A nurse is discussing the HIPAA privacy rule with a newly licensed nurse. Which of the following clients should the nurse identify as an exception to the HIPAA privacy guidelines?