CalOHii shall assume responsibilities for determining which provisions of state law concerning personal medical information are preempted by HIPAA. State entities impacted by HIPAA shall assist in determining which state laws concerning personal medical information are preempted by HIPAA and conform to all determinations made by the office regarding HIPAA. Any provision of state law pertaining to personal health information that is determined to be preempted by HIPAA shall not be applicable to the extent of that preemption.
The electronic provision of [clinical lab] test results shall be in accordance with any applicable federal law governing privacy and security of electronic personal health records. However, any state statute that governs privacy and security of electronic personal health records, shall apply ... and prevail over federal law if federal law permits.
