My State law provides greater privacy protections on patients HIV information than the HIPAA Privacy Rule. Is this more protective State law preempted by the Privacy Rule?
No. The Privacy Rule establishes a floor of Federal privacy protections and rights for individuals. If a provision of State law provides greater privacy protection than a provision of the Privacy Rule, and it is possible to comply with both the State law and the Privacy Rule (e.g., where a State law prohibits the disclosure of HIV status while the Privacy Rule permits such disclosure), there is no conflict between the State law and the Privacy Rule, and no preemption. Further, even in the unusual case where a “more stringent” provision of a State law is “contrary” to a provision of the Privacy Rule that is, it is impossible to comply with both the Privacy Rule and the State law, or the State law is an obstacle to accomplishing the full purposes and objectives of HIPAAs Administrative Simplification provisionsthe Administrative Simplification Rules specifically provide an exception to preemption of State law. Thus, if a more stringent provision of State law protects HIV patient informat
Related Questions
- My State law provides greater privacy protections on patients HIV information than the HIPAA Privacy Rule. Is this more protective State law preempted by the Privacy Rule?
- My State law is more proactive of HIV information. Is it preempted by the HIPAA Privacy Rule?
- How do I know if a State law is "more stringent" than the HIPAA Privacy Rule?
