ΊΪΑΟΚΣΖ΅

Consent To Share Form Template for Ireland

Generate a bespoke document

What is a Consent To Share Form?

The Consent To Share Form is a crucial document required under Irish data protection law when organizations need to obtain explicit consent for sharing personal data. This document is essential for compliance with the General Data Protection Regulation (GDPR) as implemented in Ireland through the Data Protection Act 2018. It should be used whenever an organization (data controller) needs to share an individual's personal data with third parties and requires explicit consent as the legal basis for processing. The form includes detailed information about the types of data being shared, the purposes of sharing, the recipients of the data, and the data subject's rights, including the right to withdraw consent. It's particularly important when handling special category data or when sharing information across different organizations or jurisdictions.

Frequently Asked Questions

Is a Consent To Share Form legally binding in Ireland?

Yes, a properly completed Consent To Share Form is legally binding in Ireland under the Data Protection Act 2018 and GDPR. Once signed, it provides valid legal grounds for organizations to share personal data with specified third parties. The consent must be freely given, specific, informed, and unambiguous to be legally valid.

Can I share personal data in Ireland without a Consent To Share Form?

Generally no, sharing personal data without proper consent violates Irish data protection law. Under the Data Protection Act 2018, you must have valid legal grounds for data sharing, with explicit consent being the most common basis. Missing or incomplete consent forms can result in significant GDPR fines up to €20 million or 4% of annual turnover.

How specific must consent be under Irish data protection law?

Irish law requires consent to be highly specific under GDPR implementation. The form must clearly identify what data is being shared, with whom, for what purpose, and for how long. Blanket or vague consent is not legally valid - each type of data sharing typically requires separate, explicit consent from the individual.

How is a Consent To Share Form different from a privacy notice in Ireland?

A Consent To Share Form actively seeks permission to share specific data with third parties, while a privacy notice simply informs people how their data is used. The consent form is interactive and requires a signature or clear agreement, whereas privacy notices are informational documents that don't require active consent for disclosure.

How long does it take to prepare a Consent To Share Form in Ireland?

A basic consent form can be drafted in 1-2 hours using templates, but proper legal review typically takes 1-2 days. Complex arrangements involving multiple parties or sensitive data may require several days to ensure full GDPR compliance. Organizations should allow additional time for internal approval processes and legal consultation.

Can someone withdraw consent after signing a Consent To Share Form in Ireland?

Yes, under Irish data protection law, individuals have the absolute right to withdraw consent at any time. Organizations must make withdrawal as easy as giving consent and must stop sharing data immediately upon receiving withdrawal notice. The form should clearly explain how to withdraw consent and the consequences of doing so.

Common mistakes to avoid when using Consent To Share Forms in Ireland?

The most common mistakes include using vague language about data sharing purposes, failing to specify data retention periods, not explaining withdrawal rights clearly, and assuming consent covers future unspecified sharing. Organizations also often forget to keep proper records of consent and fail to regularly review and update consent forms for ongoing compliance.

Reviewed by

Legal Engineer, GenieAI

A lawyer, legal researcher and legal tech founder, Swetha has built AI products deployed inside Tier 1 firms and enterprises. She ensures GenieAI's alignment with the latest regulation and executes testing on the legal robustness of Genie output.

Reviewed by

Legal Engineer, GenieAI

A Skadden-trained M&A lawyer, Imad advised on cross-border transactions and contractual risk before moving into legal AI. He reviews GenieAI's output for compliance and enforceability across our 150+ supported jurisdictions, as well as facilitating external benchmarking.

Jurisdiction

Ireland

Reviewed by

&

Publisher

GenieAI

Sector

Business

Cost

Free to use

Last updated

About the Consent To Share Form

A Consent To Share Form is a vital legal document that enables organizations in Ireland to obtain explicit permission before sharing personal data with third parties. Under Irish data protection law, this form serves as documented proof that an individual has knowingly agreed to have their personal information shared for specific purposes. The form creates a clear legal framework for data sharing while protecting individual privacy rights and ensuring organizational compliance with strict data protection standards.

When do you need this document?

You need a Consent To Share Form whenever your organization plans to share personal data with external parties and explicit consent is the most appropriate legal basis for processing. This includes situations where you're sharing customer information with business partners, transferring employee data to service providers, or collaborating with other organizations on projects involving personal data. The form is particularly crucial when dealing with special category data such as health information, criminal records, or biometric data. Healthcare providers frequently use these forms when sharing patient data with specialists, researchers, or insurance companies. Educational institutions require them when sharing student information with potential employers, other schools, or examination boards.

Key legal considerations

The consent must be freely given, specific, informed, and unambiguous under GDPR requirements. Your form must clearly identify all parties involved, including data controllers and recipients, and specify exactly what data will be shared and for what purposes. You must include information about data retention periods, the data subject's right to withdraw consent at any time, and contact details for data protection inquiries. The language used must be plain and easily understood, avoiding complex legal jargon that could confuse the data subject. Special attention is required when obtaining consent from vulnerable individuals, including minors who may need parental or guardian consent. The form should also address international data transfers if the recipient is located outside the European Economic Area.

Legal requirements in Ireland

Under the Data Protection Act 2018 and GDPR implementation in Ireland, your Consent To Share Form must meet specific statutory requirements. The Data Protection Commission serves as Ireland's supervisory authority and can impose significant penalties for non-compliance, including fines up to €20 million or 4% of annual global turnover. The form must comply with the Health Research Regulations 2018 when sharing health-related data for research purposes. If you're sharing information with public bodies, you must also consider requirements under the Freedom of Information Act 2014. Electronic consent collection must comply with ePrivacy Regulations 2011, ensuring proper procedures for digital consent capture. Organizations must maintain detailed records of all consent given and be able to demonstrate compliance during Data Protection Commission audits. The consent must be as easy to withdraw as it was to give, requiring clear withdrawal mechanisms.

GOVERNING LAW

Applicable law

This Consent To Share Form is drafted to comply with Ireland law. Key legislation includes:







Genie's Security Promise

Genie is the safest place to draft. Here's how we prioritise your privacy and security.

Your data is private:

We do not train on your data; Genie's AI improves independently

All data stored on Genie is private to your organisation

Your documents are protected:

Your documents are protected by ultra-secure 256-bit encryption

We are ISO27001 certified, so your data is secure

Organizational security:

You retain IP ownership of your documents and their information

You have full control over your data and who gets to see it