Data custodians can assume implied consent from patients when sharing personal health information for the primary purpose of providing health care. However, express consent from patients is required ...