The new rule clarifies and expands patients’ rights pertaining to their health information, while also toughening providers’ responsibility to keep that data safe and secure.