healthit.gov VA and DOD Join TEFCA for Health Data Exchange
Article Content
- •VA and DOD join TEFCA to enhance health data sharing.
- •TEFCA has facilitated over 2 billion health record exchanges since its launch.
- •Data privacy concerns have emerged regarding the use of TEFCA by federal agencies.
The U.S. Department of Veterans Affairs (VA) and the Department of War (DOD) have officially joined the Trusted Exchange Framework and Common Agreement (TEFCA) to enhance the secure exchange of electronic health information. This integration aims to improve access to timely health data for veterans and service members receiving care across multiple locations. TEFCA, which has been operational since December 2023, now includes nearly 25,000 organizations and has facilitated over 2 billion health record exchanges. The VA's connection to TEFCA was anticipated since March 2025, and it is expected to streamline health data sharing between federal and non-federal providers. Other agencies, including the Indian Health Service and the Social Security Administration, have also joined TEFCA to support their respective missions. Concerns regarding data privacy have been raised, particularly regarding the Consumer Product Safety Commission's use of TEFCA for injury surveillance data.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Common questions
What is TEFCA?
Who benefits from VA and DOD joining TEFCA?
What are the privacy concerns related to TEFCA?
Continue Reading
Critical RCE Vulnerability in Prefab UI Disclosed A critical remote code execution vulnerability, CVE-2026-120338, was disclosed on November 1, 2026, affecting Prefab UI's Generative UI sandbox. The flaw allows attackers to execute arbitrary Python code by exploiting Deno's permissions, enabling file read/write access on the host server. This vulnerability affects… 
China-Linked Hackers Exploit PHP2Shell Vulnerabilities to Breach U.S. Government Systems On October 21, 2026, the PHP development team released patches for two critical vulnerabilities in PHP, known as PHP2Shell (CVE-2026-109618 and CVE-2026-109619), which allow unauthenticated remote code execution. These vulnerabilities were actively exploited by a suspected China-linked threat actor who compromised 25…