Content area
Background study
Health information, over the years, has been regarded as one of the crucial assets in the landscape of health on the grounds of the myriads of benefits derived from it. It plays a major role in policy planning and implementation, quality improvement, clinical decision-making, care continuity, disease surveillance, etc., making it an integral part of healthcare delivery. This substantiates the pressing need for an appropriate information governance (IG) system, ensuring proper data stewardship, measures to ensure data quality and that preserving the privacy and confidentiality of patient data are in place. As part of conscious efforts to improve health information governance, this study examines the entire information governance structure of healthcare facilities used as study areas, taking into account the effectiveness of data stewardship, data quality management and compliance with regulatory requirements.
Methodology
Employing a cross-sectional study design, data was collected from 432 healthcare professionals emanating from Cape Coast Teaching Hospital (CCTH), Eastern Regional Hospital Koforidua (ERHK) and Ledzokuku-Krowor Municipal Assembly (LEKMA) Hospital, all in Ghana. A semi-structured questionnaire, demarcated into five (5) parts, was used to collect the data. Closed-ended questions were analyzed with Stata 15.0 involving frequencies, percentages, means, standard deviation, standard errors and confident intervals. A chi-square test of independence was deployed to ascertain relationships between variables. Open-ended questions were coded and analyzed with Qualitative Data Analysis Miner 6.0, deploying inductive thematic analysis.
Results
The level of understanding of data stewardship (2.87/4.0), familiarity with concepts of data quality (2.73/5.0) and ethical considerations and privacy (3.13/5.0) when dealing with patient health data were found to be varied among the professionals, overall rated as moderate and affirming the need for improvement. The level of knowledge and understanding on these pertinent areas were highly influenced by type of profession (p < 0.001; p = 0.031 and, p < 0.001) respectively and been indicative that some type of health workers is much concerned about data stewardship and health information governance than others. Various methods and efforts were in place to ensure the quality of data; however, hampering these attempts included factors such as poor data collection methods, lack of resources, inadequate competency and some behavioral factors. In addition to these factors is the low level of training on data stewardship (1.86/4.0), which heavily leads to skewness in knowledge. The majority of healthcare professionals were familiar with and advocated for adherence to regulatory requirements such as HIPAA (33.7%), GDPR (21.3%) and HITECH Act (14.4%), in making data governance much robust. Efforts were also identified in ensuring privacy and confidentiality during the storage, processing and transmission of patient data mostly by deploying methods such as authentication (58.9%), use of secured computers and software (71.2%) and using secure electronic platforms (66.0%) respectively indicating a keen attention for data stewardship and governance. About 70% of healthcare professionals attested to the regular conduct of monthly compliance audits, however, the rate of training on data stewardship was discovered to be very low (1.86/4.0).
Conclusion
There is an existence of clear policies and procedures to guide data stewardship to enhance overall information governance, however, healthcare professionals’ level of knowledge on subjects of information governance ought to be enhanced. There is a need to intensify training sessions on data quality, and regulatory requirements for health information governance to mitigate the gaps in knowledge among professionals.
1. Introduction
1.1 Background study
Every nation’s health system is designed and developed by its demands and resources. The community should always have access to high-quality services from a desirable health system. All health systems must provide individuals with high-quality care, maintain community health, lower per-capita healthcare costs, and adopt the best policies and decisions based on reliable information [1] Delivering healthcare services is the primary goal of healthcare organizations, and achieving this goal requires using health information [2]. Healthcare organisations should prioritise the management and control of health information. This goal can be accomplished by utilizing information as a strategic resource in plans and choices made at various levels of the health system [2]. According to [1], to effectively manage information and support organizational strategy as well as operational, legal, safety, and environmental needs, there is a need for information governance (IG), a complete organizational instrument utilized in the health system. In actuality, it is a strategic framework comprising the norms, procedures, roles, and standards that individuals and organizations use to create, arrange, secure, preserve, use, and discard information based on organizational goals. Information Governance focuses on developing an infrastructure made up of rules and guidelines for bettering information management in healthcare organizations [3]. American Health Information Management Association (AHIMA) defines Information Governance as a broad organizational framework for managing information during the life cycle of information, supporting the strategic, operational, legal, and statutory programs and risks in the organization [3]. According to the Association of Records Managers and Administrators (ARMA), IG is a strategic framework including standards, processes, roles, and criteria that hold organizations and individuals accountable for creating, organizing, protecting, using, and disposition of information by the objectives of the organization [4]. Health Information Governance in healthcare organizations is a critical framework that establishes centralized policies, procedures, and accountabilities for managing patient information effectively [5].
In recent decades, due to the increasing adoption of communication and information technologies in healthcare systems, many developed countries and some other countries use health information networks, which has led to growths in data generation and distribution of healthcare information [6]. The existence of various healthcare data generation centers and the requirement of communication and sharing health data between organizations have made it inevitable for related organizations to apply IG for health information management. [6]. Again, the high volume of healthcare data and the need to integrate them strongly necessitate applying the IG approach [7]. According to [8] and [9], developed countries have found out the significance of health IG; for example, in the United Kingdom, the Health and Social Care Information Centre (HSCIC) is responsible for health IG through a self-assessment process. In the healthcare sector, Information Governance focuses on data privacy, confidentiality, and the secure management of patient records and operational information. It encompasses elements like data stewardship, quality management, and compliance with regulatory requirements to ensure trusted information essential for patient engagement and treatment [10]. Establishing a comprehensive Information Governance strategy involves creating cross-functional committees, developing organization-wide strategies, enhancing existing frameworks, empowering employees through training, and striving for continuous improvement through performance metrics [11].
The implementation of effective Information Governance practices remains a pressing challenge for organizations striving to manage and safeguard patient data securely. Despite the critical importance of Information Governance in ensuring data integrity, privacy, and compliance with regulatory requirements, many healthcare organizations still struggle to establish comprehensive frameworks that address the complexities of modern healthcare data management [12]. The lack of immature IG programs in healthcare, as highlighted by recent surveys, poses significant risks to patient confidentiality, data accuracy, and organizational compliance [6]. Without robust Information Governance structures in place, healthcare organizations face heightened vulnerabilities to data breaches, regulatory penalties, and compromised patient care outcomes. [13]. The absence of standardized policies, inadequate data stewardship practices, and insufficient quality management protocols contribute to the fragmentation and inconsistency of information across healthcare systems. The urgency to address these Information Governance deficiencies is underscored by the increasing regulatory scrutiny in healthcare, such as the stringent requirements of HIPAA, which demand stringent data protection measures and accountability from organizations (Hussain Seh et al., 2020). Failure to establish robust Information Governance frameworks not only jeopardizes patient trust but also impedes the ability of healthcare providers to harness the full potential of data-driven insights for delivering high-quality care [14]. In light of these assertions, this study provides insight into the current state of information governance in healthcare, exploring the effectiveness of data stewardship, best practices for data management, compliance with regulatory requirements, and ethical considerations and potentially proposes recommendations for improving information governance. In addition to this, the study probed into healthcare professionals’ level of awareness, understanding and familiarity with these pertinent of subject areas of information governance. Significantly, the study contributes to the ever-growing scholarly literature on how to effectively implement health information governance by unearthing the strengths and weaknesses of already established information governance structures.
1.2 Study Hypotheses
To ascertain the influence of professional type and years of experience on the level of awareness, understanding and familiarity, the following hypotheses were investigated:
H1: The level of awareness and understanding about data stewardship is dependent on the professional type.
H2: The level of awareness and understanding about data stewardship is dependent on years of experience.
H3: The level of familiarity with concepts of data quality is dependent on professional type.
H4: The level of familiarity with concepts of data quality is dependent on years of experience.
H5: The level of familiarity with ethical consideration and privacy concerns is dependent on the professional type
H6: The level of familiarity with ethical consideration and privacy concerns is dependent on years of experience
2. Study methodology
2.1 Study design
A cross-section design was employed, enabling the collection of data from healthcare professionals who generate, use and manage health information in the healthcare facilities under study at a point in time from 15 July 2024 to 15 August 2024.
