If a family member calls to ask about a patient, hospitals can disclose PHI over the phone unless the patient has objected to information being shared. The identity of the family member should be verified, and the information disclosed to the family member should only relate to the patient´s current condition. Hospitals are not allowed to disclose unrelated past medical histories to family members without the patient´s consent.