A group of large healthcare companies is trying to create a common set of security practices, but it remains to be seen whether they can persuade businesses in the fragmented industry to join their effort. Healthcare providers are required by law to safeguard the data they collect about patients, but the laws don't specify how the data should be secured. Proponents of the new standards say they would help ease the confusion that arises when organizations all do things differently.