26.7. Rules for client privacy and consent to disclose