The Health and Human Services Department wants input on how healthcare organizations implement security practices for health information privacy as it considers future rules and guidance.