. . . "For disclosures outside the Covered Entity, more information would have to be provided, including the address of individuals and organizations to whom the records were disclosed." . .