You can use patient information only if you have explicit written consent from the patient. All use of patient information must comply with HIPAA regulations.