The Organization shall secure written consent from patients or their legal guardians prior to initiating services or research, when there is a substantial change to treatment or the research plan, or when exchanging or releasing confidential information or records.