Bill would tighten HIPAA privacy protections