A Consent Form is a document used in England and Wales to record that a person has given their informed, voluntary consent to a specific activity, procedure, treatment, or data processing operation. The concept of informed consent is deeply embedded in English common law and is reinforced by several important statutes, including the Mental Capacity Act 2005, the Children Act 1989, and the UK General Data Protection Regulation (UK GDPR).

In the medical context, the requirement for informed consent is a cornerstone of healthcare law in England and Wales. The Supreme Court's landmark decision in Montgomery v Lanarkshire Health Board [2015] UKSC 11 fundamentally changed the standard for informed consent in medical settings. The Court held that a doctor has a duty to take reasonable care to ensure that a patient is aware of any material risks involved in a proposed treatment and of any reasonable alternative treatments. A risk is material if a reasonable person in the patient's position would be likely to attach significance to it. This patient-centred approach replaced the older paternalistic Bolam standard and placed greater emphasis on the individual's right to make informed decisions about their own body and health.

Beyond the medical context, consent forms are widely used across many sectors in England and Wales. Organisations use consent forms for physical activities and sporting events (where the organiser owes a duty of care under the Occupiers' Liability Act 1957 or 1984), for photography and filming (where the right to privacy under Article 8 of the European Convention on Human Rights, as incorporated by the Human Rights Act 1998, is engaged), for research participation (governed by the Research Governance Framework and ethical approval requirements), and for data processing (where UK GDPR Article 6(1)(a) and Article 7 set out the conditions for valid consent).

The Mental Capacity Act 2005 provides the statutory framework for assessing whether a person has the capacity to consent. Under Section 1 of the Act, every adult is presumed to have capacity unless it is established that they lack capacity. The Act sets out a functional test of capacity: a person lacks capacity if they are unable to understand the relevant information, retain it, use or weigh it, or communicate their decision. Where a person lacks capacity, decisions may be made on their behalf by an attorney under a Lasting Power of Attorney (Health and Welfare) or by a court-appointed deputy, provided the decision is made in the person's best interests.

A Consent Form is needed in a wide range of situations in England and Wales where an organisation or individual wishes to obtain and record a person's informed agreement to a specific course of action.

In healthcare settings, consent forms are required before any medical procedure, surgical operation, diagnostic test, or treatment. The General Medical Council's guidance on consent (updated 2020) and the NHS consent policy require healthcare professionals to obtain informed consent from patients before proceeding with treatment. For routine examinations, verbal consent may suffice, but for more significant procedures, written consent is strongly recommended as evidence that the patient was properly informed. The Montgomery v Lanarkshire Health Board [2015] UKSC 11 decision requires that patients be told about material risks and reasonable alternatives.

For physical activities, sporting events, adventure experiences, and outdoor pursuits, consent forms are essential to document that participants have been informed of the risks involved. Organisers owe a duty of care to participants under common law negligence principles and, if the activity takes place on premises, under the Occupiers' Liability Act 1957 (for lawful visitors) or the Occupiers' Liability Act 1984 (for trespassers and uninvited visitors). While a consent form does not eliminate the duty of care, it provides evidence that the participant was made aware of the risks.

For data processing, UK GDPR Article 6(1)(a) provides consent as one of the six lawful bases for processing personal data. Consent must be freely given, specific, informed, and unambiguous. Where special category data is processed (Article 9), explicit consent is one of the conditions under Article 9(2)(a). The ICO has issued detailed guidance on when consent is the appropriate lawful basis and has emphasised that consent should not be used where there is an imbalance of power between the controller and the data subject (for example, in the employment relationship).

For children and young people, the Children Act 1989 provides that a person with parental responsibility may consent on behalf of a child. However, the Gillick competence principle allows a child under 16 to consent to medical treatment if they have sufficient understanding. For data processing involving children under 13, UK GDPR (as supplemented by Section 9 of the Data Protection Act 2018) requires parental consent.

For photography and video recording, particularly in schools, sports clubs, and public events, consent forms are used to comply with data protection law and the right to privacy under Article 8 of the ECHR. The ICO has published specific guidance on taking photographs in schools and other settings involving children.

A well-drafted Consent Form for use in England and Wales should contain several essential elements that ensure the consent is legally valid, properly informed, and clearly recorded.

The identity of the parties must be clearly stated: the organisation or individual requesting consent (including their address and contact details) and the person giving consent (including their full name, date of birth, and address). The date of birth is important because it establishes whether the person is a minor (under 18) and whether parental or guardian consent may be required.

The nature and purpose of the consent must be described in clear, plain language. For medical consent, this means describing the procedure, treatment, or examination in terms that a lay person can understand. For activity consent, it means describing the activity, its location, duration, and nature. For data processing consent, it means describing what personal data will be collected, how it will be used, who it will be shared with, and how long it will be retained.

The risks and benefits section is critical for informed consent. Following Montgomery v Lanarkshire Health Board [2015] UKSC 11, the consent giver must be informed of all material risks. A risk is material if a reasonable person in the consent giver's position would be likely to attach significance to it. The benefits should also be described so that the person can make a balanced decision. Where reasonable alternatives exist, these should be presented.

The right to withdraw consent must be clearly stated. Under both common law and UK GDPR, consent can be withdrawn at any time without penalty. The consent form should explain how to withdraw consent and confirm that withdrawal does not affect the lawfulness of any activity or processing that occurred before the withdrawal.

The capacity confirmation is essential under the Mental Capacity Act 2005. The consent giver should confirm that they understand the information provided, can retain and weigh it, and are giving consent freely. This creates a record that the MCA capacity test has been considered.

The parental or guardian consent section should be included where consent is given on behalf of a minor or a person who lacks capacity. Under the Children Act 1989, parental responsibility is held by birth parents (married), birth mothers (unmarried), and others granted parental responsibility by court order or parental responsibility agreement. Under the Mental Capacity Act 2005, an attorney under a Health and Welfare LPA or a court-appointed deputy may consent on behalf of an adult who lacks capacity.

The signature block must include the consent giver's full name, the date, and their signature. Where parental consent is given, the parent or guardian should sign, with their relationship to the subject clearly stated.