My state requires consent to use or disclose health information. Does the HIPAA Privacy Rule take away this protection?

No. The Privacy Rule does not prohibit a covered entity from obtaining an individual’s consent to use or disclose his or her health information and, therefore, presents no barrier to the entity’s ability to comply with State law requirements.