5.0 The scope of proxy access
In the absence of explicit arrangements to this end, proxy access is not reusable beyond the organisation in which it was granted, as clinical authorisation lies in the remit of each data controller. For example, being granted access to view a patient's GP record does not mean a proxy should also automatically be granted access to the patient's hospital records.
Clinical systems must enable staff to define access levels for proxy access to reduce the risk that proxies access medical information they are not authorised to access. Digital services must reflect these access levels when enabling proxy access within their service.
Last edited: 6 May 2026 4:26 pm
Chapters
- DAPB3051 Identity Verification and Authentication Standard for Health and Care, Authorisation Use Case: Proxy
- Glossary
- Use of the terms "must" and "should" in this guidance
- 1.0 Overview
- 1.1 Purpose of this standard
- 1.2 Who this standard applies to
- 1.3 What this standard does not cover
- 1.4 Compatibility with other standards and guidelines
- 2.1 Types of proxy access: formal and informal proxy access
- 2.2 Types of proxy access: Records access by a clinical professional
- 3.0 Roles and responsibilities
- 4.0 Grant proxy access
- 4.1 Assess if access is appropriate
- 4.1.1 Establish whether access is necessary
- 4.1.2 Establish whether access is relevant
- 4.1.3 Establish whether access is safe
- 4.2 Establish a basis for access
- 4.3 Check evidence relevant to the basis for access
- 4.3.1 Verify the proxy and patient’s identity
- 4.3.2 Understand if the patient has the ability to consent
- 4.3.3 Obtain the patient’s informed consent to proxy access, if appropriate
- 4.3.4 Verify evidence of a basis for access if the patient cannot consent
- 4.4 Redact sensitive information based on what is being shared
- 4.5 Audit decisions about proxy access
- 4.6 Communicate the outcome of a decision to grant or deny proxy access
- 5.0 The scope of proxy access
- 6.0 System audit of proxy access
- 7.0 Managing proxy access
- 7.1 Ongoing reviews of proxy access
- 7.2 Age and development based reviews of access
- 7.3 Time-bound reviews of access
- 7.4 Wider events that materially affect proxy access
- Appendix A: Ways to evidence a basis for access if the patient is not capable of providing informed consent
- Appendix B: Driver diagram articulating the strategic aims of this information standard