Allied Health Consent Form Template: What To Include

Running an allied health clinic means you ask clients to trust you with two very personal things: their health and their information. A well-drafted consent form helps make that trust clear from the first appointment.

Whether you run a physiotherapy, psychology, occupational therapy, podiatry, dietetics or multidisciplinary clinic, your consent process shouldn't be a rushed signature on a generic form. It needs to cover the realities of your services, including treatment risks, privacy, referrals, minors and telehealth.

The good news is that your consent form doesn't have to be complicated. It just needs to be specific enough that clients understand what they're agreeing to, and practical enough that your team can use it every day.

Do Allied Health Clinics Need A Written Consent Form?

Yes, you should use a written consent form, even though consent can sometimes be verbal or implied. A signed form gives your clinic a clear record that the client was told what they needed to know before treatment, information sharing or telehealth services started.

In an allied health setting, consent usually comes up in a few different ways:

• Treatment consent: the client agrees to assessment, treatment and the usual risks involved.
• Privacy consent: the client understands how you collect, use, store and disclose their health information.
• Information sharing consent: the client agrees to you sharing information with a GP, specialist, insurer, NDIS plan manager, school, employer or other provider.
• Telehealth consent: the client understands the limits and risks of receiving services by phone, video or another digital method.
• Minor or substitute decision-maker consent: the right person gives consent where the client is a child or doesn't have capacity to decide for themselves.

For example, if you run a physio clinic, your client might sign one intake and consent form before their first session. That form might cover hands-on treatment, exercise prescription, health information collection and communication with their GP. Later, if their employer asks for a workplace capacity report, you may need a separate written authority because that disclosure goes beyond ordinary treatment.

A written consent form also helps your staff follow one consistent process. Without it, you may struggle to show what the client agreed to if there's a complaint, refund request, privacy concern or dispute about what was discussed.

What Should An Allied Health Consent Form Include?

Your consent form should include enough detail for the client to make an informed decision, without turning it into a 20-page legal document they won't read. The best forms are clear, specific and matched to your services.

A generic client consent form template can be a useful starting point, but allied health clinics often need extra clauses around referrals, reports, sensitive health information and treatment plans. A template should always be tailored before you use it with clients.

Fill-In Outline For Your Consent Form

Here is a practical outline you can use when planning your form. This isn't a finished legal document, but it shows the sections your lawyer should help you tailor.

1. Client Details: Include the client's name, date of birth, contact details, emergency contact and relevant Medicare, NDIS or insurer details if you collect them.
2. Clinic And Practitioner Details: Identify your clinic, the practitioner or treating team, and the type of allied health service being provided.
3. Services Covered: Describe the assessments, treatments, programs, reports, telehealth services or group sessions the form applies to.
4. Treatment Consent: Explain that the client consents to assessment and treatment, and can ask questions or withdraw consent at any time.
5. Risks And Limitations: List common risks and limitations for your service, such as soreness after physiotherapy, fatigue after exercise or limitations of remote assessment.
6. Privacy And Health Information: Explain what health information you collect, why you collect it, how you store it and who you may disclose it to.
7. Referrals And Reports: Set out when you may communicate with GPs, specialists, schools, insurers, support coordinators or other providers.
8. Fees, Cancellations And Funding: Refer to your service terms, fees, cancellation policy, third-party funding arrangements and any client payment responsibilities.
9. Telehealth Consent: Cover video or phone consultations, technical issues, privacy risks and when face-to-face care may be safer.
10. Signature And Date: Include space for the client, parent, guardian or authorised decision-maker to sign and date the form.

If your clinic offers several different services, you may need different versions. A physiotherapy consent form in Australia won't look exactly the same as a speech pathology, psychology or occupational therapy consent form.

How Should Your Form Handle Health Information And Privacy?

