Federal health watchdogs say they are cracking down on organizations that don’t protect the privacy and security of patient records, but data suggests otherwise.