An agreement to exempt healthcare providers from the federal "red flags" privacy rule could be forthcoming, according to a recent report from the Bureau of National Affairs.