A nurse receives a phone call from a man who identifies himself as the adult son of an elderly client on the unit.
The son asks for a detailed update on his mother's condition.
The client's chart has no specific instructions about disclosing information to family.
What is the nurse's most appropriate action according to the Personal Health Information Protection Act, 2004 (PHIPA)?