A PMHNP is caring for a 22-year-old college student admitted to the inpatient psychiatric unit after a serious suicide attempt by overdose. The patient is medically stable but remains actively suicidal with a specific plan involving a firearm he keeps at his off-campus apartment. His roommate, who is not a family member and has no signed release of information, calls the unit asking about the patient and mentions that the patient owns a gun. The PMHNP must decide what, if anything, can be communicated to the roommate under HIPAA.