Residents' records, including information in an automatic data bank, shall be treated confidentially. The facility shall not release information from a resident's record to a person not otherwise authorized by law to receive the information without the resident's or the resident's guardian's written consent.