"EMS personnel must follow HIPAA regulations during patient care situations, when transporting patient information, for administrative functions, and in retaining, managing, and releasing patient information. ... information may only be shared by EMS agencies and personnel for treatment, payment, or operational needs"