Report: HHS fails to address electronic health record privacy protections

While the Department of Health and Human Services has taken positive actions to implement electronic health records, it still does not have a system for addressing issues of privacy protection, according to a new report from the Government Accountability Office.

HHS implemented several measures to address these concerns following the release of a January 2007 GAO report on the lack of privacy safeguards in electronic health records. HHS fully implemented a GAO recommendation to “identif[y] milestones and the entity responsible for integrating the outcomes of its privacy-related initiatives,” but it fell short on implementing two other recommendations, according to a new report released last Wednesday.