If HIPAA rules are stricter than state laws, which standard should you follow and why? What if the state law was stricter?

P.S. Why? Because it is a federal law which is stronger than state.

Sra