Skip to main content
The Website Services team at NHS England are testing early designs to understand how you find information. Your views will help us check our ideas work. Sign up to take part in our user research.

Part of Proxy access: advice and guidance

Step 7: Redact sensitive information from the proxy’s view based on what is being shared

Previous Chapter

Step 6: Understand if anyone else should have proxy access to the patient’s record

Current Chapter

Current chapter – Step 7: Redact sensitive information from the proxy’s view based on what is being shared

View all

Next Chapter

Step 8: Grant proportionate and time-bound proxy access

Before granting proxy access, clinical professionals must redact any information from the proxy's view that the patient advised them to, and any information that they judge is not appropriate for the proxy to see.

Practically, clinical professionals only need to redact information that is being shared. For example, if all professionals are doing is granting someone access to order repeat medications on behalf of a patient, they:

  • need to redact any sensitive repeat medication schedules listed on the patient's record
  • but do not need to redact wider entries in their medical record, for example consultations, as this is not something they are granting access to

Last edited: 6 May 2026 4:36 pm

Previous Chapter

Step 6: Understand if anyone else should have proxy access to the patient’s record

Next Chapter

Step 8: Grant proportionate and time-bound proxy access

Chapters

  1. Proxy access: advice and guidance
  2. Glossary
  3. Roles and responsibilities
  4. Use of the terms "must" and "should" in this guidance
  5. Process overview
  6. Step 1: Determine if proxy access is appropriate, that is, if the benefits outweigh the risks
  7. Step 2: Evaluate the safety of proxy access
  8. Step 3a: Get the patient's informed consent to proxy access
  9. Step 3b: Inform the patient about the opportunity of self-access
  10. Step 4: Rely on another basis for access if the patient cannot provide consent
  11. Step 5: Check if the proxy has proven their identity to access online services
  12. Step 6: Understand if anyone else should have proxy access to the patient’s record
  13. Step 7: Redact sensitive information from the proxy’s view based on what is being shared
  14. Step 8: Grant proportionate and time-bound proxy access
  15. Step 9: Communicate the decision to grant or deny proxy access
  16. Step 10: Review and manage access on an ongoing basis
  17. Appendix 1: complex scenarios in relation to granting and managing parental access