2.2 Study area
The study took place in three different health facilities, all located in Ghana. The Eastern Regional Hospital Koforidua (ERHK) is situated in the Eastern Region of Ghana. ERHK was established in 1926, and it is a secondary-level referral facility for the entire Eastern Region and doubles as a municipal hospital for the New Juaben Municipal with 180,000 inhabitants. The hospital uses the Lightwave health information management system to provide healthcare services to its clients. The hospital has a bed capacity of 356 and offers the following services: Obstetrics and Gynecology; Internal medicine including anti-retroviral therapy, pediatrics, surgery, dental, ophthalmology, physiotherapy, ear, nose and throat, laundry, mortuary, and primary healthcare services. ERHK is a Ghana Health Service Facility, which is a not-for-profit healthcare organization. Ledzokuku-Krowor Municipal Assembly (LEKMA) Hospital was built by the People’s Republic of China’s Government as a China-Ghana Friendly Hospital. It is a 100-bed capacity hospital that has all the units of a general hospital, including specialist services, laboratory, and radiological facilities. In addition, it has a Malaria Research Centre and Herbal Medicine Unit. The hospital’s clinical staff is made up of a team of about 45 native doctors of which 13 are specialists as well as 40 Chinese specialists in the various fields of clinical management, namely, Anaesthesiology, Cardiology, Radiography, Neurology, Local Chinese Medicine, Surgery, Paediatrics, and Obstetrics and Gynaecology among others. Over 100 trained nurses, pharmacists, and paramedical staff, about 60 midwives, 30 laboratory technicians, 35 orderlies, 50 security staff, and more. There are other staff members, namely, the Information technology department, imaging studies department, administrative offices, and many others. Cape Coast Teaching Hospital (CCTH) in the Cape Coast Metropolis of the Central Region of Ghana. The Cape Coast Teaching Hospital is one of the agencies under the Ministry of Health. With a current bed capacity of 400, the hospital is mandated to provide tertiary clinical services, serve as training for graduate and postgraduate medical programs, and undertake research into emerging health problems. It also serves as the referral facility for the health facilities in the Central, Western, and Western North regions of Ghana. It was established in August 1998 as the Central Regional Hospital and later upgraded to a Teaching Hospital status in March 2014, following the establishment of the School of Medical Science at the University of Cape Coast, Ghana. Cape Coast Teaching Hospital is also accredited for postgraduate training by the Ghana College of Physicians and Surgeons.
2.2 Study population
The study involved all healthcare professionals in the facilities under study who generate and use health information for various purposes. The category of professionals includes Doctors, Pharmacists, Health Information Officers, Medical Records Officers, Lab Technicians, Nurses, Administrators, IT Staff, and any other health personnel who create, generate, or use health information for various purposes.
2.3 Sampling technique/ procedure
A sample size of 412 was calculated from an estimated population size of 3,312 using Epi Info statistical software version 7.2.5.0 StatCalc function with a Confidence Level = 97%, Expected Frequency = 50%, Acceptable Margin of Error = 5%, Design Effect = 1.0, Clusters = 1. From a stratification based on the category of profession, a simple random sampling technique was deployed in drawing the sample from the targeted population of healthcare professionals in the various health facilities. A proportion of HCP were selected from every stratum through the randomization of staff ID, giving equal opportunity to participate in the study.
2.4 Data collection tools and techniques
A semi-structured questionnaire was provided to the intended respondents as a tool to supplement the information requested from the participants. Closed-ended questions represented a quantitative part of the study, while opened-ended questions were also intended for the qualitative aspect. Questionnaires were disseminated in two versions, hardcopy and softcopy, for the respondents’ convenience. The questionnaire had five (5) sections with sub-questions. The sections were (1). demographics, (2) effective data stewardship for health information governance, (3) strategies and practices for managing data quality, (4). compliances and regulatory requirements related to health information governance, (5) ethical considerations, and privacy concerns associated with patient data handling. Specifically, open-ended questions solicited qualitative data on current methods used for assessing and measuring data quality, data quality challenges, and the strategies and best practices deployed to address the challenges (all under section/objective 3 of the study). In addition, qualitative data were garnered under section 5, where HCP professionals gave measures/strategies employed by their organization during the storage, transmission, and processing of patient data. Ample time was given to the respondents, at least one day, so that they could carefully complete the questionnaires.
2.5 Data analysis
Data was captured, transformed and analyzed using statistical software. Close-ended questions were analyzed using STATA 15. Exploratory analysis included frequencies and percentages, descriptive statistics such as means, standard deviations, standard errors and confident intervals. Further statistical tests were conducted to ascertain the existence of association/dependency between variables using the Chi-Square test of independence. All statistical tests were deemed significant at a 5% alpha level. Open-ended questions were coded and analyzed with Qualitative Data Analysis Miner 6.0, deploying inductive thematic analysis. The analysis also involved some charts, visually presenting some results.
2.6 Ethical consideration
An ethical clearance letter with reference number [CCTHERC/EC/ 2024/118] was obtained from the Cape Coast Teaching Hospital Ethical Committee (CCTHEC). Also, permission was sought from the authorities of all the healthcare facilities involved in the study aided by the obtained ethical clearance letter and specific introductory letters. At each interview point, the purpose of the study was comprehensively explained to the participants. A verbal consent was obtained from the respondents, and they were allowed to decide whether to partake in the study. Those who consented to participate were included in the study. The respondents were assured of the confidentiality of their identity in the study. The verbal consent, which was part of the preamble of the questionnaire and approved by the IRB, was read to the respondents to decide whether to participate in the study.
3.1 Results
3.1.1 Demographic characteristics of participants
The demographic characteristics of the healthcare professionals involved in our study comprised gender distribution, age category, profession type and years of experience as indicated in Table 1 below. Of a total of 432 healthcare professionals, males were more than half the total, representing about 57.6%. The majority of the professionals were less than 40 years old, representing approximately 85%, and the 15% were 40 years or more.
[Figure omitted. See PDF.]
The top three professional types which dominated the survey were Nurses, 86(19.9%); Health Information Officers, 73(16.9%) and Medical Records Officers, 65(15.1%) of the total number of professionals recruited during the survey. Approximately 65.7% of the professionals had a working experience of 1–5 years, and about 26% had 6–10 years. Only 8.3% of them had more than 10 years.
3.1.2 How effective data stewardship for health information governance is established and implemented
The understanding of data stewardship is essential for effective health information governance in the healthcare facility. The results of the study indicated that the majority of the HCP have a moderate understanding of data stewardship, with only 15.5% having a high level of understanding. However, about 78% of the healthcare professionals confirmed that there is an existence of clear policies and procedures to guide data stewardship, but not all the professionals had a clear understanding of the said document. Moreover, as indicated in Table 2, on a scale of 1–5, the average rate of organizing training on data stewardship for healthcare professionals was as low as 1.86. Possibly, the low rate of training for healthcare professionals on data stewardship is responsible for the low average level of awareness and understanding of data stewardship (2.87/4.00) as indicated in Table 2.
[Figure omitted. See PDF.]
A further analysis of how the professional type and years of experience of healthcare professionals influence their level of awareness and understanding on the subject of data stewardship was conducted using the Chi-Square test of independence and effect size measured with Cramer’s V. At a 5% alpha level, the test was significant for type of profession (χ2 = 104.773, p < 0.001 and Cramer’s V = 0.246) as indicated on Table 3. In other words, there is a moderate relationship between profession type and data stewardship, indicating that some healthcare professionals are more concerned and understanding of data stewardship than others.
[Figure omitted. See PDF.]
3.1.3 Strategies and best practices for managing data quality for information governance initiatives
Regular conduction of data quality assessment is one of the best practices for managing and governing health information. The response from healthcare professionals during the survey indicated that data quality assessment was mostly conducted on monthly intervals, 286(66.2%). However, 19(4.4%), 26(6.02%) and 17(3.94%) also attested that data quality assessment was conducted on a weekly, quarterly and annual basis, respectively.
The professionals’ familiarity with the concept of data quality which is imperative for effective information governance was an average of 2.73[2.62–2.84] on a scale of 1–4 which implies a vast room for improvement as indicated in Table 4. Years of experience are not a significant influencer of the level of familiarity with the concept of data quality in the study, hence, failing to accept hypothesis H4.
[Figure omitted. See PDF.]
