We have another provider’s office asking for patient’s INR results from last 4 visits.

Our front office would not release it without patient’s signature/consent.

Is that correct? We are new in town and don’t want to give the impression that we are delaying the care but also don’t want to release info without consent and violating HIPAA.

Thoughts?