Do I have to have the patient sign a consent for use and processing of their data?