A nurse is caring for a client who has bipolar disorder. The client's employer contacts the nurse to discuss the client's condition. Which of the following actions should the nurse take?

Verify the employer's identity prior to disclosing information.

Refer the employer to the charge nurse to share the client's information.

Contact the client's family to verify the client's employment status.

Obtain the client's permission to share their health care information.