DocsTrust network
What is consent
Consent is a beneficiary's permission for someone or an app to access a collection of their records.
Consent is a beneficiary's permission for someone or an app to access a collection of their records. It is the beneficiary's choice, recorded in a consent grant. It is never assumed and never implied.
Definition
A consent grant names the subject, who is the beneficiary giving permission. It names the grantee, who is the person or app receiving access. It names the collection, which is the set of records covered, such as the support plan. It sets the permission level: read, to view, or write, to view and change. It records when consent was granted, when it expires, and when it was revoked. It has a status: active or revoked.
Consent is the second half of every access decision. A trustee may hold a delegation, and a support worker may hold an arrangement, but neither can open the beneficiary's records until the beneficiary grants consent. Revoking consent cuts off access immediately, even while a delegation or arrangement stays active.
When you use it
You use consent every time you decide who can see your records and what they can do with them. You grant consent when you want someone to help you, or when an app needs to work with your records.
You should review your consent grants from time to time. Revoke any grant you no longer want. Grant consent is the guide for the steps, and review and revoke consent is the guide for the review.
Example
Wiremu grants James, his support worker, write consent to the support plan. James can now open the plan and update it. Wiremu grants Hana, his trustee, read consent to the same plan. Hana can review the plan but cannot change it. Later, Wiremu revokes James's consent. James loses access immediately. The arrangement still says James is the worker, but the consent no longer allows access.