Skip to main content
Request a demo

Free template

Hospital consent form format

A hospital takes two completely different kinds of consent, and they get confused constantly. This template is the first kind: consent to process personal data under the DPDP Act 2023. The second kind — informed consent for a procedure — is a different document with a different legal basis and different content, and nothing here substitutes for it.

Draft — pending expert review

This page was prepared from the official sources listed below but has not yet been reviewed by a qualified professional. It is general information, not legal or medical advice.

Updated

In short

Data consent is about what the hospital may do with information. Procedure consent is about what it may do to a person. One form cannot carry both, and a hospital that tries ends up with a document that serves neither purpose properly.

This covers
Personal data processing (DPDP 2023)
This does not cover
Consent for surgery or any procedure
Captures
Purpose-wise consent, guardian for under-18s
Status
Starting point — have it reviewed

A starting point, not legal advice. Have your own notice reviewed before use.

SAMPLE WORDING — illustrative only, and not reviewed by a lawyer
Sunrise Multispecialty Hospital (Sample)
12, MG Road, Coimbatore, Tamil Nadu – 641001 (Sample) · Phone: 0422-400-1000 (Sample)

Consent for Processing Personal Data

Under the Digital Personal Data Protection Act, 2023 · Notice version 1.0

Patient name: ______________________________________
MR No.: __________________
Date of birth / Age: __________________
If under 18 — guardian name & relationship: __________________________

What we collect and why

We collect your name, contact details, and the health information created while caring for you — history, examination findings, prescriptions, test results and bills. We keep it to treat you, to maintain your medical record, and to bill for that care.

Your record is held on systems operated for this hospital and is accessed only by staff involved in your care or in billing it. Please tick the purposes you agree to:

PurposeWhat it meansAgree
Treatment and health records
Required		Keeping your medical record and providing care☐ Yes   ☐ No
Billing and payment
Required		Raising bills, collecting payment, and insurer or employer claims☐ Yes   ☐ No
Communication
Optional		Appointment reminders and results by SMS, WhatsApp or email☐ Yes   ☐ No
Research or teaching
Optional		Use of de-identified information for study or training☐ Yes   ☐ No

Your rights

  • You may ask to see the personal data we hold about you, and ask us to correct it if it is wrong.
  • You may withdraw consent for any optional purpose at any time, in writing at the front desk.
  • Withdrawing consent does not affect care already given, and does not remove records we are required to keep by law.
  • You may raise a grievance with the person named below.

Declaration

I have read, or had read to me in a language I understand, the notice above. I agree to the purposes I have ticked.

Signature / thumb impression — patient or guardian
Name & signature — staff member who explained
Date & time

Grievance contact: ______________________________ · This notice is about the handling of your personal data. Consent for a procedure or operation is taken separately, on its own form, at the time that treatment is discussed with you.

The distinction

Two kinds of consent, and why it matters

Data consent asks whether the hospital may collect, keep and use information about a person, and for which purposes. It is given once, is capable of being withdrawn, and is governed by data-protection law.

Procedure consent asks whether a person agrees to a specific intervention after being told what it involves, what could go wrong and what the alternatives are. It is specific to the procedure and the moment, and rests on a conversation rather than a notice.

Merging them produces a document that does neither job. A signature on a general form is not informed consent for an operation, and a surgical consent form does not establish a lawful basis for sending marketing messages. Keep them apart and take each at the point it belongs.

Design

What this form does deliberately

  • Splits consent by purpose. Treatment and billing are marked required; communication and research are optional and separately ticked. Bundling them into one signature is how a hospital ends up unable to show what was actually agreed to.
  • Carries a notice version. When the wording changes, consent given against the old version is not consent to the new one. A version number on the form is what makes that checkable later.
  • Captures a guardian for under-18s in its own field, rather than leaving it to be written in a margin.
  • Records who explained it, not just who signed. A consent nobody can say was explained is weak evidence.
  • States that withdrawal does not undo care already given, or remove records the hospital must keep by law — which is the question people actually ask when they withdraw.

Official references

The DPDP Act's rules are still being operationalised. Confirm current obligations before relying on any wording here.

Next

Related

In Trisvio

Consent as a ledger, not a filing cabinet

Trisvio records consent as an append-only ledger against versioned notice templates, with guardian capture for under-18s, so what was agreed — and against which version — is answerable later. It is a soft gate by design: a missing consent surfaces as a prompt on the patient record and never blocks clinical care.
See statutory registersRequest a demo

Trisvio does not provide procedure or surgical consent forms. See the compliance guides for what it does cover.