If someone comes in requesting you to send information to someone else and you don't have the patient sign a written consent is this against HIPAA policy, especially if what you sent was only generalities and no medical specifics? It was only done to give the patient more time to accomplish something. I was considered in violation of HIPAA rules because I did not get a written consent and ASSUMED his verbal was adequate. Thanks