Skip to main content

Proxy access: advice and guidance

Official guidance for organisations who offer proxy access, to ensure compliance with DAPB3051: Identity Verification and Authentication Standard for Health and Care Digital, Data, Analytics and Technology Use, Authorisation use case: Proxy, published December 2025. 

Date Published:
18 February 2026

Current Chapter

Proxy access: advice and guidance

View all

Next Chapter

Glossary

Purpose of this document

This document outlines a process to support consistent decisions on granting proxy access. This document should be read in conjunction with DAPB3051: Identity Verification and Authentication Standard for Health and Care Digital, Data, Analytics and Technology Use, authorisation use case Proxy (v1).

This document is for clinical professionals and staff within health and care organisations that offer proxy access to digital services.

You can download a pdf copy of Proxy advice and guidance.

Organisations should only offer proxy access if they have the resources available to offer the service safely. Where an organisation is offering proxy access, clinical professionals and staff within the organisation should ensure these steps are followed.

Last edited: 6 May 2026 4:32 pm

Chapters

  1. Proxy access: advice and guidance
  2. Glossary
  3. Roles and responsibilities
  4. Use of the terms "must" and "should" in this guidance
  5. Process overview
  6. Step 1: Determine if proxy access is appropriate, that is, if the benefits outweigh the risks
  7. Step 2: Evaluate the safety of proxy access
  8. Step 3a: Get the patient's informed consent to proxy access
  9. Step 3b: Inform the patient about the opportunity of self-access
  10. Step 4: Rely on another basis for access if the patient cannot provide consent
  11. Step 5: Check if the proxy has proven their identity to access online services
  12. Step 6: Understand if anyone else should have proxy access to the patient’s record
  13. Step 7: Redact sensitive information from the proxy’s view based on what is being shared
  14. Step 8: Grant proportionate and time-bound proxy access
  15. Step 9: Communicate the decision to grant or deny proxy access
  16. Step 10: Review and manage access on an ongoing basis
  17. Appendix 1: complex scenarios in relation to granting and managing parental access