HHS made recommendations to covered entities to improve the security of their electronic health records.