An HIE, person, therapist, facility, agency, interdisciplinary team, integrated health system, business associate, covered entity, or entity facilitating the establishment or operation of an HIE may, without a recipient’s consent, utilize the services of and disclose information from a recipient’s record to a business associate, as defined by and in accordance with the requirements set forth under HIPAA. As used in this Section, the term “disclosure” has the meaning ascribed to it by HIPAA, as specified in 45 C.F.R. § 160.103.