Release of Information Question - For all those who ae HIPAA knowledgable?

I am looking for an answer to the following question. I tried finding HIPAA contact information but could not. So if you don’t know the answer but do have contact info suggestions that would be great.

When someone signs a Release of Information form do they have the right to designate what information is released?

Ex: I’ve worked in the counseling field and there was always a place on the form to designate what information could or could not be exchanged. Now there is a place I know who does not have that fill-in space on their form. They got a bit flustered when someone (honestly not myself) wrote in some specific information about what could and could not be exchanged. Is it their right to do so even if the fill-in section is missing? I had always assumed it was. (okay I confess, i am the one that advised them they could do so, haha).

If you need clarification please just ask. I know this is not a social question as is typical on Fluther but I thought I might as well tap my resources.