unethical

During your intake session, you collect a lot of personal information that is protected by federal law. What would you do if a family member of the client calls you and demands to know about your client? In this scenario, your client did not give written permission for you to divulge information to this family member. Why is it unethical (and illegal) to tell someone about your client without written permission from the client?