The US GAO performed a study on Medicare telehealth services. The GAO found that oversight by CMS needs to be strengthened, and that the Office for Civil Rights for the Department of Education needs to provide more education and outreach for patients and providers regarding privacy and security risks. GAO made three recommendations to CMS and one recommendation to OCR for DOE.