Federal health officials didn’t provide information about how people’s private medical data will be collected and managed.