EHR modernization needs better cyber and privacy collaboration, GAO says
EHR modernization needs better cyber and privacy collaboration, GAO says
Publish Date: 2026-06-03 18:03:00
Source Domain: www.nextgov.com
The Government Accountability Office said on Tuesday that the unit overseeing the federal government’s new electronic health record system is not collaborating enough with its partner agencies to secure the software against digital threats or ensure that patient data is sufficiently protected.
In a watchdog report, GAO said the Federal Electronic Health Record Modernization office “doesn’t fully follow leading practices for collaboration” when it comes to the cybersecurity and privacy of data with the new EHR system.
The office oversees the government’s effort to deploy one common, interoperable system across the Department of Veterans Affairs, the Defense Department, the U.S. Coast Guard and the National Oceanic and Atmospheric Administration. GAO said the completed system is expected to have “more than 500,000 users providing care to over 18 million servicemembers, veterans, and their families, making it one of the nation’s largest electronic health record systems.”
FEHRM was created through a joint charter signed by DOD and VA in December 2019, with the four participating agencies taking on varying levels of cyber and privacy responsibilities.
DOD is primarily responsible for managing the cybersecurity of the EHR software and the network used to access the system. GAO said VA also has “responsibility for the cybersecurity of its own network.” Each of the four agencies is also responsible for managing their own networks and following applicable privacy laws when it comes to handling users’ data.
While GAO said that FEHRM has “initiated a number of efforts to promote collaboration” with the four agencies, it added that “it has done so without well-defined common goals and outcomes.” The watchdog added this includes concerns that the office does not “monitor, assess or communicate on performance measures” to hold its partners accountable.
“Articulating clear and measurable goals would better position the FEHRM to oversee the…
