HHS needs to strengthen its oversight of Medicare beneficiaries' protected prescription drug data, according to a newly released report from the Government Accountability Office.
In the 40-page report (PDF), the GAO acknowledged that HHS has taken some steps, such as issuing legislation and ramping up educational efforts, aimed at protecting the privacy and security of vulnerable patient data. But those actions have not gone far enough, the GAO argued.
"HHS has not issued required implementation guidance to assist entities in de-identifying personal health information including when it is used for purposes other than directly providing clinical care to an individual," the GAO said in the report. "This means ensuring that data cannot be linked to a particular individual, either by removing certain unique identifiers or by applying a statistical method to ensure that the risk is very small that an individual could be identified."