​State/Provincial Law
You must be aware of any state (US) or 
Provincial Privacy Laws (CAN) that relate to the privacy of individually identifiable health information that are more restrictive than the HIPAA Privacy Rule (US) or PIPEDA (CAN). The HIPAA Privacy Rule and PIPEDA do not replace more restrictive state and provincial privacy laws.