In assessing and measuring the quality of data in the various healthcare facilities, the current method that is mostly deployed for this purpose, according to the healthcare professionals, was the conduction of data quality audits and assessments in various units, 34.8%. The organization of monthly data validation meetings was also a common methodology used for assessing the quality of data, as attested by the HCP (30.1%). Moreover, the use of Computer-aided data quality checks was also found to be a method used for measuring and assessing the quality of data, attested by 22.0% of HCP. With the computer-automated data quality checking, validation rules have already been fed into the backend of the computer software, allowing data to be validated when entered. Peer reviews, supervision and monitoring were also methods used by sometimes to assess the quality of data generated in the healthcare facilities, however, they were rarely used as attested by only 13.1% of healthcare professionals. Some of the extracts of the responses are provided below:
“…we conduct data quality audits and assessment on a regular basis to check data quality”- Stated by a Doctor
“The facility organizes data quality assessment and audits as means of assessing data quality. It is mostly led by the health information officers” – Stated by a Medical Laboratory Technician.
“The District Health Information Management System (DHIMS) that we use has data quality checks installed that help monitor the quality of data captured”- Stated by a Health Information Officer
“The electronic health records we use in the facility has in-built data quality checks that ensures that valid data is entered into a field”. – Stated by a Midwife
“we do manual data quality checks and audits”- Stated by a Medical Records Officer.
“…data validation meetings are organized every month for auditing and validating data generated in the various units”, – Stated by a Midwife.
“Data quality validation which is organized by the hospital on every month to reflect on data inconsistency before final submissions are done by the health information unit.’ – Stated by a Doctor
“In our facility, we do peer reviews, regular supervisions and monitoring spearheaded by the health information officers to ensure quality of data collection and management” – Stated by a Health Information Officer.
The above quoted statements are some prominent responses stated by the study participants, indicating the kind of methods used in their respective healthcare facilities for assessing the quality of data generated from various point of care. These quotes reflect the caliber of qualitative data summarized and presented in Fig 1. Healthcare professionals acknowledged the combinations of these methods being used for assessing data quality.
[Figure omitted. See PDF.]
Various challenges were identified to be hampering efforts towards ensuring quality data in the healthcare facilities. These impediments were categorized under four (4) main themes as displayed on table 5: (1)the use of Poor data collection methods (dominated by “data capturing errors and inconsistency”, 80(22.4%); (2)Inadequate resources (with “less number of staffs”, 87(24.4%); “limited computer systems, 34(9.5%)”; “Poor Internet connectivity, 16(4.5%)” been the top three sub-themes) and “others, 24(6.7%)”; (3)Inadequate competency (where “low level of knowledge and staff negligence”, 57(16.0%) and, “irregular staffs training”, 21(5.9%) were the most dominated sub-themes; (4)Behavioral factors consisting of “resistance to change”, 4(1.1%) and, “delay in reporting”, 3(0.8%). Some of the extracts from the responses by the participants regarding challenges are provided below;
[Figure omitted. See PDF.]
“Not enough staff in the health information department and also inadequate computers” – Stated by a Medical Records Officer.
“…less knowledge on data quality concept in some profession especially nurses” – Stated by a Doctor.
“Inadequate training on data quality among some profession, e.g., nurses, doctors and lab technicians.” – Stated by a Medical Records Officer
“There is poor internet connectivity to save data to cloud for storage and unstandardized data collection forms” – Stated by a Physician Assistant.
“Poor adherence to data collection and reporting guidelines, and resistance to change and cultural barriers” – Stated by a Laboratory Technician
Underscoring the kind of impediments to ensuring data quality in the various healthcare facilities, the series of quoted statements reflects some of the salient responses captured from the participants during the study. Various types of professionals admitted to the existence of challenges, making optimal data-quality a far reached reality in their facilities.
In addressing the challenges impeding optimal data quality in healthcare facilities, six interconnected strategies were proposed by the HCP which were categorized under three main themes shown in Table 6: 1) Resources provision (more staff recruitment, 26.6%; enhancing EHR systems, 13.8% and improving internet and power supply, 5.2%); 2) Competency enhancement (education and training, 26.9%); 3) Effective monitoring and evaluation (regular data audit and supervision, 25.2% and enhancing information governance structures, 2.4%). Samples of the proposed strategies and best practices suggested by the participants are quoted below:
[Figure omitted. See PDF.]
“Adopting electronic devices in most wards to improve data collection”, – Stated by a Medical Records Officer
“Organizing training and workshop for health information officers and other healthcare professionals”, – Stated by a Nurse
“Efforts to provide necessary resources and provide more staffs in various departments” – Stated by a Doctor.
“Educating some profession on data quality and its importance as well as addressing internet and power supply issues” – Stated by a Midwife
“Regularly check all patient data to avoid inconsistency and make sure the patient data is accurately captured” – Stated by an IT Officer.
Epitomizing strategies and bold solutions suggested by healthcare professionals, the quoted statement above are responses from the study participants. Reflecting from the quoted statement, professionals acknowledged major strategies and best practices towards the attainment of optimal data quality in our healthcare facility categorized into themes on Table 6.
3.1.4 Compliances and regulatory requirements related to health information governance
Of the 432 healthcare professionals involved in the study, 282(65.28%) attested to be familiar with key compliances and regulatory requirements related to health information governance. In addition to this, 133(30.79%) indicated being partially aware of these compliance and regulatory requirements while 17(3.94) admitted having no idea about these compliances and regulatory requirements.
Upon further interrogations, the HCP, on a multiple selection scale, identified the specific regulatory requirements or standards that when adhered to in the facility would enhance the governance of health information as indicated in Table 7. HIPAA, GDPR, FDA and HITECH Act were the regulatory requirements that were mostly advocated for with 361(33.7%), 228(21.3%), 185(17.3%) and 154(14.4%) proportions, respectively. Staying updated on these regulatory requirements, the mostly used methods in the healthcare facilities were the organization of regular training programs, 313(42.2%); internal compliance audits 179(24.1%) and, reading of newsletters or industry publications, 102(13.75%). In cases when there are data breaches, 82.6% of the HCP attested that there is an existing procedure for managing and reporting such suitable, while 3.2% admitted to be not sure of the existence of such procedure.
[Figure omitted. See PDF.]
On the frequency at which compliance audits are conducted to the adherence to health information governance regulation, the healthcare professionals during the survey indicated that such compliance audits are conducted on a monthly basis, 303(70.1%). However, 37(8.6%), 23(5.3%) and 21(4.9%) also claimed such audits are sometimes conducted quarterly, weekly and annually respectively [Table 7].
3.1.5 Ethical considerations and privacy concerns associated with health data handling
The results of the study indicated that an IT Department and Ethics committee of the healthcare facilities are mostly responsible for overseeing and ensuring compliance with ethical guidelines and privacy regulations related to patient data handling with the following frequency and percentages 160(37.04%) and 159(36.81%). However, it was also believed that the efforts of these units in ensuring compliance with regulatory requirements are also rallied behind by the Management, 68(15.74%) and Privacy officers,45(10.42%).
Getting familiarized with ethical considerations and privacy associated with handling the sensitive data of patients as a healthcare professional is very crucial for effective information governance. In Table 8, measuring with a 1–5 familiarity index, the average level of familiarity with ethics and matters of privacy among the healthcare professionals during the survey was 3.13[3.02–3.25] with a standard error of 0.059.
[Figure omitted. See PDF.]
Under three main facets (storage, processing & transmission), the measures deployed to ensure optimal privacy and confidentiality were probed into during the study. As displayed in Fig 2, during the storage of patient data five main different measures are deployed by healthcare professionals to ensure privacy and confidentiality of which the top three were authentication methods (use of passwords, biometric locks and pin codes), representing 58.9% of the total; physically securing the storage area, 12.5% and, using role-based access to stored patient data also representing 11.9%. On the account of processing the patient data, privacy and confidentiality are ensured by using secured computers and software for the processing, 71.2%; mounting effective supervision during processing, 16.2% and, also by making sure that data processing I executed by qualified personnel, 12.6%. During data transmission of patients’ data within the facility or with a third-party privacy and confidentiality are ensured mainly by using secured electronic platforms, 66.0%. Also, end-to-end encryption is deployed in addition to firewall technologies to ensure that the transmitted data doesn’t fall into an external network with percentages of 28.8% and 5.2% respectively. In addition to these, HCP confirmed that explicit consent is sought from patients or data subjects before using data for other purposes rather than care delivery, 315(73.3%). However, 29(6.7%) were found to be unaware of sure informed consent is sought.
[Figure omitted. See PDF.]
