1. May a physician or hospital "fax" a patient's medical information to other physicians or to an insurer?