"When working with agencies, such as the American Red Cross, it is not necessary for a provider to obtain permission to share health information if doing so would interfere with the organization's ability to respond to the emergency (HHS 2005, para. 9)." . . . .