My father was admitted to Life Hospital Westville whilst unconscious and the hospital allowed an unknown random person to sign his admission forms, giving them complete control of his account

My father was admitted to Life Hospital Westville whilst unconscious and the hospital allowed an unknown random person to sign his admission forms, giving them complete control of his account. A large deposit was made to ensure his care. Upon his discharge there was a balance to be refunded. The hospital is refusing to refund this amount to the original account for no logical reason, despite consent being granted by the patient. I am concerned the hospital is in breach of data protection by allowing an unknown unidentifiable person to be in control of his account without his consent. This process has been ongoing for over 2 months with no resolution. I expect an urgent apology and explanation, as well as immediate refund of what is a clear overpayment on my father’s account.