Skip to main content

Part of Proxy access: advice and guidance

Step 5: Check if the proxy has proven their identity to access online services

Previous Chapter

Step 4: Rely on another basis for access if the patient cannot provide consent

Current Chapter

Current chapter – Step 5: Check if the proxy has proven their identity to access online services

View all

Next Chapter

Step 6: Understand if anyone else should have proxy access to the patient’s record

Proxies need to have proven their identity before being able to access online services for patients they care for.

Staff should check if the proxy has proven their identity to a high level of identity verification as defined in DAPB3051: Identity Verification and Authentication Standard for Health and Care Digital, Data, Analytics and Technology Use to access online services within their clinical system before granting proxy access.

If they haven't, staff need to verify the proxy's identity before setting up proxy access. They may choose to vouch for the proxy's identity at this stage if they are known to the organisation.

Staff should also ensure that access is granted to the correct patient's record at the organisation.

Last edited: 6 May 2026 4:35 pm

Previous Chapter

Step 4: Rely on another basis for access if the patient cannot provide consent

Next Chapter

Step 6: Understand if anyone else should have proxy access to the patient’s record

Chapters

  1. Proxy access: advice and guidance
  2. Glossary
  3. Roles and responsibilities
  4. Use of the terms "must" and "should" in this guidance
  5. Process overview
  6. Step 1: Determine if proxy access is appropriate, that is, if the benefits outweigh the risks
  7. Step 2: Evaluate the safety of proxy access
  8. Step 3a: Get the patient's informed consent to proxy access
  9. Step 3b: Inform the patient about the opportunity of self-access
  10. Step 4: Rely on another basis for access if the patient cannot provide consent
  11. Step 5: Check if the proxy has proven their identity to access online services
  12. Step 6: Understand if anyone else should have proxy access to the patient’s record
  13. Step 7: Redact sensitive information from the proxy’s view based on what is being shared
  14. Step 8: Grant proportionate and time-bound proxy access
  15. Step 9: Communicate the decision to grant or deny proxy access
  16. Step 10: Review and manage access on an ongoing basis
  17. Appendix 1: complex scenarios in relation to granting and managing parental access