VA Health Care: Prevalence Information Needed to Better Understand and Address Harassment Involving Veterans

TL;DR

A GAO review found the Department of Veterans Affairs (VA) has a 2022 policy to end harassment-related behaviors at VA medical centers but has recorded over 31,000 reported incidents from fiscal years 2020 through 2025, most involving veterans (or other patients) engaging in these behaviors against staff. GAO warns the reported data likely undercount true prevalence because most individuals who experience harassment do not notify institutions—published studies cited by GAO put formal reporting at about 2–7 percent. VA collects prevalence information at a subset of medical centers but has not implemented a systemwide prevalence effort such as an anonymous or confidential survey. Without a systemwide prevalence measure, VA cannot distinguish whether increases in reported incidents reflect improved reporting or a true rise in occurrence, nor can it optimally target prevention and mitigation resources. Immediate implications for contractors: expect demand for survey and data-collection services, healthcare analytics, policy/compliance support, and solutions that protect privacy and HIPAA-covered data. Prepare capture and proposal teams to surface opportunities on VA vehicles and to respond rapidly to follow-on solicitations; use Cabrillo tools to monitor solicitations, rescore pipelines, and accelerate compliant proposals.

Key Points

• What happened: GAO reviewed VA processes and found a 2022 VA policy to end harassment-related behaviors; VA reported over 31,000 harassment-related incidents at VA medical centers in FY2020–FY2025, but prevalence is likely higher because most incidents go unreported.
• Who is affected: Healthcare Services and Veterans Healthcare market segments and supporting services including Survey and Data Collection Services, Healthcare IT, Healthcare Policy and Compliance, Healthcare Analytics, Behavioral Health Services; specific NAICS codes and agencies noted in segmentation.
• Timeline: Data analyzed span fiscal years 2020–2025; VA policy established in 2022.
• What contractors should do NOW: Stand up capture teams targeting survey/data-collection and analytics opportunities for VA; prepare compliant technical approaches addressing anonymous/confidential survey methodology, HIPAA and Privacy Act protections, and mitigation/prevention program design; instrument Cabrillo Signals Match Engine and Intelligence Hub to surface VA solicitations on listed vehicles and rescore opportunities accordingly.

Who Is Affected

• Affected market segments: Healthcare Services, Veterans Healthcare, Healthcare IT, Survey and Data Collection Services, Healthcare Policy and Compliance, Workplace Safety, Patient Safety Programs, Healthcare Analytics, Behavioral Health Services.
• Specific NAICS codes, agencies, and contract vehicles pending source review: the segmentation supplied lists NAICS codes and vehicles; use saved searches in the Intelligence Hub to validate which solicitations reference them.
• Compliance surfaces to address: HIPAA, Privacy Act, FISMA.

Frequently Asked Questions

Q: Does VA already have a policy addressing harassment-related behaviors?

A: Yes — GAO cites a VA policy established in 2022 aimed at ending harassment-related behaviors at VA medical centers.

Q: Do the reported incident counts reflect the full scope of harassment?

A: No — GAO found over 31,000 reported incidents for FY2020–FY2025 but noted the data likely do not capture all incidents; published stakeholder studies GAO reviewed estimate formal reporting rates at about 2–7 percent, and stakeholders attribute underreporting to factors such as fear of retaliation.

Q: Will there be solicitations for prevalence surveys or analytics work immediately?

A: Pending source review. GAO recommends implementing a systemwide prevalence measure (for example, anonymous or confidential surveys); contractors should assume follow-on opportunities for survey administration, data analysis, privacy compliance, and prevention program design and prepare capture materials now.

Definitions

• Harassment-related behaviors: Behaviors the VA policy targets, including harassment of a non-sexual nature, sexual harassment, and sexual assault, as referenced in the GAO summary.
• Reported incidents: Incidents that were formally notified to VA staff and recorded; GAO analyzed reported incidents at VA medical centers for FY2020–FY2025.

Intelligence Response

• Cabrillo Signals War Room — Already detected this GAO event and delivered this briefing. War Room continuous monitoring flagged sharp policy- and data-driven developments at VA medical centers and escalated to the Healthcare practice queue.
• Cabrillo Signals Match Engine — Automatically rescored existing opportunity pipelines to prioritize survey, analytics, and healthcare-compliance opportunities for VA-related vehicles and NAICS segments.
• Cabrillo Signals Intelligence Hub — Running saved searches that track VA solicitations and the contract vehicles listed in segmentation; configured alerts to notify when related solicitations or task orders post on SAM.gov (System for Award Management) or VA portals.
• Proposal Studio (Proposal OS) & Proposal Studio Workflow Tracker — Recommended to accelerate compliant proposals: use Proposal OS for rapid generation of privacy/compliance matrices (HIPAA, Privacy Act) and evidence libraries; use Workflow Tracker to run the 9-gate capture process, route compliance review, and produce audit-ready documentation.

Who to notify now

• Capture Lead — to assess immediate bid/no-bid decisions and task capture resources.
• Proposal Director — to initiate proposal outlines, compliance matrices, and staffing plans.
• Healthcare Practice Lead — to align technical approach for surveys, analytics, and behavioral-health integration.
• Compliance Officer / Privacy Lead — to validate HIPAA and Privacy Act controls in technical approaches.
• Business Development — to coordinate pricing and teaming strategies for VA vehicles.

First 48‑hour response playbook

• Hour 0–4: Ingest this briefing into the capture record; run Cabrillo Signals Match Engine to rescore opportunities tied to VA and the listed NAICS; notify capture and proposal leads.
• Hour 4–12: Launch Intelligence Hub saved searches for VA T4NG, VECTOR, and IDIQ (Indefinite Delivery/Indefinite Quantity) - VA Medical Services; assemble a one-page win strategy and compliance checklist referencing HIPAA/Privacy Act exposures.
• Hour 12–24: Convene cross-functional kickoff (capture, bizdev, healthcare SME, compliance) and map survey/analytics solution elements; create checklist for anonymous/confidential survey methods and data protections.
• Hour 24–48: Open Proposal Studio and populate compliance matrices, win themes, and required staff resumes; start Workflow Tracker gate 1 (capture decision) and schedule required reviews.

Resources

• Primary hub: Winning Federal Contracts Guide (/insights/winning-federal-contracts)
• Related guides:
• CMMC (Cybersecurity Maturity Model Certification) Compliance Guide (/insights/cmmc-compliance-guide)
• CUI (Controlled Unclassified Information)-Safe CRM Guide (/insights/cui-safe-crm-guide)