Reports & Testimonies

  • GAO’s recommendations database contains report recommendations that still need to be addressed.

    GAO’s recommendations help congressional and agency leaders prepare for appropriations and oversight activities, as well as help improve government operations. Recommendations remain open until they are designated as Closed-implemented or Closed-not implemented. You can explore open recommendations by searching or browsing.

    GAO's priority recommendations are those that we believe warrant priority attention. We sent letters to the heads of key departments and agencies, urging them to continue focusing on these issues. These recommendations are labeled as such. You can find priority recommendations by searching or browsing our open recommendations below, or through our mobile app.

  • Browse Open Recommendations

    Explore priority recommendations by subject terms or browse by federal agency

    Search Open Recommendations

    Search for a specific priority recommendation by word or phrase



  • Governing on the go?

    Our Priorities for Policy Makers app makes it easier for leaders to search our recommendations on the go.

    See the November 10th Press Release


  • Have a Question about a Recommendation?

    • For questions about a specific recommendation, contact the person or office listed with the recommendation.
    • For general information about recommendations, contact GAO's Audit Policy and Quality Assurance office at (202) 512-6100 or apqa@gao.gov.
  • « Back to Results List Sort by   

    Results:

    Subject Term: "Health care information"

    4 publications with a total of 12 open recommendations including 2 priority recommendations
    Director: Carolyn Yocom
    Phone: (202) 512-7114

    2 open recommendations
    Recommendation: To help ensure that its efforts to increase patients' electronic access to health information are successful, the Secretary of HHS should direct ONC to develop performance measures to assess outcomes of key efforts related to patients' electronic access to longitudinal health information. Such actions may include, for example, determining whether the number of providers that participate in these initiatives have higher rates of patient access to electronic health information.

    Agency: Department of Health and Human Services
    Status: Open

    Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.
    Recommendation: To help ensure that its efforts to increase patients' electronic access to health information are successful, the Secretary of HHS should direct ONC to use the information these performance measures provide to make program adjustments, as appropriate. Such actions may include, for example, assessing the status of program operations or identifying areas that need improvement in order to help achieve program goals related to increasing patients' ability to access their health information electronically.

    Agency: Department of Health and Human Services
    Status: Open

    Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.
    Director: Yocom, Carolyn L
    Phone: (202) 512-7114

    2 open recommendations
    Recommendation: To improve efforts to promote EHR use and electronic exchange of health information in post-acute care settings, the Secretary of Health and Human Services should direct the Centers for Medicare & Medicaid Services (CMS) and ONC to evaluate the effectiveness of HHS's key efforts to determine whether they are contributing to HHS's goal for increasing the use of EHRs and electronic exchange of health information in post-acute care settings.

    Agency: Department of Health and Human Services
    Status: Open

    Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.
    Recommendation: To improve efforts to promote EHR use and electronic exchange of health information in post-acute care settings, the Secretary of Health and Human Services should direct CMS and ONC to comprehensively plan for how to achieve the department's goal related to the use of EHRs and electronic information exchange in post-acute care settings. This planning may include, for example, identifying specific actions related to post-acute care settings and identifying and considering external factors.

    Agency: Department of Health and Human Services
    Status: Open

    Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.
    Director: Gregory C. Wilshusen
    Phone: (202) 512-6244

    5 open recommendations
    Recommendation: To improve the effectiveness of HHS guidance and oversight of privacy and security for health information the Secretary of Health and Human Services should update security guidance for covered entities and business associates to ensure that the guidance addresses implementation of controls described in the National Institute of Standards and Technology Cybersecurity Framework.

    Agency: Department of Health and Human Services
    Status: Open

    Comments: HHS concurred with the recommendation and plans to implement it. Subsequent to the agency stating that is has taken action, we plan to verify whether implementation has occurred.
    Recommendation: To improve the effectiveness of HHS guidance and oversight of privacy and security for health information the Secretary of Health and Human Services should update technical assistance that is provided to covered entities and business associates to address technical security concerns.

    Agency: Department of Health and Human Services
    Status: Open

    Comments: HHS concurred with the recommendation and plans to implement it. Subsequent to the agency stating that is has taken action, we plan to verify whether implementation has occurred.
    Recommendation: To improve the effectiveness of HHS guidance and oversight of privacy and security for health information the Secretary of Health and Human Services should revise the current enforcement program to include following up on the implementation of corrective actions.

    Agency: Department of Health and Human Services
    Status: Open

    Comments: HHS neither concurred nor nonconcurred with the recommendation but plans to implement it. Subsequent to the agency stating that is has taken action, we plan to verify whether implementation has occurred.
    Recommendation: To improve the effectiveness of HHS guidance and oversight of privacy and security for health information the Secretary of Health and Human Services should establish performance measures for the Office of Civil Rights (OCR) audit program.

