Whenever information may be released if the data subject "consents", the Department may obtain such consent in writing or orally, including by telephone; however, the Department shall make reasonable efforts to verify the data subject's identity; and shall, if no written consent is given, file a record of any oral approval in the case record.
110 CMR, § 12.11