“Intended to keep personal health information private, the law does not {emphasis CMG’s} prohibit healthcare providers from sharing information with family, friends or caregivers unless the patient specifically objects. Even if she is not present or is incapacitated, providers may use “professional judgment” to disclose pertinent information to a relative or friend if it’s ‘in the best interests of the individual.”’