The patient would presumably consent first (to the notification emails).