The HIPAA Privacy Rule permits UCMC to communicate with patients regarding their health care.  This includes communicating with patients through the mail, by phone, or in some other manner.  However, to reasonably safeguard the individual's privacy, employees must verify the identity of the person with whom we are disclosing information.  Ask the person to supply information about the patient - for example, the patient's demographic information (phone number, home address, date of birth, etc.).  Doing so will reduce the risk of disclosing patient information to someone who is not entitled.