The client must provide permission to share the records with you.The correct procedure is for the client to provide permission to share their medical records. Under HIPAA, a healthcare provider can only share a patient’s medical information with family members if the patient has given explicit consent. This ensures that the patient’s privacy rights are respected and that their health information is protected.