A patient's friend calls the office to ask about the patient's recent lab results.According to HIPAA, how should the medical assistant respond?