Who's on First?: the Interplay of HIPAA's "Required by Law" Exception and State Law


You receive a request for medical information from a third party. Generally HIPAA would prohibit releasing the information, but would allow disclosure when “required by law.” State law, however, generally requires disclosing the information, unless disclosure is prohibited by another law.