GAO: Security, privacy controls threaten U.S. Visit