Please can someone explain the law that allows someone under a Section 2 to refuse consent for their medical records to be shared.