We recommend that the Under Secretary for Health in coordination with the VAMC Cleveland Director, ensure the VAMC employees comply with the Privacy Act and other confidentiality statutes such as HIPAA and 38 U.S.C. § 7332, VHA Handbooks, and the Cleveland VAMC privacy policies, by appropriately safeguarding VA employees' PII and veterans' PHI.