Skip to main content

Term

Definition

Digital service

A service provided on the web that enables people to interact with electronic health records.

Patient

A person whose information is being accessed by a proxy using a digital service.

Proxy

A person supporting a patient with their care by accessing their information using a digital service.

Proxy access

The capability for a proxy to access a patient’s information using a digital service linked to the patient’s electronic health record.

Clinical professional

A person registered with a professional body who is responsible and liable for a patient’s care, and whose professional status is regulated by a statutory body.

Staff

Wider professionals within a health and care organisation supporting clinical professionals with providing patient care.

Clinical authorisation

The process by which a clinical professional decides on proxy access, including the extent to which they delegate responsibility to staff.

Clinical system

Computer systems that enable clinical professionals and staff to manage patient records as part of providing direct care.

Mental capacity

A state where a patient over the age of 16 is presumed to be capable of making decisions for themselves, in line with The Mental Capacity Act 2005, and the Mental Health Act Code of Practice.

Gillick competence

A state where a patient under the age of 16 is judged by clinical assessment to have sufficient maturity, degree of intelligence and understanding to provide consent to a specific aspect of care, accounting for considerations recommended by the Fraser Guidelines and Mental Health Act Code of Practice Chapter 19.

Health and care organisation

Any NHS or non-NHS provider, organisation, company, or authority responsible for a patient’s care, including adult social care.

Authoritative source

A trusted source of information about individuals that has robust processes for keeping information up to date.

  

 


Last edited: 6 May 2026 1:51 pm


Chapters

  1. DAPB3051 Identity Verification and Authentication Standard for Health and Care, Authorisation Use Case: Proxy
  2. Glossary
  3. Use of the terms "must" and "should" in this guidance
  4. 1.0 Overview
  5. 1.1 Purpose of this standard
  6. 1.2 Who this standard applies to
  7. 1.3 What this standard does not cover
  8. 1.4 Compatibility with other standards and guidelines
  9. 2.1 Types of proxy access: formal and informal proxy access
  10. 2.2 Types of proxy access: Records access by a clinical professional
  11. 3.0 Roles and responsibilities
  12. 4.0 Grant proxy access
  13. 4.1 Assess if access is appropriate
  14. 4.1.1 Establish whether access is necessary
  15. 4.1.2 Establish whether access is relevant
  16. 4.1.3 Establish whether access is safe
  17. 4.2 Establish a basis for access
  18. 4.3 Check evidence relevant to the basis for access
  19. 4.3.1 Verify the proxy and patient’s identity
  20. 4.3.2 Understand if the patient has the ability to consent
  21. 4.3.3 Obtain the patient’s informed consent to proxy access, if appropriate
  22. 4.3.4 Verify evidence of a basis for access if the patient cannot consent
  23. 4.4 Redact sensitive information based on what is being shared
  24. 4.5 Audit decisions about proxy access
  25. 4.6 Communicate the outcome of a decision to grant or deny proxy access
  26. 5.0 The scope of proxy access
  27. 6.0 System audit of proxy access
  28. 7.0 Managing proxy access
  29. 7.1 Ongoing reviews of proxy access
  30. 7.2 Age and development based reviews of access
  31. 7.3 Time-bound reviews of access
  32. 7.4 Wider events that materially affect proxy access
  33. Appendix A: Ways to evidence a basis for access if the patient is not capable of providing informed consent
  34. Appendix B: Driver diagram articulating the strategic aims of this information standard