Your form should clearly explain how you handle health information because health information is treated as sensitive information under Australian privacy law. If your clinic provides a health service and holds health information, the Privacy Act 1988 and Australian Privacy Principles will usually apply, even if your annual turnover is under $3 million.

This catches many small clinics by surprise. The usual small business exemption under the Privacy Act doesn't generally protect you if you're providing a health service and handling health information.

Your consent form and privacy documents should work together. The consent form can get the client's acknowledgement and consent for key uses. Your Privacy Policy can give the fuller explanation about collection, use, disclosure, storage, access and complaints.

Your form should cover:

• what health information you collect, such as medical history, treatment notes, reports, images, test results and referral letters
• why you collect it, such as assessing the client, providing services, keeping clinical records and managing billing
• who may access it within your clinic, such as treating practitioners, admin staff and practice managers
• when you may share it outside the clinic, such as with a GP, another treating provider, insurer, funding body or legal requirement
• how clients can ask to access or correct their information
• how you handle data breaches and privacy complaints

State and territory health records laws can also apply. For example, Victoria has the Health Records Act 2001 and NSW has the Health Records and Information Privacy Act 2002. Record keeping rules may also come from professional standards, AHPRA requirements for registered practitioners, funding rules and your insurance arrangements.

If an eligible data breach happens, the Notifiable Data Breaches scheme may require you to notify affected individuals and the Office of the Australian Information Commissioner. You generally need to complete a reasonable and expeditious assessment within 30 calendar days if you suspect an eligible data breach.

What Changes If The Client Is A Child Or Doesn't Have Capacity?

It depends on the client's age, maturity and decision-making capacity, so your form should make room for consent from the right person. For children, this often means a parent or guardian signs a parental consent form, but some mature minors may be able to consent to certain healthcare decisions themselves.

There isn't one simple national age where every child can or can't consent to allied health treatment. The legal question is usually whether the young person has enough maturity and understanding to make the decision. This can depend on the treatment type, the risks involved and the client's circumstances.

For your clinic, this means your intake process should ask:

• who is bringing the child to the appointment
• whether both parents or guardians need to be involved for certain decisions
• whether there are any parenting orders, guardianship arrangements or care arrangements your clinic needs to know about
• whether the child can understand the treatment well enough to participate in the decision
• who can receive reports, invoices, reminders and treatment updates

For adult clients who may not have capacity, you may need consent from a legally authorised decision-maker, such as a guardian, attorney or substitute decision-maker under state or territory law. Your team should avoid assuming that a family member can automatically consent or receive information just because they attend the appointment.

It can also help to separate consent from assent. A parent may legally consent for a young child, but you still want the child to understand, cooperate and feel safe where possible. Your form can say that treatment won't proceed if the client is distressed or refuses in a way that makes treatment unsafe or inappropriate.

Do You Need Separate Consent For Referrals, Reports And Information Sharing?

Yes, you often need separate or more specific consent when you're sharing information outside what the client would reasonably expect from their treatment. This is especially true for reports to employers, schools, insurers, NDIS providers or legal representatives.

Some information sharing is part of ordinary healthcare. For example, a podiatrist may write back to the referring GP about assessment findings and treatment recommendations. Your general consent form can usually cover this if it's clearly explained.

Other information sharing is more sensitive. A workplace injury report, school support letter, functional capacity assessment or insurer report might affect the client's job, funding, education or claim. In those cases, it's safer to get a specific signed authority that says:

• who the information will be shared with
• what type of information will be shared
• why the information is being shared
• whether the client can review the report before it's sent
• how long the authority lasts
• whether the client can withdraw the authority

Say Priya runs an occupational therapy clinic in Melbourne. A client's NDIS plan manager asks for treatment notes covering the last 12 months. Priya's intake form says her clinic may share invoices and service information with plan managers for billing, but it doesn't authorise full clinical notes. Priya asks the client to sign a separate authority naming the plan manager and confirming exactly what records can be released. That protects the client's privacy and gives Priya's admin team clear instructions.

