CSRs must never discuss amongst themselves (or with other employees/colleagues) the private/medical information of an insured unless there is a business need to do so.
this include discussing medical information about a minor, mental health, providers, sexuality, drug addiction, etc..
Please ask the caller to provide information.