Medicare, Medicaid services may lack training for data protection