(a) An HIE, person, therapist, facility, agency, interdisciplinary team, integrated health system, business associate, covered entity, or entity facilitating the establishment or operation of an HIE may, without a recipient’s consent, use information from a recipient’s record to establish, or disclose such information to a business associate to establish, and further disclose information from a recipient’s record as part of a limited data set as defined by and in accordance with the requirements set forth under HIPAA, as specified in 45 C.F.R. § 164.514(e). An HIE, person, therapist, facility, agency, interdisciplinary team, integrated health system, business associate, covered entity, or entity facilitating the establishment or operation of an HIE may, without a recipient’s consent, use information from a recipient’s record or disclose information from a recipient’s record to a business associate to de-identity the information in accordance with HIPAA, as specified in 45 C.F.R. § 164.514.
     (b) As used in this Section:
         (1) the terms “disclosure” and “use” shall have the