HIPAA waivers are slightly tricky as I recall, as a blanket waiver isn't allowed. I think it has to be for a defined group, for a limited time. I think "directors and other performers or their agents and for the period of time the person is performing in videos and for one year thereafter" would pass muster, but AIM has to check as even that might be too general.

I'm not sure AIM is covered by HIPAA: they aren't an employer and offer no coverage or other benefits, nor do they handle information for HIPAA-cover entities (i.e., data once covered by HIPAA would subject AIM to HIPAA rules if AIM acquired that data). Again, someone with a strong stomach has to read HIPAA and then figure out what AIM does that might be read there.