Some healthcare providers already meet potential new HIPAA security requirements, but others may face significant challenges.