AMR called attempting to collect on a small XXXX bill on XXXX/XXXX/15. XXXX left a message concerning " personal '' reasons. I called back and talked with XXXX XXXX ( female ) who then stated it was a debt collection and asked to verify me. She then told me my birthdate, last XXXX of my social, and an old address and asked if this is me. I stated " sure '', surprised that even if it wasnt me I could have said yes and gathered all that information given and stole my identity. I then told her it was an old address and asked what it was regarding. The collector became rude and short tempered. I asked for proof of the bill. she stated it was mailed out. I told her obviously they had the wrong address and I had given her the correct XXXX. She stated they " didnt get the mail back '' and told me she would mail a new statement out and hung up on me. I was surprised by the unprofessionalism but more importantly that she gave my information freely to anyone. If I hadnt been me, would she have asked the person to forget all that information she just gave out. I called back and spoke with a supervisor, XXXX, who apologized and stated they would pull audio recording and review and a supervisor would call back. I was called back by XXXX who stated he was a supervisor and had reviewed the audio. XXXX stated that the collector " followed the letter of the law '' concerning my privacy. That he apologized for her behavior. No laws were broken and as a matter of fact they had other bills in office for my name, my sons name, and my daughters name and now we will send you all of these so the original amount we stated was wrong. ( another violation- attempting to collect an incorrect amount for a debt ). He stated again that the letter of the law was followed by giving all the information out and asking " is this you? '' before giving out additional information. I am EXTREMELY uncomfortable with anyone having my information and giving it out so freely. Isnt this a violation of the privacy act?