28 Pa. Code § 711.83
(a) Record requirements. There shall be a complete client record on an individual which includes information relative to the client’s involvement with the project. In addition to the requirements in § 115.32 (relating to contents), the client record shall include the following:
(c) Confidentiality.
(1) A written procedure shall be developed by the project director which complies with 4 Pa.Code § 255.5 (relating to projects and coordinating bodies: disclosure of client-oriented information). The procedure shall include, but not be limited to:
(2) The project shall obtain an informed and voluntary consent from the client for the disclosure of information contained in the client record. The consent shall be in writing and include, but not be limited to:
(4) Where consent is not required, the project personnel shall: