PLEASE PLEASE PLEASE pass this rule! The same security required by banks and financial institituions MUST be required by PHR applications. Anything less is unacceptable. Our medical records and our bank accounts should have the same level of security.