    Agency: Department of Health and Human Services
    Status: Open

    Comments: HHS concurred with the recommendation and plans to implement it. Subsequent to the agency stating that is has taken action, we plan to verify whether implementation has occurred.
    Recommendation: To improve the effectiveness of HHS guidance and oversight of privacy and security for health information the Secretary of Health and Human Services should establish and implement policies and procedures for sharing the results of investigations and audits between OCR and Centers for Medicare & Medicaid Services to help ensure that covered entities and business associates are in compliance with the Health Insurance Portability and Accountability Act of 1996 and the Health Information Technology for Economic and Clinical Health Act.

    Agency: Department of Health and Human Services
    Status: Open

    Comments: HHS neither concurred nor nonconcurred with the recommendation but plans to implement it. Subsequent to the agency stating that is has taken action, we plan to verify whether implementation has occurred.
    Director: Yocom, Carolyn L
    Phone: (202) 512-4931

    3 open recommendations
    including 2 priority recommendations
    Recommendation: To more effectively use CQMs to assess provider performance, the Secretary of Health and Human Services should direct CMS and ONC to develop a comprehensive strategy for ensuring that CQM data collected and reported using certified EHR technology are reliable, including testing for and mitigation of reliability issues arising from variance in certified EHR systems tested to different CQM specifications.

    Agency: Department of Health and Human Services
    Status: Open
    Priority recommendation

    Comments: In July 2015, CMS added that the agency is addressing the issue of reliability through the measure development process. Specifically, CMS stated that the agency has made tools available to measure developers which help to clarify the intent of the measure, catch errors in the development process, and minimize measure complexity. As of October 2016, CMS indicated that its National Testing Collaborative oversees implementation testing of quality measures, including testing for reliability issues. However, the agency did not indicate how these efforts constitute a comprehensive strategy, in conjunction with ONC, for achieving CQM reliability, as we recommended. In April 2017, CMS indicated that its pilot test of the National Testing Collaborative proved unsuccessful, and that CMS is continuing to look at how to best incorporate implementation testing into measure development and implementation. The agency did not indicate it has a comprehensive strategy for these efforts. We will update the status of this recommendation when we receive additional information.
    Recommendation: To ensure that CMS and ONC can effectively monitor the effect of the EHR programs and progress made toward goals, the Secretary of Health and Human Services should direct the agencies to develop performance measures to assess outcomes of the EHR programs--including any effects on health care quality, efficiency, and patient safety and other health care reform efforts that are intended to work toward similar outcomes.

    Agency: Department of Health and Human Services
    Status: Open
    Priority recommendation

    Comments: In July 2015, CMS noted that the agency is working to align the programs to better enable monitoring using outcome-oriented performance measures and noted that the agency is collecting data that will help them to develop such measures. CMS did not indicate when HHS plans to develop such measures as GAO recommended. In June 2016, CMS also noted that it analyzed the results of the EHR programs as of October 2015, but did not indicate that it used performance measures that assess outcomes. In September 2017, HHS officials provided us a variety of publically available reports, which they indicated show how program participants are progressing in the EHR programs and the related impacts. However, in reviewing those materials, we did not see evidence that HHS has developed outcome-oriented performance measures that align to the intended outcomes of the EHR programs?that is, goals related to improving health care quality, efficiency, and patient safety. We will update the status of this recommendation when we receive additional information.
    Recommendation: To ensure that CMS and ONC can effectively monitor the effect of the EHR programs and progress made toward goals, the Secretary of Health and Human Services should direct the agencies to use the information these performance measures provide to make program adjustments, as appropriate, to better achieve program goals.

    Agency: Department of Health and Human Services
    Status: Open

    Comments: In written responses provided by HHS in February 2014, on a draft of the report, the agency indicated that it agrees that outcome-oriented performance measures will be useful to evaluating the extent that the EHR programs--enacted through legislation--achieve the expected results. However, HHS did not identify any specific actions that it might undertake to address our recommendation. In July 2015, CMS indicated that the agency is still working to develop additional performance measures, which is a necessary first step towards implementing our recommendation to HHS that CMS and ONC use the outcome-oriented performance measures to make program adjustments, as appropriate. In September 2017, HHS officials provided us documents, which they indicated show how information gathered through monitoring activities was used to inform the EHR programs. However, in reviewing those materials, we did not see evidence that HHS used information collected through outcome-oriented performance measures noted above. We will update the status of this recommendation when we receive additional information.