You always abide by the HIPAA privacy rule.

This is false because HIPAA itself contains exceptions, permitted uses, and required disclosures that mean blanket adherence to strict confidentiality in every circumstance would actually violate parts of the rule.

HIPAA's Privacy Rule includes both permitted disclosures (such as for treatment, payment, and health care operations) and required disclosures (such as to individuals requesting their own records and to HHS for compliance purposes), meaning strict non-disclosure is not always the correct application of the rule. Additionally, other federal and state laws may impose obligations that interact with or sometimes take precedence over HIPAA requirements. Saying one 'always' abides by the privacy rule as a blanket statement of non-disclosure misrepresents how the rule actually works in practice.