Washington, D.C.-Reports that data processing firms might disclose personal health records are prompting federal agencies to step up oversight of how health plans handle health information and take steps to prevent security breaches. Some health plan IT contractors send health data to overseas firms for processing. Unfortunately, these firms often are fairly lax about ensuring that such offshore vendors take steps to prevent even unintentional information disclosures.