I can only answer this as to what I've seen. I've always seen the RN give information out if the patient agrees- that is, the RN asks if it's ok to give Aunt Susie info, etc. Now, if the patient is unconscious, info is given if they are on "the list".. otherwise, we suggest that they contact the person who is on "the list".
Over the phone is a whole other ballgame. No info is given, period, unless they have the access code and are the correct person to have the code.
Now, general info can be given to whomever over the telephone - unless the pt. is a privacy pt. For example, "serious, stable, critical", etc etc.