It is illegal for providers to release medical information without a release of information form.