
  9. 2.1 Types of proxy access: formal and informal proxy access
  10. 2.2 Types of proxy access: Records access by a clinical professional
  11. 3.0 Roles and responsibilities
  12. 4.0 Grant proxy access
  13. 4.1 Assess if access is appropriate
  14. 4.1.1 Establish whether access is necessary
  15. 4.1.2 Establish whether access is relevant
  16. 4.1.3 Establish whether access is safe
  17. 4.2 Establish a basis for access
  18. 4.3 Check evidence relevant to the basis for access
  19. 4.3.1 Verify the proxy and patient’s identity
  20. 4.3.2 Understand if the patient has the ability to consent
  21. 4.3.3 Obtain the patient’s informed consent to proxy access, if appropriate
  22. 4.3.4 Verify evidence of a basis for access if the patient cannot consent
  23. 4.4 Redact sensitive information based on what is being shared
  24. 4.5 Audit decisions about proxy access
  25. 4.6 Communicate the outcome of a decision to grant or deny proxy access
  26. 5.0 The scope of proxy access
  27. 6.0 System audit of proxy access
  28. 7.0 Managing proxy access
  29. 7.1 Ongoing reviews of proxy access
  30. 7.2 Age and development based reviews of access
  31. 7.3 Time-bound reviews of access
  32. 7.4 Wider events that materially affect proxy access
  33. Appendix A: Ways to evidence a basis for access if the patient is not capable of providing informed consent
  34. Appendix B: Driver diagram articulating the strategic aims of this information standard