Every hospital is required to have a "Privacy Officer" under the HIPAA regulations. The Privacy Officer would be able to best address these questions- policies vary in different hospitals. Generally, when someone calls for patient information, you a...