This depends on jurisdiction of course, but in a lot of cases you can't share data that wasn't consented for that use originally - anonymized, de-identified, or otherwise.

Chasing down previous patients for retrospective consent would be difficult to impossible.