Is It A Hipaa Violation For The Collection Agency To Send An Itemized List Without A Release Form