You must be aware of any state laws that relate to the privacy of individually identifiable health information that are more restrictive than the HIPAA Privacy Rule. The HIPAA Privacy Rule does not replace more restrictive state privacy laws.