Who has the obligation to provide enough information to patients so that they understand the risks and benefits associated with the decision to consent?