3.2 Discussion
3.2.1 Introduction and socio-demographic characteristics
The study probed into how effective data stewardship for health information governance is established and implemented in the arena of health. In conformity with the motive of the study, we also explored the best practices and strategies for managing health information, knowledge and adherence to compliance and regulatory requirements and also the level of understanding and practices related to privacy and confidentiality when handling patient data.
From a total of 432 healthcare professionals dominated by males, we garnered the requisite data geared towards answering the objective of the study. The recruitment encompassed nine (9) different professional types with nurses, health information officers and medical records officers being the top three dominant professional types within the survey. More than half of the recruited professionals were between the ages of 20–39 years and with approximately 5 years of average working experience (Table 1).
3.2.2 Effectiveness of the establishment and implementation of data stewardship for health information governance
Data stewardship in health information governance is a critical aspect of managing and safeguarding sensitive health data through proper management, oversight and accountability of data assets, and hence cannot be compromised [15–17]. With a clear understanding of data stewardship, the establishment of trust, adherence to regulatory requirements and maintaining data quality would be enhanced. Effective data stewardship practices not only ensure the accuracy and completeness of health data but also facilitate data sharing, interoperability, and decision-making processes within healthcare organizations [18–20]. The findings of this study imply that the majority of healthcare professionals have a moderate understanding of data stewardship and its related subjects (2.87/4.0) Unlike the findings of [21] & that of the findings of [22] in a study conducted in East Africa, where healthcare professionals showed a better understanding of data stewardship, this study’s report suggests that only a few of the professionals have a clear understanding of subjects pertaining to data stewardship prerequisite for information governance. This echoes the findings of a study conducted in Keyan hospital which underscored major gaps in conjunction with the practice of advanced data stewardship [23]. However, the majority of the healthcare professionals during the study attested to the existence of clear policies and procedures guiding data stewardship, indicating a solid foundation for health information governance, as acknowledged by various scholars [24–26]. However, many of the healthcare lack a clear understanding of the said documentation, conflicting with the findings of [27]. The presence of a small fraction of respondents who believe no policies or procedures exist is particularly troubling, diverging from the findings of [28] where professionals had great levels of awareness. This could indicate either a complete lack of awareness or a perception that existing policies are ineffective or unenforced. For effective information governance in health, data stewardship should be a pivotable subject of interest [29].
Poor understanding of data stewardship according to our study, can be linked to the low rate of training sessions for professionals on data stewardship as unveiled in the study (1.86/4.0). In conformity with some obligations of healthcare professionals as posited by [30–32] in enhancing information governance, regular training enhances knowledge of effective data collection methods, storage and management of sensitive patient data. Findings from this study indicate that the rate at which training sessions are mounted for healthcare professionals is very low which consequently limits their understanding of such pertinent subject, antagonistic to the findings of [33] and [34] which indicated that regular training section on data management exceeds average. This unfortunate incidence of training deficit can be associated with the fact that, management and leadership of healthcare organizations trivialize data stewardship and data quality, hence reluctant to invest into training and workshops within this arena. This mirrors [26] findings on resource constraints in African healthcare settings, underscoring the need for sufficient allocations. Consequently, the quality of clinical decision-making, management level decision-making and the general quality of care would be adversely affected because these process hinge on quality data. In furtherance, our study revealed that the level of understanding and awareness of data stewardship practices is dependent on the professional type of the health worker. This study implies that the type of profession of a health worker has a very significant influence on their level of awareness and understanding of data stewardship as a subject of interest, affirming hypothesis 1 and failing to accept hypothesis 2. This also goes on to affirm the role-based understanding and awareness differences postulated by [35]. Similarly, our findings on this tangent mirrors other prior studies which highlighted the variation in knowledge on data stewardship been linked to professional type or role [36–38]. This may be due to the fact that some professional types such as health information officers and medical records officers might have specialized in such areas and hence, would be of good standing than those who did not, in matters relating to data stewardship. In the sense that data is generated and used by almost all healthcare professionals, it would be a step in the right direction when the level of awareness and understanding is prioritized and enhanced through regular organization of training, as postulated by [5]. Tailoring educational programs to meet the specific needs of different professions can help bridge these gaps and promote a more uniform understanding of health information governance across the organization.
3.2.3 Strategies and best practices for managing data quality for information governance initiatives
As posited in a scholarly article by [39], data quality is elucidated as “the extent to which data satisfies the prerequisites of its designated utility,” The concept of data quality pertains to the precision, comprehensiveness, uniformity, and dependability of data contained in a dataset or database. Another exploration by [34] delineates data quality as “the degree to which data is suitable for its intended functions concerning accuracy, timeliness, completeness, uniformity, and pertinence.” This comprehensive explanation accentuates the various facets of data quality that must be taken into account to guarantee its efficacy. It is of great importance that healthcare professionals become more familiar with the concepts of data quality and how significant it is for proper information governance [40,41]. Referencing the findings of this study, healthcare professionals’ familiarity with the metrics of data quality was moderate and ought to be enhanced. The average level of familiarity with the concepts of data quality, which cannot be overlooked when craving for effective information governance as put forward by [42] was not encouraging among healthcare professionals during the survey. This result aligns with the findings of many other prior studies where familiarity and understanding of data quality were also identified to be challenged [43,44]. However, these results align with that of [45] who suggested that a basic understanding of data quality is essential for information governance. In the absence of robust data quality protocols, organizations run the risk of jeopardizing the credibility of their information, impeding operational efficiency, and eroding stakeholder confidence in the data employed for critical decision-making. As a ripple effect, the understanding of data quality metrics, leading suboptimal data quality can result huge financial lost, reduced productivity, misguided strategies and decisions as well as eroding stakeholders trust [46–48].
In light of this, our study’s results concord with the idea of investing in data quality initiatives as put forward by [49]. In furtherance, a statistical test indicated that the level of familiarity with the concept of data quality is significantly influenced by the type of profession (χ2 = 18.364, p = 0.031, Cramer’s V = 0.206). Thus, there is an existence of a moderately significant relationship between profession and concept of data quality, leading to the affirmation of H3. Thus, understanding and getting familiarized with the concept of data quality was also seen to be dependent on the type of profession. Professionals who belong to departments which are directly responsible for data management are much more likely to be of greater understanding. This is an indication that at least conscious efforts are being made towards ensuring effective information governance in departments/units that are mainly responsible for data management, confirming the findings of [50].
As part of the conscious efforts geared towards augmenting the quality of data generated in the landscape of health, regularly conducting data quality assessments is very important. Mostly monthly, data quality assessments and audits are conducted in various healthcare, as indicated by the results of this study. As acknowledged by [51], these monthly assessments allow organizations to maintain a consistent pulse on their data quality, enabling them to identify and address issues promptly, indicating a great approach to information governance. Aside, from the monthly data quality assessments, various departments and organizations as a whole might organize assessments on a weekly, bi-weekly, quarterly or annual basis depending on their peculiar protocols. Currently, our study identified Data Quality Assessments and Audits as a primary method for evaluating data quality. This approach aligns with the continuous monitoring and assessment strategies emphasized by [51]. Regular assessments allow healthcare organizations to systematically examine their data assets, identifying issues such as inaccuracies, inconsistencies, or incomplete information. Data Validation emerged as another significant method used by healthcare professionals. This aligns with the data quality rules and validation techniques discussed by [52]. Data validation processes help verify that information meets specific criteria or standards before it is used or entered into a system. This method is particularly effective in catching errors at the point of entry, thereby maintaining the overall quality of the data in the organization’s systems. Electronically, the use of health information systems such as District Health Information Management systems (DHIMS) and Lightwave Health Information Management System (LHIMS) was also noted as a method for measuring and assessing the quality of data during capturing with the systems. These systems have a knowledge-based fed with predefined validation rules that trigger an alert when inconsistencies are identified during data entry.
Hampering the attainment of quality data in facilities are factors such as data capturing errors, limited number of staff and computer systems, low level of knowledge due to irregular training, resistance to changes, etc. as identified in this study (Table 4). This calls for proper restructuring of data collection methods, provision of resources and intensifying training sessions for effective information governance, parallel to the assertions of [53]. Conforming with the ideology of [54], there is a need for enhancing and promoting data literacy through training and education and, also intensifying regular data audits, monitoring and supervision for an early identification of errors and rectification as acknowledged by [55].
