1. I work for a federal agency.
2. I told you in the other comment that the answer was on the HHS website, but somehow you choose not to believe the federal agency that enforces HIPAA?
3. Here is the link that explains it in full. The non-party can object to a subpoena, but ultimately the state court judge makes the decision.