OCR Requests Comments on Recognized Security Practices and Distributing Proceeds of HIPAA Enforcement Actions