3.2.4 Compliances and regulatory requirements related to health information governance
According to the reports of this survey, a considerably higher proportion of healthcare professionals had great levels of familiarity with compliance and regulatory requirements about information governance, which is unparallel to the findings of [43]. This widespread awareness aligns with the increasing emphasis on compliance in healthcare settings, as noted by other scholars [22,56], who highlight the growing focus on regulatory requirements among healthcare professionals, driven by the need to protect patient privacy and improve healthcare delivery quality. This result is highly positive because, compliance with regulatory requirements, such as data protection laws, industry standards and other data regulatory frameworks, is a critical aspect of information governance, as non-compliance can result in legal and financial consequences [16,57]. However, it’s worth noting that some portion of healthcare professionals only admitted to being partially familiar or not familiar with these requirements. This suggests that while overall awareness is high, there may still be gaps in knowledge that need to be addressed, resonating with the finding of a survey of Ghanaian public hospitals, where inconsistent knowledge of regulatory requirements was identified as a potential barrier to effective information governance [58].
Specifically, healthcare professionals during the survey mostly advocated for adherence to the Health Insurance Portability and Accountability Act (HIPAA) which seeks to provide significant standards for protecting sensitive patient data as highlighted by [59]. In addition to this, another regulatory standard advocated by healthcare professionals during the survey was the General Data Protection Regulation (GDPR). As put forward by [60–62] GDPR highlights the importance of adopting a risk-based approach to ensure data identifiability and processing proportionality by incorporating technological safeguards. Again, the Health Information Technology for Economic and Clinical Health (HITECH) Act, which advocates for the utilization and meaningful integration of electronic health records (EHRs) and other health technology solutions as recognized by [63–65] was also highly advocated by the healthcare professionals. The high levels of advocacy for these compliance and regulatory requirements present a vivid impression of how significant the professionals deem these standards, and hence how their adherence can improve information governance in general. The results of this study portray that regular training programs, internally conducted compliance audits, and reading of newsletters and industrial publications are the major methods through which healthcare professionals get updated on compliance and regulatory requirements. In addition to these, the study results provide a clear indication of how robust health information governance is established. This is evident in the regular conduction of monthly compliance audits to ascertain the adherence to health information governance regulation as attested by healthcare recruited during the survey.
3.2.5 Ethical considerations and privacy concerns associated with health data handling
Ethical considerations are paramount in the contemporary healthcare domain, as the management of patient data gives rise to notable ethical and privacy issues. The widespread utilization of electronic health records and digital health technologies has facilitated the gathering and dissemination of patient data, albeit escalating the potential for unauthorized access and misuse [66]. Healthcare entities and providers are then tasked with delicately balancing the utilization of patient data to enhance care and safeguard patient confidentiality [66]. In order not to compromise the privacy and confidentiality of sensitive patient data, healthcare professionals ought to be well-vested in ethical considerations and privacy concerns associated with handling patient data. The study‘s findings suggest that the majority of healthcare professionals are quite familiar with these pertinent concerns, however, the overall average on a 1 to 5 familiarity index was seen as moderate. Although, this implies a growing recognition of the importance of ethical consideration in data handling in healthcare, however, there is a need to invest efforts in enhancing the knowledge level of healthcare professionals. A statistical test at a 5% significance level indicated that the type of profession of health workers has a significant influence or association on their level of familiarity with ethical considerations and privacy concerns associated with handling patient data (χ2=43.427, p<0.001, Cramer’s V=0.317). In simple terms, this suggests that there is a significantly moderate relationship between profession, ethical considerations and privacy. As an implication, we accept H5 and fail to accept H6. As recounted in prior results session, profession type has a great influence on how familiar a healthcare professional would be with patient data privacy and confidentiality. Similarly, since some professionals such as health information officers have the direct mandate of managing patients’ data, such professionals are likely to have much understanding and hence more familiarized with subjects of privacy and confidentiality when handling patients’ data. As [67] argue, all healthcare professionals must adhere to ethical guidelines and regulations to maintain trust and integrity in their practice, hence there is the need to improve the level of familiarity as well.
During the storage of patient health data, secured authentication (use of a password, biometric verification, pin codes, etc.), physically securing the storage room and employing role-based assessment were some of the measures deployed in ensuring privacy and confidentiality as identified in our study. These align with what was put forward by [68,69] where they acknowledge the use of various authentication methods as a secured means of storing patient data. The use of secured computers and software during data processing was the major means by which privacy and confidentiality were ensured. Coupled with effective supervision and the use of qualified personnel, data processing is void of breach of privacy and confidentiality, affirming the assertion of [56] which advocates that only competent professionals should be allowed to process data, ensuring data privacy and confidentiality. Predominately, deploying secured electronic platforms during data transmission is data privacy and confidentiality are preserved. These secured platforms such as DHIMS, LHIMS and secured email systems use end-to-end encryption and firewall technologies, preventing unauthorized networks from tapping into patient data when being transmitted as postulated by [70,71]. These findings indicate organizations are taking steps to protect patient data privacy and confidentiality. As part of the study, we discovered that informed consent was sought from data subjects when intended to use their data beyond direct healthcare delivery, re-emphasizing healthcare professionals’ deep regard for privacy and confidentiality.
3.2.6 Limitations
Data was collected from three different healthcare facilities, however, the self-reported data and rating deployed in the study could create significant bias in the general impression and insights derived from the study. In future studies, triangulate data sourcing would be used, including self-reports, reports from administration and direct observation studies to mitigate such biases in the study. Again, the study area includes only three (3) regions in Ghana, limiting its impressions from being generalized for all healthcare organizations, although results of the study are evident in prior studies emanating from different jurisdictions. Going forward, efforts would be geared towards including diverse sampling, taking into consideration multiple regions and cultural contexts. Also, rigorous comparative analysis would be done to ascertain the differences and similarities between various studies from different regions around the globe. Furthermore, the cross-sectional design permits the reliance on data collected in a short period, which is subjected to changes over time. Hence, the study only warrants temporal associations among variables. Addressing this, a longitudinal study is needed to validate cross-sectional findings in subsequent studies. Also, more advanced statistical analysis such as structural equation modelling would be incorporated in future studies to explore much detailed directional relationships between variables.
4.1 Conclusion
The results of the study indicate that healthcare organizations have data governance policies established, however, the understanding of these policies and procedures was moderate among professionals, signifying urgent education on these policies. Poor investment in training on data stewardship significantly limits healthcare professionals’ level of understanding. Management and leadership poor posture on data stewardship significantly leads to less attention on data stewardship, hence, low rate of training on these pertinent issues which significantly affects the quality of care delivery and decision-making processes in healthcare facilities. Addressing the unfavorably stance of management and leadership on data-related issues would be a step in the right direction, enabling sufficient investment into ensuring data quality. The level of awareness and understanding on matters of data stewardship among some profession types was generally low and should be enhanced; some categories of professionals have much understanding of data stewardship than others. This skewness in knowledge affects the quality of data stewardship, given that, almost all healthcare professionals handle data in one way or the other. These knowledge gap can be mitigated through regular data workshops targeted at professionals who lack much understanding on data stewardship and identified in this study.
Healthcare organizations have implemented best practices to ensure data quality, enabling identification and early correction of data inconsistencies. However, these efforts are challenged by limited technological advancement, shortage of workforce, data capturing errors, low competencies and infrastructure issues such unstable internet and power supply. The fragile nature of digital health technology infrastructure affects the quality of data attained. Understanding of data quality concepts was generally low and varied by profession type. Whiles there was great recognition of the importance of regulatory requirements in shaping health information governance, knowledge of ethical consideration when handling patient data varied among professionals. Despite these gaps, calculated efforts are geared towards ensuring data privacy and confidentiality during all stages of data handling reflecting a positive posture for health information governance. The great variation in terms of level of awareness, understanding and knowledge existing among different professional types on these crucial subjects of health information governance warrants the need for improvement to strengthen the governance of health information in healthcare organizations.
