Privacy and Security of Personal Health Information: A Novel User-Centric Approach

摘要

Privacy and security are highly important to prevent unauthorized access to personal health information (PHI). However, there is currently limited information on clinicians' experience with privacy and security-related tools and processes. This study took a user-centric approach in identifying the impact of current privacy and security-related tools and processes on clinicians' workflow in different practice settings. This exploratory study involved the analysis of clinical workflow observations and semi-structured interviews. The Systems Engineering Initiative for Patients Safety (SEIPS) framework was used to evaluate the potential incompatibility between the healthcare work system components as they relate to PHI. The results demonstrated four main themes of privacy and security challenges and associated workarounds: hybridization, authentication, authorization, and device management and environmental controls. Also, the challenges and associated workarounds varied as a function of the practice settings where clinicians worked. To optimize clinicians' experience with PHI privacy and security, system-level practice interventions are recommended.