Dataset Information

A Systematic Review of Research Studies Examining Telehealth Privacy and Security Practices used by Healthcare Providers.

ABSTRACT: The objective of this systematic review was to systematically review papers in the United States that examine current practices in privacy and security when telehealth technologies are used by healthcare providers. A literature search was conducted using the Preferred Reporting Items for Systematic Reviews and Meta-Analyses Protocols (PRISMA-P). PubMed, CINAHL and INSPEC from 2003 - 2016 were searched and returned 25,404 papers (after duplications were removed). Inclusion and exclusion criteria were strictly followed to examine title, abstract, and full text for 21 published papers which reported on privacy and security practices used by healthcare providers using telehealth. Data on confidentiality, integrity, privacy, informed consent, access control, availability, retention, encryption, and authentication were all searched and retrieved from the papers examined. Papers were selected by two independent reviewers, first per inclusion/exclusion criteria and, where there was disagreement, a third reviewer was consulted. The percentage of agreement and Cohen's kappa was 99.04% and 0.7331 respectively. The papers reviewed ranged from 2004 to 2016 and included several types of telehealth specialties. Sixty-seven percent were policy type studies, and 14 percent were survey/interview studies. There were no randomized controlled trials. Based upon the results, we conclude that it is necessary to have more studies with specific information about the use of privacy and security practices when using telehealth technologies as well as studies that examine patient and provider preferences on how data is kept private and secure during and after telehealth sessions.

SUBMITTER: Watzlaf VJM

PROVIDER: S-EPMC5716616 | biostudies-other | 2017

REPOSITORIES: biostudies-other

ACCESS DATA

Publications

A Systematic Review of Research Studies Examining Telehealth Privacy and Security Practices used by Healthcare Providers.

Watzlaf Valerie J M VJM Zhou Leming L Dealmeida Dilhari R DR Hartman Linda M LM

International journal of telerehabilitation 20171120 2

The objective of this systematic review was to systematically review papers in the United States that examine current practices in privacy and security when telehealth technologies are used by healthcare providers. A literature search was conducted using the Preferred Reporting Items for Systematic Reviews and Meta-Analyses Protocols (PRISMA-P). PubMed, CINAHL and INSPEC from 2003 - 2016 were searched and returned 25,404 papers (after duplications were removed). Inclusion and exclusion criteria ...[more]

PMID: 29238448

Similar Datasets

Project description:BackgroundData breaches in health care are on the rise, emphasizing the need for a holistic approach to mitigation efforts.ObjectiveThe purpose of this study was to develop a comprehensive framework for modeling and analyzing health care professionals' information security practices related to their individual characteristics, such as their psychological, social, and cultural traits.MethodsThe study area was a hospital setting under an ongoing project called the Healthcare Security Practice Analysis, Modeling, and Incentivization (HSPAMI) project. A literature review was conducted for relevant theories and information security practices. The theories and security practices were used to develop an ontology and a comprehensive framework consisting of psychological, social, cultural, and demographic variables.ResultsIn the review, a number of psychological, social, and cultural theories were identified, including the health belief model, protection motivation theory, theory of planned behavior, and social control theory, in addition to some social demographic variables, to form a comprehensive set of health care professionals' characteristics. Furthermore, an ontology was developed from these theories to systematically organize the concepts. The framework, called the psychosociocultural (PSC) framework, was then developed from the various combined psychological and sociocultural attributes of the ontology. The Human Aspect of Information Security Questionnaire was adopted as a comprehensive tool for gathering staff security practices as mediating variables in the framework.ConclusionsData breaches occur often in health care today. This frequency has been attributed to the lack of experience of health care professionals in information security, the lack of development of conscious care security practices, and the lack of motivation to incentivize health care professionals. The frequent data breaches in health care threaten the mutual trust between health care professionals and patients, which implicitly impacts the quality of the health care service. The modeling and analysis of health care professionals' security practices can be conducted with the PSC framework by combining methods of statistical survey, observations, and interviews in relation to PSC variables, such as perceptions (perceived benefits, perceived threats, and perceived barriers) or psychological traits, social factors, cultural factors, and social demographics.

Project description:BACKGROUND:Traditionally, health information has been mainly kept in paper-based records. This has deeply changed throughout approximately the last three decades with the widespread use of multiple health information technologies. The digitization of health care systems contributes to improving health care delivery. However, it also exposes health records to security and privacy breaches inherently related to information technology (IT). Thus, health care organizations willing to leverage IT for improved health care delivery need to put in place IT security and privacy measures consistent with their use of IT resources. OBJECTIVE:In this study, 2 main objectives are pursued: (1) to assess the state of the implementation of IT security and privacy practices in European hospitals and (2) to assess to what extent these hospitals enhance their IT security and privacy practices as they move from paper-based systems toward fully electronic-based systems. METHODS:Drawing on data from the European Commission electronic health survey, we performed a cluster analysis based on IT security and privacy practices implemented in 1723 European hospitals. We also developed an IT security index, a compounded measure of implemented IT security and privacy practices, and compared it with the hospitals' level in their transition from a paper-based system toward a fully electronic-based system. RESULTS:A total of 3 clearly distinct patterns of health IT-related security and privacy practices were unveiled. These patterns, as well as the IT security index, indicate that most of the sampled hospitals (70.2%) failed to implement basic security and privacy measures consistent with their digitization level. CONCLUSIONS:Even though, on average, the most electronically advanced hospitals display a higher IT security index than hospitals where the paper system still dominates, surprisingly, it appears that the enhancement of IT security and privacy practices as the health information digitization advances in European hospitals is neither systematic nor strong enough regarding the IT-security requirements. This study will contribute to raising awareness among hospitals' managers as to the importance of enhancing their IT security and privacy measures so that they can keep up with the security threats inherently related to the digitization of health care organizations.

