This is obviously wrong. If something goes wrong in the future, this right is hard to say. The doctor signed the risk assessment form on behalf of the patient. As far as I know, I think this is illegal, which means that the patient agrees to the risk assessment, but the patient may not know such a connection at all.
As far as I know, generally speaking, this form must be signed by the patient or the patient's family.