It seems HHS is laying the groundwork for the issuance of the updates to HIPAA privacy and security rules under the HITECH Act.  As reported May 16th in the Washington Post:

“The nation’s push to computerize medical records has failed to fully address longstanding security gaps that expose patients’ most sensitive information to hackers and snoops, government investigators warn.”

http://www.washingtonpost.com/politics/hhs-inspector-general-says-push-for-electronic-medical-records-overlooks-some-security-gaps/2011/05/16/AFpaH54G_story.html