Proxy access and online services

Proxy access lets someone manage specified parts of another person's GP online services when the practice has enabled it. It is commonly used for children, older people, disabled people, those with communication needs and patients who rely on a carer.

Proxy access can expose appointments, medications, test results, messages, documents and sensitive notes. It may create safety risks where there is coercion, domestic abuse, family conflict, safeguarding concern or changing capacity.

Proxy access is not one single permission

• It may cover appointments only, prescriptions only, messages, records, or a combination depending on the clinical system and the practice's settings.
• It may differ by age, particularly for children and young people as confidentiality becomes more relevant.
• It may need review if the patient's wishes, capacity, relationship or safety changes.
• It may need restriction where record access would disclose sensitive information or third-party data.

Do not infer wider access from limited access

A proxy user who can request prescriptions via the NHS App may not be authorised to receive test results by phone. A parent linked to a young child's account may lose some access as the child gets older. A carer who can book appointments may not be allowed to read consultation notes.

Check the recorded permission and the local proxy-access process. If the request does not match the recorded permission, escalate or explain the correct route.

Proxy access and safeguarding

Proxy access can be used as part of abuse or coercive control. Someone may pressure a patient to grant access, monitor appointments, read messages, control prescriptions or track contacts with the practice. Check safe-contact notes and safeguarding records before making changes to access.

Online limits

Proxy access is a recorded permission with limits, not a casual arrangement based on family role.