A medical assistant receives a subpoena for a patient's medical records.What is the correct response?