“Required by law means a mandate contained in law that compels an entity to make a use or disclosure of protected health information and that is enforceable in a court of law. Required by law includes, but is not limited to, court orders and court-ordered warrants; subpoenas or summons issued by a court, grand jury, a governmental or tribal inspector general, or an administrative body authorized to require the production of information; a civil or an authorized investigative demand...”
https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164
Congress probably has reasonable cause to require production under Amendment XXV.
Joe’s doctor might get to kvetch with Steve Bannon.
HIPAA law is beyond my scope of knowledge.
I don’t know for sure if those words are applicable.