Strong regulation, fines and high-profile data breaches are pushing healthcare institutions to take information and data security seriously.