Is it true that under the HIPAA Privacy Regulations, you must immediately give the patient the requested information over the phone, regardless of your office policy as it pertains to release of patient results?

You are a patient service representative at the XYZ Clinic. You receive a phone call from a person claiming to be a patient, whose voice you do not recognize. The persons is demanding all of his test results for the past 6 months. He threatens to complain to the government if you won’t immediately read him the results over the phone. Is it true that under the HIPAA Privacy Regulations, you must immediately give the patient the requested information over the phone, regardless of your office policy as it pertains to release of patient results? Explain your answer citing information taken directly from the HIPAA Privacy Law.