Nothing in this subpart shall preempt or supersede existing state law related to medical records, health, or insurance information privacy.