Dr$.$ Mary McDonald is a family physician. A local researcher is conducting a study on the links between poverty and the risk of kidney disease. The researcher asks Dr$.$ McDonald to share the medical histories of patients with kidney disease. Which of the following is correct?

Dr$.$ McDonald can't disclose the information without the express consent of her patients.

Dr$.$ McDonald may disclose without consent because the records belong to her.

Dr$.$ McDonald may disclose the information without consent if the research has been approved by the Committee for Harmonized Health Impact, Ethics and Privacy Review $($CHIPER$)$ and by the Provincial Health Research Privacy Committee $($PHRPC$).$