CW VS WCL

I have been served a cease and desist letter for contacting a former employer for patient histories and clarification on billing for our clients. i need to know if they are violating any laws and what I can do.