If an attorney comes in to request medical records for a malpractice case that he or she is assigned to, what documentation requirements are necessary to release the records, and what type of verification should be completed prior to releasing the records?