Patient Consent: Legal Obligations and Best Practices
Informed patient consent: legal obligations, forms, traceability and legal value of electronic signature.
Updated on
Certyneo Team
Writer — Certyneo · About Certyneo

Consent to care is not a signature at the bottom of a form. It is the culmination of an information process that the healthcare professional must be able to demonstrate they conducted. This burden of proof, which rests on the practitioner and not the patient, transforms a deontological obligation into a concrete legal risk: the procedure may have been performed flawlessly and liability may still be engaged.
The principle: no procedure without free and informed consent
No medical procedure or treatment may be performed without the free and informed consent of the person. Three adjectives, three distinct requirements.
Free means free from constraint and pressure. Consent obtained amid organisational urgency, just before entering the operating theatre, is vulnerable to criticism on this specific point.
Informed requires that the information be provided beforehand and understood. This is the link most often found lacking.
Revocable lastly: consent can be withdrawn at any time, even after having been given, and the patient may refuse treatment. The professional must then do everything possible to persuade them, inform them of the consequences of their refusal, and respect their decision.
The content of the information
The information covers the investigations, treatments and preventive actions proposed, their usefulness, their possible urgency, their consequences, as well as common or serious risks that are normally foreseeable. It includes the possible alternatives and the foreseeable consequences of a refusal.
Two points deserve attention. A serious risk must be disclosed even if it is rare: low frequency does not exempt the professional from providing information once the seriousness is established. And the obligation to inform remains in force when new risks are identified after the procedure, which presupposes being able to recontact the patient.
It is provided during an individual meeting, in accessible language. Handing over a document does not replace this meeting, it complements it — and in practice it is the combination of the two that forms the strongest file.
The burden of proof, the heart of the matter
Since a 1997 court ruling, now enshrined in law, it is up to the healthcare professional to prove that they provided the information, not up to the patient to prove that they did not receive it.
This reversal has a direct consequence: failure to inform constitutes an independent ground for liability. It presupposes no technical fault. A practitioner whose procedure was flawless can be held liable for having failed to demonstrate that they informed the patient of a risk that materialised. The harm compensated is then the loss of the chance to have avoided the risk by refusing the procedure, or the harm of being unprepared.
Proof can be established by any means. In practice, three elements complement each other:
- The traceability in the medical record: a dated note of the meeting, the points discussed, the questions asked.
- The information document provided, for which it can be established that it was indeed handed over and on what date.
- The reflection period left between the information and the procedure, which by itself demonstrates that consent was not obtained under duress.
This is precisely what an electronically signed consent form provides: a dated document, attributable to an identified person, whose integrity can be demonstrated years later. The issue connects with that of professional civil liability, for which failure to inform is one of the most frequent and most avoidable grounds for claims.
Cases where a written record is required
Consent is, in principle, oral. The law nonetheless requires a written record in several situations, sometimes with a mandatory reflection period:
- Research involving human subjects.
- The donation and use of elements and products of the human body.
- Medically assisted reproduction.
- Cosmetic surgery, accompanied by a reflection period after the quote is provided.
- Sterilisation for contraceptive purposes, with a longer reflection period.
In these cases, the absence of a written record is not merely a weakness of proof: it is an irregularity in itself.
Minors, protected adults and emergencies
For a minor, consent is obtained from the holders of parental authority, but the minor must be informed and their opinion taken into account according to their degree of maturity. Under certain conditions, they may object to their parents being consulted.
For a protected adult, the principle is one of personal consent, with the assistance or representation provided for by the protection measure.
When the person is unable to express their wishes, the professional consults the trusted support person, the family or relatives, and takes into account any advance directives. This consultation is subject to the limits of what may be shared, a matter addressed in our article on medical confidentiality: informing a relative in order to obtain an opinion does not authorise disclosing the entire record to them. In the case of a life-threatening emergency where it is impossible to obtain consent, the essential procedure may be performed — but this exception is to be interpreted strictly and requires that the emergency and the impossibility be documented.
Usage scenarios
Scheduled procedure. Information is provided during a consultation, a document is handed over, and a period of time separates this consultation from the procedure. This period is not a mere formality: it is the most convincing element of the file.
Procedure performed repeatedly. An identical consent process for all patients facilitates proof, provided that an individual record exists. A process without a named record demonstrates nothing.
Patient who refuses treatment. The refusal must be recorded just as consent would be, with a note of the information given about the consequences. The record must establish that the practitioner sought to persuade the patient.
Frequently asked questions
Is a signed form sufficient? No. It constitutes one piece of evidence, not proof in itself. What is required is a demonstration that the information provided was appropriate and understood; a signed form with no record of a meeting remains open to challenge.
Who must prove that the information was given? The healthcare professional. This reversal of the burden of proof, established in 1997 and later enshrined in law, is why failure to inform is so frequently penalised.
Must an exceptional risk be disclosed? Yes, if it is serious. Rarity does not exempt the professional from providing information once the seriousness of the risk is established.
Can the patient change their mind about consent? At any time, even after having given it. The professional must inform them of the consequences of their refusal and respect their decision.
What happens in a life-threatening emergency? The essential procedure may be performed when consent cannot be obtained. The emergency and the impossibility must be documented, as the exception is to be interpreted strictly.
What compensation applies in the event of failure to inform? The harm compensated is the loss of the chance of having been able to refuse the procedure, or the harm of being unprepared for the risk that occurred. These are independent heads of harm, irrespective of any technical fault.
Key takeaways
Consent is a process, not a document. What is required of the professional is not to obtain a signature but to demonstrate that they informed the patient — about the usefulness, the alternatives, the consequences and the serious risks, however rare.
Three elements together form a solid file: a dated record of the meeting in the medical record, an information document whose delivery is established, and a period of time between the information and the procedure. This last element is the simplest to implement and the hardest to challenge.
Try Certyneo for free
Send your first signature envelope in less than 5 minutes. 5 free envelopes per month, no credit card required.
Dive deeper
Reference articles on this topic.
Take action
Sign an informed consent form online
Sign this document online with an eIDAS-compliant electronic signature.
Dive deeper
Our comprehensive guides to master electronic signatures.
Continue reading about Healthcare
Deepen your knowledge with these articles related to the topic.

Patient Consent Electronic Signature 2026
The dematerialisation of informed consent is transforming hospital practices in 2026. Discover how electronic signature secures your forms while complying with the legal framework.

Signature électronique secteur médical : RGPD & HDS
The healthcare sector is subject to the strictest constraints in terms of digital compliance. Discover how to deploy a legal, GDPR-compliant and HDS-certified electronic signature for your healthcare establishments.

Medical Prescription & Electronic Signature 2026
The dematerialization of medical prescriptions is accelerating in France. Discover how electronic signature secures your prescriptions while respecting the eIDAS legal framework and Shared Medical Record (DMP) requirements.