Under HIPAA and 42 CFR Part 2, which situation permits disclosure of a client's SUD treatment records without consent?