No. They would not need a BAA. HIPAA explicitly exclude from the BA requirements, disclosures by a covered entity to a Health Care Provider for treatment purposes.
However, you need to look for a more secure way to deliver the results because faxes are not the most secure for many reasons. Maybe check with them on that or work with IT to get a more secure delivery method set up for the future.
