The dimensions of the data protection and information security competence of healthcare professionals

Authors

• Anni Taanila Department of Health and Social Management, University of Eastern Finland, Kuopio
• Virpi Jylhä Department of Health and Social Management, University of Eastern Finland, Kuopio

DOI: https://doi.org/10.23996/fjhw.109920

Keywords:

information protection, competence, health care professional, survey method

Abstract

For the time being research, on the data protection competence of healthcare professionals has been limited to looking at only one area at a time, without outlining the multidimensional overall picture. In healthcare data protection competence is carried out as information security behavior. Privacy competence manifests itself in the ability to process personal data well. At the heart of data protection competence are properly managed information management, properly processed personal data and information resources. By making sure that employees have proper data protection competency you can avoid data breaches and enhance the performance of employees and organizations.

The purpose of this study is to describe the manifestation of the dimensions of learning theory in the data protection and security competence of the employees in Healthcare Services for Prisoners. This study utilizes a cross-sectional survey of data protection competence that was conducted for every employee in Healthcare Services for Prisoners. The results of the study are described using the dimensions of Knud Illeris’ learning theory. The importance of data protection and information security competence in Healthcare Services for Prisoners is emphasized, since in Healthcare Services for Prisoners the processing of patient and personal data is governed not only by health care legislation but also by the Prison Health Care Unit Act, which defines anomalies in patient data disclosure.

The results of the study support the view that privacy competence of healthcare professionals is a multidimensional phenomenon. Privacy competence and the implementation of security behaviors in healthcare is not only dependent on the trainings an individual has undergone, but the operating environment and targeted guidance have a significant impact on the realization of data protection. Based on previous studies, the study of health care privacy competencies has placed an emphasis on looking at the work environment and internal incentives of the individual, as well as identifying factors that influence data protection policies. This study supports the view on the multidimensionality of data protection competencies and the national and international research gap on the subject.