If HIPPAA rules are stricter than state law, which standard should you follow and why? Or what if the state law is stricter?