Project description:Introduction:Emergency care research in Africa is not on par with other world regions. The study aimed to assess the perceptions and practices towards research among current emergency care providers in Africa. Methods:A survey was sent to all individual members of the African Federation of Emergency Medicine. The survey was available in English and French. Results:One hundred and sixty-eight responses were analysed (invited n = 540, responded n = 188, 34.8%, excluded n = 20). Responders' mean age was 36.3 years (SD = 9.1); 122 (72.6%) were male, 104 (61.9%) were doctors, and 127 (75.6%) were African trained. Thirty-seven (22%) have never been involved in research; 33 (19.6%) have been involved in ?5 research projects. African related projects were mostly relevant to African audiences (n = 106, 63.1%). Ninety-four (56%) participants have never published. Forty-one (24.4%) were not willing to publish in open access journals requesting a publication fee; 65 (38.7%) will consider open access journals if fees are sponsored. Eighty responders (47.6%) frequently experienced access block to original articles due to subscription charges. Lack of research funding (n = 108, 64.3%), lack of research training (n = 86, 51.2%), and lack of allocated research time (n = 76, 45.2%) were the main barriers to research involvement. Improvement of research skills (n = 118, 70.2%) and having research published (n = 117, 69.6%) were the top motivational factors selected. Responders agreed that research promotes critical thinking (n = 137, 81.5%) and serve as an important educational tool (n = 134, 80.4%). However, 134 (79.8%) feel that emergency care workers need to be shown how to use research to improve clinical practice. Most agreed that insufficient emergency care research is being conducted in Africa (n = 113, 67.3%). Discussion:There is scope to increase research involvement in emergency care in Africa, but solutions need to be find to address lack of research-related funding, training and time.

Project description:BackgroundThe increased use of health information systems and information technology (IT) in healthcare heightens the risk of security and privacy breaches. Necessary measures such as effective IT training and education are required to meet the challenges of protecting patient information.PurposeThe objective of the study was to determine the effectiveness of existing educational and awareness modules in delivering the key messages around IT security and privacy.MethodsThe study was conducted in a large healthcare organization in Western Canada from September 2016 to March 2017. Using proportionate stratified random sampling, an online survey was distributed to all professional groups including clinical and non-clinical staff. In total, 586 participants responded to questions pertaining to whether or not they were aware of the IT education material, common potential breaches, and knowledge in preventing IT security and privacy breaches. Data were analyzed in SPSS version 19.ResultsThe study found that most of the participants (80.9%) completed the online IT training. Staff perceived the online training as effective (57.5%). There was a significant positive correlation between staff perception about the effectiveness of IT security educational material and satisfaction with IT security in the organization (r=0.34, P<0.01). Those who completed the training were 4.2-times (CI=2.0-8.8) more likely to correctly report the action upon receiving spam emails than those who had not completed the training. The most common type of breach stated was not knowing how to encrypt emails when sending emails outside the organization. Only a small proportion of clinical (25.5%) and non-clinical staff (30.4%) reported knowing how to encrypt emails. Also, participants identified various strategies for improving the module content and compliance.ConclusionOnline training provides a basic understanding of IT security and privacy concepts to prevent potential breaches. The training should be an integral part of healthcare staff continuing education to protect patient information.

Project description:BackgroundIn healthcare, a gap exists between what is known from research and what is practiced. Understanding this gap depends upon our ability to robustly measure research utilization.ObjectivesThe objectives of this systematic review were: to identify self-report measures of research utilization used in healthcare, and to assess the psychometric properties (acceptability, reliability, and validity) of these measures.MethodsWe conducted a systematic review of literature reporting use or development of self-report research utilization measures. Our search included: multiple databases, ancestry searches, and a hand search. Acceptability was assessed by examining time to complete the measure and missing data rates. Our approach to reliability and validity assessment followed that outlined in the Standards for Educational and Psychological Testing.ResultsOf 42,770 titles screened, 97 original studies (108 articles) were included in this review. The 97 studies reported on the use or development of 60 unique self-report research utilization measures. Seven of the measures were assessed in more than one study. Study samples consisted of healthcare providers (92 studies) and healthcare decision makers (5 studies). No studies reported data on acceptability of the measures. Reliability was reported in 32 (33%) of the studies, representing 13 of the 60 measures. Internal consistency (Cronbach's Alpha) reliability was reported in 31 studies; values exceeded 0.70 in 29 studies. Test-retest reliability was reported in 3 studies with Pearson's r coefficients > 0.80. No validity information was reported for 12 of the 60 measures. The remaining 48 measures were classified into a three-level validity hierarchy according to the number of validity sources reported in 50% or more of the studies using the measure. Level one measures (n = 6) reported evidence from any three (out of four possible) Standards validity sources (which, in the case of single item measures, was all applicable validity sources). Level two measures (n = 16) had evidence from any two validity sources, and level three measures (n = 26) from only one validity source.ConclusionsThis review reveals significant underdevelopment in the measurement of research utilization. Substantial methodological advances with respect to construct clarity, use of research utilization and related theory, use of measurement theory, and psychometric assessment are required. Also needed are improved reporting practices and the adoption of a more contemporary view of validity (i.e., the Standards) in future research utilization measurement studies.

Dataset Information

A Systematic Review of Research Studies Examining Telehealth Privacy and Security Practices used by Healthcare Providers.

Publications

A Systematic Review of Research Studies Examining Telehealth Privacy and Security Practices used by Healthcare Providers.

Similar Datasets

OmicsDI is part of the ELIXIR infrastructure

Tweets