When a major medical supplier loses control of its patient databases, the failure rarely starts in its own server room.

As national health data exchange scales at a dizzying pace, the federal government is shifting its focus from building connections to policing them.