referral & privacy act consent agreement