Skip to main content
U.S. flag

An official website of the United States government

Dot gov

The .gov means it's official.
Federal government websites often end in .gov or .mil. Before sharing sensitive information, make sure you're on a federal government site.


The site is secure.
The https:// ensures that you are connecting to the official website and that any information you provide is encrypted and transmitted securely.

Audit of NIH's Oversight of the All of Us Research Program Award Recipients

The National Institutes of Health (NIH) is the primary Federal agency for conducting and supporting biomedical research. The All of Us Research Program (AoURP) is a major component of the Precision Medicine Initiative overseen by the NIH. The AoURP is responsible for building a national research cohort of more than 1 million participants who provide their personal health information to NIH so that researchers, providers, and patients can work together to build a better future for health care. Without appropriate security and privacy controls to protect AoURP data, the AoURP and its award recipients cannot effectively minimize information security and cybersecurity risks to an acceptable level.

The purpose of this audit is to determine whether the AoURP's award recipients: (1) limit program research data access, (2) implement information security and privacy controls, and (3) remediate information security and privacy weaknesses in accordance with Federal requirements.

Announced or Revised Agency Title Component Report Number(s) Expected Issue Date (FY)
February 2024 Health and Human Services / Office of the Secretary Audit of NIH's Oversight of the All of Us Research Program Award Recipients Office of Audit Services W-00-24-42045 2025