Follow your practice's policies for identity checks, consent, proxy access, subject access, safeguarding, police requests, employer requests, death administration, complaints and information governance. When authority is unclear, make clear records and escalate to the appropriate local lead rather than deciding complex legal questions on the spot.

The underlying principles are the same across the UK: protect confidentiality, check authority, share the minimum necessary information, record decisions and escalate where needed. Legal rules and access routes differ between England, Wales, Scotland and Northern Ireland, for example on capacity, guardianship, child safeguarding, adult safeguarding and complaints.

Practices should use their local NHS, health board, HSC, Caldicott, data protection and safeguarding routes. Frontline staff should not try to resolve complex legal authority questions alone.