I believe unless it’s required by government regulations or court orders, no one can force an organization release it’s own data.
I don’t even give patient names to the medical group who treated the patient.
I don’t even give patient names to the medical group who treated the patient.