Medical Release Authorization (Nigeria)

A Medical Release Authorization in Nigeria is the patient's written consent permitting a healthcare provider to disclose specified medical records or health information to a named recipient for a stated purpose. It identifies the records released, the recipient, the purpose, and the period for which the authorisation remains valid.

The primary statutory basis for medical confidentiality in Nigeria is Section 26 of the National Health Act 2014, which provides that all information concerning a patient, including information relating to the patient's health status, treatment, or stay in a health establishment, is confidential. Section 26(2) prohibits disclosure of such information without the patient's informed consent, except in limited circumstances: where non-disclosure creates a serious threat to public health (e.g., notifiable diseases under the Quarantine Act, Cap Q2, LFN 2004); where disclosure is required by a court order; or where disclosure is permitted by any other law.

The Medical and Dental Council of Nigeria (MDCN) Code of Medical Ethics imposes a strict duty of confidentiality on registered medical practitioners, with breach of patient confidentiality constituting professional misconduct subject to disciplinary proceedings before the MDCN Tribunal. The Nigerian Data Protection Act 2023 (NDPA) additionally classifies health data as sensitive personal data under Section 30, requiring explicit consent for processing and higher standards of protection than ordinary personal data.

A properly executed Medical Release Authorization protects both the patient and the healthcare provider: it gives the healthcare provider a lawful basis for disclosure under Section 26(2) of the National Health Act 2014, and it confirms the patient's consent is documented and limited to the specific purpose and recipient authorised.

The Medical Release Authorization (Nigeria) is governed by confidentiality and data-protection law rather than commercial statutes. Section 26 of the National Health Act 2014 makes patient information confidential and bars disclosure without consent except in limited circumstances, while the Nigeria Data Protection Act 2023 (NDPA), administered by the Nigeria Data Protection Commission (NDPC), classifies health data as sensitive personal data requiring explicit consent under Section 30. The MDCN Code of Medical Ethics imposes the duty of confidentiality on practitioners. A patient signing this authorisation should confirm it reflects current law and is limited to the records, recipient, and purpose intended. The Nigeria Data Protection Act 2023 sets the foundational requirements.

A Medical Release Authorization in Nigeria is required whenever a patient's medical records or health information must be shared with a third party.

A Medical Release Authorization is needed when an insurance company — such as an insurer licensed by the National Insurance Commission (NAICOM) under the Insurance Act (Cap I17, LFN 2004) — requests the patient's medical records as part of a life insurance, health insurance, or disability insurance claim assessment. Without the patient's authorization, the healthcare provider cannot lawfully release the records.

A Medical Release Authorization is required when an employer requests a medical report about an employee from the employee's treating physician — for example, to assess fitness to return to work after sick leave, or to process a personal injury claim under the Employees Compensation Act 2010 (which established the Nigeria Social Insurance Trust Fund for work-related injuries).

A Medical Release Authorization is needed when a patient transfers care from one healthcare facility to another — for example, from a primary care clinic in Lagos to a specialist hospital in Abuja or Lagos University Teaching Hospital (LUTH) — and wants the new provider to receive their medical history, laboratory results, and treatment records.

A Medical Release Authorization is required when legal proceedings necessitate disclosure of medical records — for example, in a personal injury lawsuit before the State High Court, where the defendant's insurer or legal team seeks the plaintiff's medical records as evidence of the nature and extent of injuries.

A Medical Release Authorization is needed for immigration medical examinations, where the Nigeria Immigration Service or a foreign embassy requires the applicant's vaccination records, medical fitness certificate, or treatment history from a MDCN-accredited physician.

A patient in Nigeria should sign a Medical Release Authorization before records are needed rather than leaving disclosure to be sorted out under time pressure. A written authorisation gives the provider a lawful basis to release records and limits disclosure to what the patient intends. Section 26 of the National Health Act 2014 requires consent for disclosure to third parties, and the Nigeria Data Protection Act 2023 requires that the consent be explicit and that only relevant records be shared for the stated purpose.

A valid Nigeria Medical Release Authorization must contain the following essential elements under the National Health Act 2014 and the Nigerian Data Protection Act 2023.

Patient Identity: Full legal name, date of birth, address, and National Identification Number (NIN) of the patient. Hospital file number and NHIA (National Health Insurance Authority) number should also be included where applicable.

Healthcare Provider Details: Full name, address, and licence number of the healthcare provider (hospital, clinic, or practitioner) being authorised to release the records. The provider's MDCN registration number should be stated for individual practitioners.

Recipient Details: Full name, organisation, address, and contact details of the person or organisation authorised to receive the medical information. The release is limited to the specified recipient.

Description of Information to be Released: A precise description of the specific medical records or health information to be released — whether treatment notes, laboratory results, radiology reports, surgical records, prescription history, or all records from a specified period. Vague or unlimited releases are discouraged and may not satisfy the specificity requirement under the Nigerian Data Protection Act 2023.

Purpose of Release: The specific purpose for which the information is being released — insurance claim, employment assessment, legal proceedings, second medical opinion, care transfer, or other stated purpose. Under Section 26(2) of the National Health Act 2014, disclosure must be for a lawful purpose.

Scope Limitations: The date range of records authorised for release (e.g., records from 01/01/2020 to 31/12/2024) and any specific exclusions (e.g., psychiatric records, HIV/AIDS status, substance abuse treatment, which may require separate specific consent under applicable laws).

Expiry of Authorization: The authorization should state an expiry date or event — typically one year from the date of signing or upon completion of the stated purpose — after which the healthcare provider may no longer release records under the authorization.

Right to Revoke: Acknowledgement that the patient may revoke the authorization at any time before the records are released, with instructions on how to do so.

Additional compliance elements for a Medical Release Authorization (Nigeria) include compliance with the confidentiality rule in Section 26 of the National Health Act 2014, the explicit-consent and data-minimisation requirements of the Nigeria Data Protection Act 2023 for sensitive health data, and the confidentiality duty under the MDCN Code of Medical Ethics. Forms-legal.com provides this template as a starting point for Nigeria-compliant documentation.