Advocates now must determine whether or not they have the legal status to require the entity in question to disclose protected health information.