This approach also helps your clinic comply with the Australian Consumer Law. Your communications with clients should be clear and not misleading, especially around who will see their information and what they'll be charged for reports or letters.

How Do Treatment Risk And Telehealth Consent Work In Practice?

Your consent form should explain the main risks and limitations of your services in plain English, including any extra risks that come with telehealth. The point isn't to alarm clients. It's to make sure they understand what treatment can and can't do.

For treatment risks, focus on what is realistic for your service. A physiotherapy consent form might mention temporary soreness, fatigue, bruising, symptom flare-ups or the risk that treatment may not achieve the desired result. A dietetics clinic may explain that advice depends on accurate information from the client and may need to change if their health changes.

You should also make it clear that clients can:

• ask questions before or during treatment
• refuse a particular treatment technique
• stop treatment at any time
• ask about alternative options
• tell you about pain, discomfort or changes in their condition

Telehealth consent and your telehealth terms need a few extra points. Your form should explain that remote consultations may have limits because the practitioner can't always physically assess the client. It should also cover privacy risks, technical failures, the need for a safe and private space, and when your practitioner may recommend an in-person appointment instead.

For example, Sam runs a physiotherapy clinic in Adelaide. His initial consultation is $120 and follow-up sessions are $95. A new client books knee rehab by video because they live regionally. Sam's form explains the fees, the 24-hour cancellation rule, common exercise risks and the limits of video assessment. The client consents to Sam updating their GP, but doesn't consent to information being sent to their employer. Two weeks later, the employer asks for a capacity report. Sam's team pauses and gets a separate written authority before sending anything.

That process is simple, but it prevents a lot of confusion.

How Should You Use And Update Your Consent Forms?

You should use your consent form as part of a live process, not just as a document that sits in your practice management system. Consent works best when your team knows when to ask for it, how to record it and when to refresh it.

A practical consent workflow might look like this:

1. Before The First Appointment: Send the intake form and allied health consent form electronically, or give the client enough time to read it when they arrive.
2. At The First Appointment: Ask whether the client has questions and record any limits on consent, such as not contacting an employer.
3. Before New Treatment: Get fresh consent if the treatment changes in a meaningful way or carries different risks.
4. Before Sharing Information: Check whether your existing consent covers the disclosure or whether you need a specific authority.
5. Before Telehealth: Confirm the client is in a private, safe location and understands the limits of remote care.
6. After A Change In Law Or Practice: Review your forms if you add new services, change software, hire new practitioners or expand into another state.

You should also train admin and clinical staff on how the form works. For example, your receptionist may need to know that a parent can receive invoices but not necessarily clinical notes, or that an insurer request needs practitioner review before records are released.

Document control matters too. Keep a current version, remove old drafts from circulation and make sure your online booking system uses the right form. If your clinic has multiple locations or contractors, everyone should be using the same approved process unless there's a clear reason not to.

Consent forms should be reviewed regularly, especially if privacy law reforms, AHPRA guidance, NDIS rules, funding requirements or your own services change. If you're using an allied health consent form template, don't assume it's still suitable a year later.

Key Takeaways

• A written consent form helps your clinic prove what the client agreed to for treatment, privacy, telehealth and information sharing.
• Health information is sensitive information, and allied health clinics are usually covered by the Privacy Act even if they're under the $3 million turnover threshold.
• Your form should be tailored to your service type, treatment risks, referral pathways, reporting obligations and telehealth model.
• Children, mature minors and clients without capacity need extra care so the right person gives consent.
• General consent won't always cover reports to employers, schools, insurers, NDIS providers or other third parties.
• Your consent process should be easy for staff to use and reviewed when your clinic, software, services or laws change.

If you'd like help with your allied health consent forms, privacy documents, referral authorities or telehealth consent process, you can reach us at 1800 730 617 or team@sprintlaw.com.au for a free, no-obligations chat.