a written__________ is required before giving out information about an individual receiving services