HIPAA is the prevailing law, it overrides the state laws but if any state’s law is stringent then the state laws will be implemented.