Federal regs haven't improved safety of patient records, study shows