(1) A public or private college or university health center, mental health center or counseling center that provides health care, mental health care or counseling services to students, or a health professional retained by a college or university to provide health care, mental health care or counseling services to students, may disclose records of health care, mental health care or counseling provided to a student to any other person within the college or university, affiliated with the college or university or acting on behalf of the college or university, only to the extent that a person unaffiliated with the college or university would be lawfully authorized to disclose the records when providing health care, mental health care or counseling services.
(2) As used in this section, “person” means a natural individual.