Nearly all states have medical privacy regulations, but HIPAA preempts them unless the regulations require greater privacy protections, provide more patients´ rights, and/or assign more responsibilities to Covered Entities (and Business Associates where applicable). At present, the Texas Medical Records Privacy Act is the only state law that applies across state lines.