To be fair the company itself may very well have that rule so HR telling you that you aren't allowed to share it if someone calls you may be technically true. But it's definitely not the law.

If they did tell you it was illegal it also wouldn't be the first time a company told people something was illegal that wasn't just to make them extra scared of breaking the rule.