Did the customer sign an authorization for the release of the information? As long as you have that, you are okay to give it to them. They may just be trying hard to get it to work out and want to be sure they have an updated p/o request. I don't know how you'd want to handle this situation.