- Patient or patient's legally authorized representative able to understand and to provide written informed consent and/or authorization for access to and use of health information, as required by an institution's IRB/MEC or local law and regulations.