While the Department of Health and Human Services has taken positive actions to implement electronic health records, it still does not have a system for addressing issues of privacy protection, according to a new report from the Government Accountability Office.