Stricter federal rules have protected the privacy of millions of patients (Brookings)