A phlebotomist has just finished drawing blood from a patient.
In the hallway, a person who identifies themself as the patient's spouse asks for the names of the tests being run.
According to HIPAA, what is the phlebotomist's most appropriate response?