The electronic provision of [clinical lab] test results shall be in accordance with any applicable federal law governing privacy and security of electronic personal health records. However, any state statute that governs privacy and security of electronic personal health records, shall apply ... and prevail over federal law if federal law permits.
