GAO: VA Has Made Progress Enhancing Security Controls for Protected Health Information

A GAO review found the VA’s Veterans Health Administration has made progress strengthening privacy and cybersecurity controls for protected health information shared with external “business associates.” The report focuses on how VA uses PHI sharing agreements to meet HIPAA Privacy Rule requirements and identifies remaining gaps and oversight needs.