a nurse is caring for a client diagnosed with myocardial infarction. a person identifying himself as the client's friend asks the nurse for the client's records, but the nurse declines. the nurse's unwillingness to divulge the requested information is based on the understanding that which people would be entitled to access to the client's records?