The Department of Homeland Security finalized a new rule Tuesday that broadens its ability to investigate insider threats by eliminating key Privacy Act protections for all past and current employees regardless of their security clearance.