On a global health settings level, the findings of this study underscore the urgent need for conscious efforts to enhance data stewardship in various healthcare settings. There is the need for a global standardized training and education on data stewardship to improve the understanding of professionals. International level organizations such as World Health Organization (WHO) and Healthcare Information and Management Systems Society (HIMSS) could develop more rounded guidelines, ensuring that healthcare professionals are consistently and effectively educated on data stewardship. The global health systems must prioritize workforce capacity building targeted at ensuring high-quality data management in healthcare. This will reduce the huge knowledge gap among different healthcare professionals to ensure that all healthcare professionals, irrespective of their roles, handle data adequately. Furthermore, there is the need for internationally collaborated efforts to strengthen digital health infrastructure, addressing challenges such as unstable internet and power supply in low-resource areas. Moreover, the findings of the study necessitate the need for an internationally harmonized information governance systems ensuring interoperability and secure information exchange between countries. Addressing these concerns on the global level would ultimately revamp patient care and health outcomes worldwide.
4.2 Recommendations
To enhance the effectiveness of information governance, it is recommended based on this study that:
Healthcare organization should prioritize training sessions on how to ensure data quality and proper data stewardship should be organized regularly to bridge the knowledge gap among some professionals. Special emphasize should be placed on how to ensure confidentiality, privacy and avert data breaches in this current computer dominated healthcare, revamping the governance of data. The training sessions should be professionally centered, giving emphasis to each professional’s type to easily identify their weaknesses and improve on them. Regular training can also be used as a means for updating healthcare professionals on regulatory requirements.
Management and leadership of healthcare organizations should develop clear and concise data governance policies that outline roles, responsibilities, and procedures for data collection, storage, access, and sharing. Ensuring the compliances of these policies, policy-makers should deploy dedicated committee that would enforce that healthcare professionals toe the line pertaining to data governance. Also, by deploying effective communication channels, hospital management should make data governance policies and procedures available and comprehensive enough to all healthcare professionals.
Policymakers should establish a schedule for reviewing and updating data governance policies to reflect changes in regulations, technology, and organizational practices from the national level, transcending to the organizational level. Again, routine audits of data management practices should be implemented to identify weaknesses and areas for improvement using the findings of various studies as guide to inform training and policy updates, ensuring the organization continuously evolves in its data governance efforts.
Researchers should focus on delving into studies to unveil the elapses in knowledge among healthcare professionals on data stewardship and governance by employing longitudinal and experimental designs involving multiple regions and jurisdiction to warrant deeply rooted conclusions. As a result, this would help streamline training sessions to a targeted profession type, fast-tracking data governance improvement.
Acknowledgments
We thank the management and staff of the participatory hospitals for allowing us to undertake this study and are grateful to all individuals who contributed to its success.
References
1. 1. Rouzbahani F, Rabiei R, Asadi F, Moghaddasi H, Emami H. Information governance program: a review of applications in healthcare. Arch Adv Biosci. 2019;20(1):10.
* View Article
* Google Scholar
2. 2. Winter JS, Davidson E. Big data governance of personal health information and challenges to contextual integrity. Inf Soc. 2018;35(1):36–51.
* View Article
* Google Scholar
3. 3. Al-Badi A, Tarhini A. Exploring big data governance frameworks. Elsevier. https://www.sciencedirect.com/science/article/pii/S1877050918318313 2018. Accessed 2024 March 13.
4. 4. Tse D, Chow C. The challenges of big data governance in healthcare. explore. Ieee. https://ieeexplore.ieee.org/abstract/document/8456108/. 2018. Accessed 2024 March 12.
* View Article
* Google Scholar
5. 5. O’Hara K. Data trusts: Ethics, architecture, and governance for trustworthy data stewardship. 2019. https://eprints.soton.ac.uk/428276
* View Article
* Google Scholar
6. 6. Kostick-Quenet K. Ethical hazards of health data governance in the metaverse. https://www.nature.com/articles/s42256-023-00658-w. 2023. Accessed 2024 March 13.
* View Article
* Google Scholar
7. 7. Mikalef P, Boura M, Lekakos G. The role of information governance in big data analytics-driven innovation. Elsevier. https://www.sciencedirect.com/science/article/pii/S0378720620302998 2020. Accessed 2024 March 13.
8. 8. Kwan H, Riley M, Prasad N, Robinson K. An investigation of the status and maturity of hospitals’ health information governance in Victoria, Australia. Health Inf Manag. 2022;51(2):89–97. pmid:32662675
* View Article
* PubMed/NCBI
* Google Scholar
9. 9. Monah SR, Wagner MW, Biswas A, Khalvati F, Erdman LE, Amirabadi A, et al. Data governance functions to support responsible data stewardship in pediatric radiology research studies using artificial intelligence. Pediatr Radiol. 2022;52(11):2111–9.
* View Article
* Google Scholar
10. 10. Iorio CD, Carinci F, Oderkirk J. Assessing data protection and governance in health information systems: a novel methodology of privacy and ethics impact and performance assessment (PEIPA). J Med Ethics. 2021. https://jme.bmj.com/content/47/12/e23.abstract
* View Article
* Google Scholar
11. 11. Lee RR, McDonagh JE, Farre A, Peters S, Cordingley L, Rapley T. Data protection, information governance and the potential erosion of ethnographic methods in health care?. Sociol Health Illn. 2022;44(1):211–7. pmid:34811764
* View Article
* PubMed/NCBI
* Google Scholar
12. 12. Clohessy T, English M. Bridging the gaps in information systems: a threshold concepts and troublesome knowledge perspective. Ir Educ Stud. 2022;43(1):141–65.
* View Article
* Google Scholar
13. 13. Madden GR, Weinstein RA, Sifri CD. Diagnostic stewardship for healthcare-associated infections: Opportunities and challenges to safely reduce test use. Infect Control Hosp Epidemiol. 2018;39(2):214–8. pmid:29331159
* View Article
* PubMed/NCBI
* Google Scholar
14. 14. Seh AH, Zarour M, Alenezi M, Sarkar AK, Agrawal A, Kumar R, et al. Healthcare data breaches: Insights and implications. Healthcare (Basel). 2020;8(2):133. pmid:32414183
* View Article
* PubMed/NCBI
* Google Scholar
15. 15. Inau E, Sack J. Initiatives, concepts, and implementation practices of FAIR (findable, accessible, interoperable, and reusable) data principles in health data stewardship. Researchprotocols.Org. https://www.researchprotocols.org/2021/2/e22505/. 2021. Accessed 2024 May 14.
* View Article
* Google Scholar
16. 16. Nguyen TH, Nguyen TT, Zhang J. A data stewardship framework and methodology for health data governance. Int J Environ Res Public Health. 2019;16(23):4634.
* View Article
* Google Scholar
17. 17. Mew JRC, Muller C, Lehmann J, Barnes T. Data stewardship: A matter of organization and governance. JeSLIB. 2019;8(2):e1167.
* View Article
* Google Scholar
18. 18. Kascak LR, Lebbon AR, Song H, Sullivan CJ, Fox C. Data quality management: A qualitative study of strategies to improve health data quality. Int J Med Inform. 2021;152:104496.
* View Article
* Google Scholar
19. 19. Algharai AM, Alotaibi WA, Alharthi MA, Aljuaid HA, Alzahrani AS, Alshehri MA, et al. The impact of health information governance on the quality of healthcare services. Inform Med Unlocked. 2022;29:100889.
* View Article
* Google Scholar
20. 20. Kruse CS, Goswamy R, Raval YJ, Marawi S. Challenges and opportunities of big data in health care: A systematic review. JMIR Med Inform. 2018;4(4):e51.
* View Article
* Google Scholar
21. 21. Brinkerhoff DW, Cross HE, Sharma S, Williamson T. Stewardship and health systems strengthening: An overview. Public Adm Dev. 2019;39(1):4–10.
* View Article
* Google Scholar
22. 22. Kagoya HR, Andia Biraro IA, Ejuu G, Musoke P, Nabukeera-Barungi N, Sendagala S, et al. Progress, opportunities and challenges for electronic health information systems in resource limited settings: A review of the literature. Afr Eval J. 2022;10.
* View Article
* Google Scholar
23. 23. Onyoni GO, Obimbo MM, Wanzala P. Gaps in health data stewardship: A study of health information management practices in Kenya. J Health Inform Afr. 2019;6(1):1–9.
* View Article
* Google Scholar
24. 24. Dagliati A, Malovini A, Tibollo V, Bellazzi R. Health informatics and EHR to support clinical research in the COVID-19 pandemic: an overview. Brief Bioinform. 2021;22(2):812.
