Allison was working at the reception desk during a department staff meeting. She normally worked in medical records and, therefore, had an understanding of the importance of patient confidentiality. When a caseworker from a workers’ compensation case arrived and asked to discuss a patient’s case with the physician, Allison explained she would need a signed release form from the patient before that was possible. Did Allison handle this situation correctly?