A family member of an RCFE resident demands to see the resident's private medical records.What must staff do?