For the purposes of disclosing protected personal information, an individual's authorized legal representative may authorize the disclosure.