Physiotherapists must obtain and record patient consent before disclosing a patient's personal health information to someone who is not a health provider involved in the patient's care. Physiotherapists must ensure that those who have the authority or patient consent can access a patient record in a timely way.