United States Government Publishing Office publisher pbl distributor dst United States Government Accountability Office author aut Government Organization text government publication eng GAOREPORTS Legislative Agency Publications gao legislative 2010-08-12 U.S. Government Printing Office 2008-09-17 monographic deposited born digital 27 p. GA 1.13:GAO-08-1138 https://www.govinfo.gov/app/details/GAOREPORTS-GAO-08-1138 P0b002ee180375cbe f:d081138 DGPO 2010-08-12 2011-03-28 GAOREPORTS-GAO-08-1138 machine generated eng fdlp REPORT GAOREPORTS-GAO-08-1138 GAO-08-1138 Accountability Electronic data interchange Electronic health records Health information privacy Information disclosure Information management Information security Information technology Internal controls Medical information systems Privacy law Privacy policies Records Right of privacy Risk management Standards Strategic planning Personal information Other Written Product A84260

Although advances in information technology (IT) can improve the quality and other aspects of health care, the electronic storage and exchange of personal health information introduces risks to the privacy of that information. In January 2007, GAO reported on the status of efforts by the Department of Health and Human Services (HHS) to ensure the privacy of personal health information exchanged within a nationwide health information network. GAO recommended that HHS define and implement an overall privacy approach for protecting that information. For this report, GAO was asked to provide an update on HHS's efforts to address the January 2007 recommendation. To do so, GAO analyzed relevant HHS documents that described the department's privacy-related health IT activities. https://www.govinfo.gov/content/pkg/GAOREPORTS-GAO-08-1138/html/GAOREPORTS-GAO-08-1138.htm https://www.govinfo.gov/content/pkg/GAOREPORTS-GAO-08-1138/pdf/GAOREPORTS-GAO-08-1138.pdf GAO-08-1138 https://www.govinfo.gov/app/details/GAOREPORTS-GAO-08-1138 Other Written Product GAO-08-1138; Health Information Technology: HHS Has Taken Important Steps to Address Privacy Principles and Challenges, Although More Work Remains; Accountability Electronic data interchange Electronic health records Health information privacy Information disclosure Information management Information security Information technology Internal controls Medical information systems Privacy law Privacy policies Records Right of privacy Risk management Standards Strategic planning Personal information Title 42 Section 1320d-2 42 U.S.C. 1320d-2 Public Law 104-191