Patient Consent: Legal Obligations and Best Practices
Informed patient consent: legal obligations, forms, traceability and legal value of electronic signature.
Updated on
Certyneo Team
Writer — Certyneo · About Certyneo

Patient consent to treatment is not a signature at the bottom of a form. It is the culmination of an information process that the healthcare professional must be able to demonstrate they carried out. This burden of proof, which falls on the practitioner rather than the patient, turns a professional duty into a concrete legal risk: the procedure may have been performed flawlessly and liability may still be incurred.
The principle: no procedure without free and informed consent
No medical procedure or treatment may be performed without the free and informed consent of the person. Three adjectives, three distinct requirements.
Free means free of constraint and pressure. Consent obtained under organizational time pressure, just before entering the operating room, is particularly vulnerable to challenge on this specific point.
Informed requires that the information be provided beforehand and understood. This is the link that most often fails.
Revocable finally: consent may be withdrawn at any time, even after having been given, and the patient may refuse treatment. The professional must then do everything possible to persuade the patient, inform them of the consequences of their refusal, and respect their decision.
The content of the information
The information covers the proposed investigations, treatments, and preventive actions, their usefulness, any urgency, their consequences, as well as frequent or serious risks that are normally foreseeable. It includes possible alternatives and the foreseeable consequences of a refusal.
Two points deserve attention. A serious risk must be disclosed even if it is rare: low frequency does not exempt the practitioner from disclosure once severity is established. And the duty to inform remains even when new risks are identified after the procedure, which requires being able to contact the patient again.
It is provided during an individual conversation, in accessible language. Handing over a document does not replace this conversation—it supplements it—and in practice it is the combination of both that builds the strongest file.
The burden of proof, the heart of the matter
Since a 1997 court ruling, now enshrined in law, it is up to the healthcare professional to prove that they provided the information, not up to the patient to prove they did not receive it.
This reversal has a direct consequence: failure to inform constitutes an independent ground for liability. It requires no technical fault whatsoever. A practitioner whose procedure was flawlessly performed can still be held liable for failing to demonstrate that they informed the patient of a risk that materialized. The harm compensated is then the loss of the chance to have avoided the risk by refusing the procedure, or the harm of being unprepared for it.
Proof can be established by any means. In practice, three elements complement one another:
- The traceability in the medical record: a dated note of the conversation, the points discussed, and the questions asked.
- The information document provided, for which it can be established that it was indeed handed over and on what date.
- The reflection period left between the disclosure of information and the procedure, which alone demonstrates that consent was not obtained under duress.
This is precisely what an electronically signed consent record provides: a dated document, attributable to an identified individual, whose integrity can be demonstrated years later. This issue ties into professional civil liability, for which failure to inform is one of the most frequent—and most avoidable—grounds for claims.
Cases requiring a written record
Consent is, in principle, oral. However, the law requires a written record in several situations, sometimes with a mandatory reflection period:
- Research involving human subjects.
- The donation and use of elements and products of the human body.
- Medically assisted reproduction.
- Cosmetic surgery, accompanied by a reflection period after the quote is provided.
- Sterilization for contraceptive purposes, with a longer reflection period.
In these cases, the absence of a written record is not merely a weakness in the evidence: it is an irregularity in itself.
Minors, protected adults, and emergencies
For a minor, consent is obtained from the holders of parental authority, but the minor must be informed and their opinion taken into account according to their degree of maturity. Under certain conditions, they may object to their parents being consulted.
For a protected adult, the principle is personal consent, with assistance or representation as provided under the applicable protective measure.
When the person is unable to express their wishes, the professional consults the trusted support person, the family, or close relatives, and takes into account any advance directives. This consultation must remain within the limits of what can be shared, an issue addressed in our article on medical confidentiality: informing a relative in order to obtain an opinion does not authorize disclosing the entire medical record to them. In cases of life-threatening emergency where consent cannot be obtained, the essential procedure may be performed—but this exception is strictly construed and requires that the emergency and the impossibility of obtaining consent be documented.
Usage scenarios
Scheduled procedure. Information is provided during a consultation, a document is handed over, and a period of time separates that consultation from the procedure. This period is not a formality: it is the most convincing element in the file.
Procedure performed repeatedly. A standardized consent process for all patients makes proof easier, provided an individual record exists for each patient. A standardized process without a named record proves nothing.
Patient refusing treatment. The refusal must be documented in the same way as consent, with a note of the information given about the consequences. The file must establish that the practitioner attempted to persuade the patient.
Frequently asked questions
Is a signed form enough? No. It constitutes one piece of evidence, not proof on its own. What is required is a demonstration that the information was adapted and understood; a signed form with no record of a conversation remains open to challenge.
Who must prove that the information was given? The healthcare professional. This reversal of the burden of proof, established in 1997 and later enshrined in law, is what makes failure to inform so frequently sanctioned.
Must an exceptional risk be disclosed? Yes, if it is serious. Rarity does not exempt the practitioner from disclosure once the severity of the risk is established.
Can the patient withdraw their consent? At any time, even after having given it. The professional must inform them of the consequences of their refusal and respect their decision.
What happens in a life-threatening emergency? The essential procedure may be performed when consent cannot be obtained. The emergency and the impossibility of obtaining consent must be documented, as the exception is strictly construed.
What compensation applies in case of failure to inform? The harm compensated is the loss of the chance to have refused the procedure, or the harm of being unprepared for the risk that occurred. These are independent heads of damage, unrelated to any technical fault.
Key takeaways
Consent is a process, not a document. What is required of the professional is not to obtain a signature but to demonstrate that they informed the patient—about the usefulness, alternatives, consequences, and serious risks, even rare ones.
Three elements together build a solid file: a dated record of the conversation in the medical record, an information document whose delivery is established, and a period of time between the disclosure of information and the procedure. The latter is the simplest to implement and the hardest to challenge.
Try Certyneo for Free
Send your first signature envelope in less than 5 minutes. 5 free envelopes per month, no credit card required.
Dive Deeper
Reference articles on this topic.
Take action
Sign an informed consent form online
Sign this document online with an eIDAS-compliant electronic signature.
Dive Deeper
Our comprehensive guides to master electronic signatures.
Continue reading about Healthcare
Deepen your knowledge with these related articles.

Patient Consent Electronic Signature 2026
The dematerialization of informed consent is transforming hospital practices in 2026. Discover how electronic signature secures your forms while complying with legal requirements.

Electronic Signature in Healthcare: GDPR & HDS Compliance
The healthcare sector faces the strictest digital compliance requirements. Learn how to deploy a legal, GDPR-compliant, and HDS-certified electronic signature solution for your health facilities.

Medical Prescription & Electronic Signature 2026
The digitization of medical prescriptions is accelerating in France. Discover how electronic signature secures your prescriptions while complying with the eIDAS legal framework and DMP requirements.