Phone calls to patients are HIPAA compliant provided the nature of the phone call falls within the reasons for which a patient is considered to have given their consent. If a phone call to a patient relates to any other subject, the Covered Entity must have consent from the patient before making the call.