The GAO finds that even of the eight issues identified by the Congress have not been fully addressed, including accuracy of data, stress testing, abuse prevention, unauthorized access prevention, policies for operation and use, privacy concerns, and redress process.