when the health insurance portability and accountability act $($HIPAA$)$ and state law contradict, a practitioner must:a$)$ comply with HIPAAb$)$ comply with state lawc$)$ make known one's commitment to HIPAA, and take reasonable steps to resolve the conflictd$)$ make known one's commitment to HIPAA, and then comply with state law