A disclosure otherwise permissible under the Electronic Medical Records Act may be made to providers, health care group purchasers, health care institutions, health information exchanges or record locator services located or operating outside of the state.