Rule would clarify what covered entities and their business associates must do to protect the security of electronic ...