What law should you follow if a state law and HIPAA federal law disagree?

If the state laws conflict, you must follow either the law that offers the greater privacy protection or that which offers more patient rights.