GAO covert test: one service record sent unredacted, 49 improper releases reported

The services wrote the redaction rules, then reported 49 improper releases and failed a covert test.

In a GAO covert test, one service member's record went out unredacted.

Why it matters: A service member's personnel or health record can leave a desk without the required redaction.

Date to watch: October 16, 2026. Defense generally concurred with five recommendations and, in written comments, raised concerns about the data and the scope.

Sources:

• GAO-27-107784, service member records (2026-10-16)
  https://files.gao.gov/reports/GAO-27-107784/index.html
• 5 USC 552, Freedom of Information Act (2024-01-03)
  https://www.govinfo.gov/content/pkg/USCODE-2023-title5/html/USCODE-2023-title5-partI-chap5-subchapII-sec552.htm
• 5 USC 552a, Privacy Act (2024-01-03)
  https://www.govinfo.gov/content/pkg/USCODE-2023-title5/html/USCODE-2023-title5-partI-chap5-subchapII-sec552a.htm
• National Personnel Records Center (2018-04-24)
  https://www.archives.gov/personnel-records-center
• House Report 118-125 (2023-06-30)
  https://www.congress.gov/118/crpt/hrpt125/CRPT-118hrpt125.pdf

The Throughline decodes today's headline — with receipts. Every claim is sourced; links below.
Subscribe and stand the watch. — Last Bastion