[{"innerBlocks":[],"name":"core\/freeform","postId":13,"blockType":{"name":"core\/freeform","keywords":[],"attributes":{"content":{"type":"string","source":"raw"},"lock":{"type":"object"}},"providesContext":[],"usesContext":[],"selectors":[],"supports":{"className":false,"customClassName":false,"reusable":false},"styles":[],"variations":[],"apiVersion":3,"title":"Classic","description":"Use the classic WordPress editor.","category":"text"},"originalContent":"The increasing use of apps provided by the Department of Veterans Affairs is meant to improve access to patient health and benefits information in convenient digital platforms. However, members of Congress are worried that this electronic data is vulnerable. \u201cWhen a veteran downloads an app from the VA\u2019s app store, how much personal information does the VA receive?\u201d asked Rep. Susie Lee (D-Nev.), chair of the House Veterans\u2019 Affairs Subcommittee on Technology Modernization, during a hearing on Wednesday. \u201cWhat is the process used to determine what is minimally required?\u201dLee noted that her subcommittee studied some of the VA\u2019s apps, many of which \u201crequire significant, elevated permissions and access to users\u2019 data or devices.\u201d As a result, she contends that these apps as currently configured \u201cmay be excessive and unnecessary invasions of a veteran\u2019s privacy\u201d and may put them at risk for identity theft.

\u201cWhy do these apps need access to location, a user\u2019s photos, calendars, contacts and other information?\u201d asked Lee. \u201cAre these permissions necessary for its function?\u201dRep. Jim Banks (R-Ind.), ranking member of the subcommittee, observed that personally identifiable information and protected health information are increasingly stored in the cloud and provided to external apps. \u201cBusiness Associate Agreements stipulate how patient data will be used but patients rarely have any idea what those agreements say,\u201d said Banks. \u201cAnd, notices of privacy practices are often vague.\u201dIn that regard, Lee pointed out that the privacy policy for one VA app is \u201c988 words of legalese with clauses about incidental or consequential damages.\u201dHowever, Paul Cunningham, the VA\u2019s Chief Information Security Officer and Chief Privacy Officer, testified that veterans voluntarily share their personal information with the agency\u2014including personally identifiable information and protected health information."When Veterans do provide information, VA will not disclose that information to outside parties except at the request of the veteran or as authorized by law,\u201d according to Cunningham\u2019s testimony. \u201cAdditionally, VA.gov will never sell or rent personal information to outside parties. Violation of any part of this policy within the department would result in corrective actions including possible dismissal and could result in a criminal charge against the offending employee or contractor.\u201dWhile the VA must often share data with third party partners, Cunningham said the VA \u201cstipulates the terms for acceptable use\u201d in its policies and Business Associate Agreements and that \u201cpartners must meet these requirements and protect our data as closely as we do."","saveContent":"The increasing use of apps provided by the Department of Veterans Affairs is meant to improve access to patient health and benefits information in convenient digital platforms. However, members of Congress are worried that this electronic data is vulnerable. \u201cWhen a veteran downloads an app from the VA\u2019s app store, how much personal information does the VA receive?\u201d asked Rep. Susie Lee (D-Nev.), chair of the House Veterans\u2019 Affairs Subcommittee on Technology Modernization, during a hearing on Wednesday. \u201cWhat is the process used to determine what is minimally required?\u201dLee noted that her subcommittee studied some of the VA\u2019s apps, many of which \u201crequire significant, elevated permissions and access to users\u2019 data or devices.\u201d As a result, she contends that these apps as currently configured \u201cmay be excessive and unnecessary invasions of a veteran\u2019s privacy\u201d and may put them at risk for identity theft.

\u201cWhy do these apps need access to location, a user\u2019s photos, calendars, contacts and other information?\u201d asked Lee. \u201cAre these permissions necessary for its function?\u201dRep. Jim Banks (R-Ind.), ranking member of the subcommittee, observed that personally identifiable information and protected health information are increasingly stored in the cloud and provided to external apps. \u201cBusiness Associate Agreements stipulate how patient data will be used but patients rarely have any idea what those agreements say,\u201d said Banks. \u201cAnd, notices of privacy practices are often vague.\u201dIn that regard, Lee pointed out that the privacy policy for one VA app is \u201c988 words of legalese with clauses about incidental or consequential damages.\u201dHowever, Paul Cunningham, the VA\u2019s Chief Information Security Officer and Chief Privacy Officer, testified that veterans voluntarily share their personal information with the agency\u2014including personally identifiable information and protected health information."When Veterans do provide information, VA will not disclose that information to outside parties except at the request of the veteran or as authorized by law,\u201d according to Cunningham\u2019s testimony. \u201cAdditionally, VA.gov will never sell or rent personal information to outside parties. Violation of any part of this policy within the department would result in corrective actions including possible dismissal and could result in a criminal charge against the offending employee or contractor.\u201dWhile the VA must often share data with third party partners, Cunningham said the VA \u201cstipulates the terms for acceptable use\u201d in its policies and Business Associate Agreements and that \u201cpartners must meet these requirements and protect our data as closely as we do."","order":0,"get_parent":{},"attributes":[],"attributesType":{"content":{"type":"string","source":"raw"},"lock":{"type":"object"}},"dynamicContent":""}]

VA apps pose privacy risk to veterans’ healthcare data

More for you