New rule protects patient privacy, secures health information