You are answering the office calls while the receptionist in on her lunch break. A woman calls stating she is Sandra Abernathy, the wife of Bill Abernathy, and is asking for his account balance so she can send a check. You remember seeing Bill at his appointment last week and that he mentioned he was recently divorced. From what you've learned about HIPAA and patient confidentiality, is this permitted? What would you say to Sandra? Additionally, under what circumstances is it permitted to disclose such information?