Prior to release of any information from a medical record to any person not authorized by law to receive such information, the unit shall have, and place in the record, the written consent of the patient, or the patient's appropriate legal representative.
105 CMR, § 145.555