* View Article
* Google Scholar
25. 25. Mollah MB, Humaun Kabir MM, Hasan MK. Digital health data governance in developing countries: A Bangladesh perspective. Int Technol Manag Rev. 2020;9(1):108–23.
* View Article
* Google Scholar
26. 26. Green BF. Data stewardship: A practical guide for the healthcare professional. Springer Publishing Company. 2023.
27. 27. Jansen P, van Den Berg L, van Overveld P, Boiten JW. Research data stewardship for healthcare professionals. Fundamentals of clinical data science, library.Oapen.Org. https://library.oapen.org/bitstream/handle/20.500.12657/22918/1007243.pdf?sequence=1#page=42. 2019. Accessed 2024 May 14.
28. 28. Pagliari C, Smith A, Johnson B, Williams D. Information governance in healthcare: A comprehensive analysis. J Health Inform Manag. 2019;35(2).
* View Article
* Google Scholar
29. 29. Wendelborn C, Anger M. What is data stewardship? Towards a comprehensive understanding. Elsevier. https://www.sciencedirect.com/science/article/pii/S1532046423000588. 2023. Accessed 2024 May 14.
30. 30. Chan BTB, Veillard JHM, Cowling K, Klazinga NS, Brown AD, Leatherman S. Stewardship of quality of care in health systems: Core functions, common pitfalls, and potential solutions. Wiley Online Library. 2018;39(1):34–46.
* View Article
* Google Scholar
31. 31. Nasiri T, Takian A, health SY-I. Stewardship in health, designing a multi-layer meta model: A review article. ncbi.Nlm.Nih.Gov. 2019. https://www.ncbi.nlm.nih.gov/pmc/articles/PMC6500540/
* View Article
* Google Scholar
32. 32. Bae JP, Chen YF, Rohani VA, Longmann CL. Data quality improvement in electronic health records. J Ambul Care Manage. 2022;45(3):195–206.
* View Article
* Google Scholar
33. 33. Adeya G, Nzanzu A, Rehema K, Weitzman ER. Challenges and opportunities for health data quality management in resource-constrained settings: A systematic review. J Glob Health Rep. 2022;6:e2022002.
* View Article
* Google Scholar
34. 34. Smith J, Johnson A, Williams S, Brown M. Health information governance: Understanding the dynamics. J Healthc Inf Manage. 2019;33(1).
* View Article
* Google Scholar
35. 35. de Carvalho Junior MA, Bandiera-Paiva P. Health information system role-based access control current security trends and challenges. J Healthc Eng. 2018;2018:6510249. pmid:29670743
* View Article
* PubMed/NCBI
* Google Scholar
36. 36. Bossen C, Bertelsen PS. Digital health care and data work: Who are the data professionals?. Health Inf Manag. 2024;53(3):243–51. pmid:37491822
* View Article
* PubMed/NCBI
* Google Scholar
37. 37. Karasneh R, Al-Mistarehi A-H, Al-Azzam S, Abuhammad S, Muflih SM, Hawamdeh S, et al. Physicians’ knowledge, perceptions, and attitudes related to patient confidentiality and data sharing. Int J Gen Med. 2021;14:721–31. pmid:33688243
* View Article
* PubMed/NCBI
* Google Scholar
38. 38. Whittaker M, Hodge N, Mares RE, Rodney A. Preparing for the data revolution: identifying minimum health information competencies among the health workforce. Hum Resour Health. 2015;13:17. pmid:25889677
* View Article
* PubMed/NCBI
* Google Scholar
39. 39. Wang Y, Kung L, change TB-T. Big data analytics: Understanding its capabilities and potential benefits for healthcare organizations. Forecast Soc. 2018.
* View Article
* Google Scholar
40. 40. Mashoufi M, Ayatollahi H, Khorasani-Zavareh D, Talebi Azad Boni T. Data quality in health care: Main concepts and assessment methodologies. Methods Inf Med. 2023;62(1–02):5–18. pmid:36716776
* View Article
* PubMed/NCBI
* Google Scholar
41. 41. American Health Information Management Association AHIMA. Data Quality and Integrity Advocacy. https://www.ahima.org/advocacy/policy-statements/data-quality-and-integrity. 2024. Accessed 2025 March 12.
* View Article
* Google Scholar
42. 42. AbuHalimeh A. Improving data quality in clinical research informatics tools. Front Big Data. 2022;5:871897. pmid:35574572
* View Article
* PubMed/NCBI
* Google Scholar
43. 43. Smith ME, Steinbart EJ, Dwyer C. Data privacy policies differ from developed and developing nations. J Glob Inf Technol Manag. 2020;23(1):45–63.
* View Article
* Google Scholar
44. 44. Zhang Y, Callaghan-Koru JA, Koru G. The challenges and opportunities of continuous data quality improvement for healthcare administration data. JAMIA Open. 2024;7(3):ooae058. pmid:39091510
* View Article
* PubMed/NCBI
* Google Scholar
45. 45. Khatri V, Brown CV. Designing data governance. Commun ACM. 2010;53(1):148–52.
* View Article
* Google Scholar
46. 46. Khong I, Aprila Yusuf N, Nuriman A, Bayu Yadila A. Exploring the impact of data quality on decision-making processes in information intensive organizations. ATM. 2023;7(3):253–60.
* View Article
* Google Scholar
47. 47. Haug A, Zachariassen F, Liempd D van. The costs of poor data quality. JIEM. 2011;4(2).
* View Article
* Google Scholar
48. 48. Ndabarora E, Chipps JA, Uys L. Systematic review of health data quality management and best practices at community and district levels in LMIC. Inf Dev. 2013;30(2):103–20.
* View Article
* Google Scholar
49. 49. Bian J, Lyu T, Loiacono A, Viramontes TM, Lipori G, Guo Y, et al. Assessing the practice of data quality evaluation in a national clinical data research network through a systematic scoping review in the era of real-world data. J Am Med Inform Assoc. 2020;27(12):1999–2010. pmid:33166397
* View Article
* PubMed/NCBI
* Google Scholar
50. 50. Kusi BA, Alhassan AL, Ofori-Sasu D, Sai R. Insurance regulations, risk and performance in Ghana. JFRC. 2019;28(1):74–96.
* View Article
* Google Scholar
51. 51. Zhang R, Indulska M, Sadiq S. Discovering data quality problems. Bus Inf Syst Eng. 2019;61(5):575–93.
* View Article
* Google Scholar
52. 52. Ehrlinger L, Wöß W. A survey of data quality measurement and monitoring tools. Front Big Data. 2022;5:850611. pmid:35434611
* View Article
* PubMed/NCBI
* Google Scholar
53. 53. Peng G, Privette JL, Tilmes C, Bristol S, Maycock T, Bates JJ, et al. A conceptual enterprise framework for managing scientific data stewardship. Data Sci J. 2018;17:15. pmid:33101400
* View Article
* PubMed/NCBI
* Google Scholar
54. 54. Muthee V, Bochner AF, Osterman A, Liku N, Akhwale W, Kwach J, et al. The impact of routine data quality assessments on electronic medical record data quality in Kenya. PLoS One. 2018;13(4):e0195362. pmid:29668691
* View Article
* PubMed/NCBI
* Google Scholar
55. 55. Daniel C, Serre P, Orlova N, Bréant S. Initializing a hospital-wide data quality program. The AP-HP experience. Elsevier. 2019.
56. 56. Castanheira A, Peixoto H, Machado J. Overcoming challenges in healthcare interoperability regulatory compliance. Advances in Intelligent Systems and Computing, 1239 AISC. Springer International Publishing. 2021. p. 44–53. https://doi.org/10.1007/978-3-030-58356-9_5
57. 57. Gajanayake R, Iannella R, Sahama T. Information governance for COVID-19 pandemic data. Int Technol Manag Rev. 2021;10(1):12–24.
* View Article
* Google Scholar
58. 58. Amoako-Gyampah K, Acquah IS. Health information governance practices in Ghanaian hospitals. Int J Healthc Manag. 2020;13(2):99–110.
* View Article
* Google Scholar
59. 59. Kouroubali A, Katehakis DG. Policy and strategy for interoperability of digital health in Europe. Stud Health Technol Inform. 2022;290:897–901. pmid:35673148
* View Article
* PubMed/NCBI
* Google Scholar
60. 60. Sharma A, Gamta V. Ensuring patient safety and trust: The critical importance of regulatory compliance in healthcare. Publish7promo.Com. http://publish7promo.com/id/eprint/3006. 2023. Accessed 2024 May 16.
