cdphp authorization to release health information