The nurse working in the ICU takes a phone call from an unknown person inquiring about the status of one of the patients under her care. Which of the following is the best course of action for the nurse?

The requested information is protected under HIPAA (Health Insurance Portability and Accountability Act). HIPAA specifies that only those involved in direct patient care, insurance reimbursement, or patient management receive confidential information. HIPAA also dictates that patients may list persons in their chart with whom this information may be shared, or appoint someone as an authorized person to make healthcare decisions for them with an advance directive listed in the chart.