As Joy said, all US medical providers are required to have patients sign an authorization form designating who they can release info to. Ask his medical providers for a new form for you to sign...