The law makes it clear that a capable person, regardless of age, may consent to the collection, use and disclosure of his or her personal health information.