* View Article
* Google Scholar
61. 61. Voigt P, Von dem Bussche A. The EU general data protection regulation (GDPR). A practical guide. 1st ed. Cham: Springer International Publishing. 2017.
62. 62. Li H, Yu L, He W. The Impact of GDPR on Global Technology Development. J Glob Inf Technol Manag. 2019;22(1):1–6.
* View Article
* Google Scholar
63. 63. Russo B, Valle L, Bonzagni . Cloud computing and the new EU general data protection regulation. ieeexplore.Ieee.Org. 2018. Accessed 2024 May 16. https://ieeexplore.ieee.org/abstract/document/8552651/
* View Article
* Google Scholar
64. 64. Mennemeyer ST, Menachemi N, Rahurkar S, Ford EW. Impact of the HITECH Act on physicians’ adoption of electronic health records. J Am Med Inform Assoc. 2016;23(2):375–9. pmid:26228764
* View Article
* PubMed/NCBI
* Google Scholar
65. 65. Burde H. Health Law the hitech act-an overview. Virtual Mentor. 2011;13(3):172–5. pmid:23127320
* View Article
* PubMed/NCBI
* Google Scholar
66. 66. Mishkin AD, Zabinski JS, Holt G, Appelbaum PS. Ensuring privacy in telemedicine: Ethical and clinical challenges. J Telemed Telecare. 2023;29(3):217–21. pmid:36349356
* View Article
* PubMed/NCBI
* Google Scholar
67. 67. Vuong K, Ivers R, Dykgraaf S. Ethical considerations regarding the use of pooled data from electronic health records in general practice. searchInformitOrg. 2022. Accessed 2024 May 17. https://search.informit.org/doi/abs/10.3316/informit.591386207200328
* View Article
* Google Scholar
68. 68. Udroiu A. Improving the cybersecurity of medical systems by applying the NIST framework. ieeexplore.Ieee.Org. https://ieeexplore.ieee.org/abstract/document/9847498/. 2022. Accessed 2024 May 17.
* View Article
* Google Scholar
69. 69. Koczkodaj W, Masiak J, M M-IJ. Massive health record breaches are evidenced by the office for civil rights data. ncbi.Nlm.Nih.Gov. https://www.ncbi.nlm.nih.gov/pmc/articles/PMC6556182/. 2019. Accessed 2024 May 17.
* View Article
* Google Scholar
70. 70. Hamilton J, Services KS. How systematic compliance practices can address regulatory and risk issues in healthcare. JournalsLwwCom. https://journals.lww.com/frontiersonline/FullText/2018/06000/How_Systematic_Compliance_Practices_Can_Address.4.aspx. 2018. Accessed 2024 May 16.
* View Article
* Google Scholar
71. 71. Contreras J, Matrix FN-H. Liability (and) rules for health information. HeinOnline. https://heinonline.org/hol-cgi-bin/get_pdf.cgi?handle=hein.journals/hmax29§ion=7. 2019. Accessed 2024 May 16.
* View Article
* Google Scholar
Citation: Okyere Boadu R, Wireko Adu V, Okyere Boadu KA, Ibrahim B, Akey P, Amishadas Mensah A, et al. (2025) Examine frameworks policies and strategies for effective information governance in healthcare organizations. PLoS One 20(7): e0327496. https://doi.org/10.1371/journal.pone.0327496
About the Authors:
Richard Okyere Boadu
Roles: Conceptualization, Data curation, Formal analysis, Investigation, Methodology, Project administration, Resources, Software, Supervision, Validation, Visualization, Writing – original draft, Writing – review & editing
E-mail: [email protected]
Affiliation: Department of Health Information Management School of Allied Health Sciences, College of Health and Allied Health Sciences, University of Cape Coast, Cape Coast, Ghana
ORICD: https://orcid.org/0000-0003-2243-593X
Victor Wireko Adu
Roles: Data curation, Formal analysis, Software, Visualization, Writing – original draft
Affiliation: Department of Health Information Management School of Allied Health Sciences, College of Health and Allied Health Sciences, University of Cape Coast, Cape Coast, Ghana
Kwame Adu Okyere Boadu
Roles: Conceptualization, Formal analysis, Investigation, Writing – review & editing
Affiliation: Sunyani Teaching Hospital, Sunyani, Ghana
Baishatu Ibrahim
Roles: Formal analysis, Investigation, Methodology, Writing – review & editing
Affiliation: Department of Health Information Management School of Allied Health Sciences, College of Health and Allied Health Sciences, University of Cape Coast, Cape Coast, Ghana
Prince Akey
Roles: Formal analysis, Investigation, Methodology, Writing – review & editing
Affiliation: Department of Health Information Management School of Allied Health Sciences, College of Health and Allied Health Sciences, University of Cape Coast, Cape Coast, Ghana
Amponsah Amishadas Mensah
Roles: Formal analysis, Investigation, Methodology, Writing – review & editing
Affiliation: Department of Health Information Management School of Allied Health Sciences, College of Health and Allied Health Sciences, University of Cape Coast, Cape Coast, Ghana
Godwin Adzakpah
Roles: Writing – review & editing
Affiliation: Department of Health Information Management School of Allied Health Sciences, College of Health and Allied Health Sciences, University of Cape Coast, Cape Coast, Ghana
Nathan Kumasenu Mensah
Roles: Writing – review & editing
Affiliation: Department of Health Information Management School of Allied Health Sciences, College of Health and Allied Health Sciences, University of Cape Coast, Cape Coast, Ghana
[/RAW_REF_TEXT]
[/RAW_REF_TEXT]
[/RAW_REF_TEXT]
[/RAW_REF_TEXT]
[/RAW_REF_TEXT]
[/RAW_REF_TEXT]
[/RAW_REF_TEXT]
[/RAW_REF_TEXT]
1. Rouzbahani F, Rabiei R, Asadi F, Moghaddasi H, Emami H. Information governance program: a review of applications in healthcare. Arch Adv Biosci. 2019;20(1):10.
2. Winter JS, Davidson E. Big data governance of personal health information and challenges to contextual integrity. Inf Soc. 2018;35(1):36–51.
3. Al-Badi A, Tarhini A. Exploring big data governance frameworks. Elsevier. https://www.sciencedirect.com/science/article/pii/S1877050918318313 2018. Accessed 2024 March 13.
4. Tse D, Chow C. The challenges of big data governance in healthcare. explore. Ieee. https://ieeexplore.ieee.org/abstract/document/8456108/. 2018. Accessed 2024 March 12.
5. O’Hara K. Data trusts: Ethics, architecture, and governance for trustworthy data stewardship. 2019. https://eprints.soton.ac.uk/428276
6. Kostick-Quenet K. Ethical hazards of health data governance in the metaverse. https://www.nature.com/articles/s42256-023-00658-w. 2023. Accessed 2024 March 13.
7. Mikalef P, Boura M, Lekakos G. The role of information governance in big data analytics-driven innovation. Elsevier. https://www.sciencedirect.com/science/article/pii/S0378720620302998 2020. Accessed 2024 March 13.
8. Kwan H, Riley M, Prasad N, Robinson K. An investigation of the status and maturity of hospitals’ health information governance in Victoria, Australia. Health Inf Manag. 2022;51(2):89–97. pmid:32662675
9. Monah SR, Wagner MW, Biswas A, Khalvati F, Erdman LE, Amirabadi A, et al. Data governance functions to support responsible data stewardship in pediatric radiology research studies using artificial intelligence. Pediatr Radiol. 2022;52(11):2111–9.
10. Iorio CD, Carinci F, Oderkirk J. Assessing data protection and governance in health information systems: a novel methodology of privacy and ethics impact and performance assessment (PEIPA). J Med Ethics. 2021. https://jme.bmj.com/content/47/12/e23.abstract
11. Lee RR, McDonagh JE, Farre A, Peters S, Cordingley L, Rapley T. Data protection, information governance and the potential erosion of ethnographic methods in health care?. Sociol Health Illn. 2022;44(1):211–7. pmid:34811764
12. Clohessy T, English M. Bridging the gaps in information systems: a threshold concepts and troublesome knowledge perspective. Ir Educ Stud. 2022;43(1):141–65.
13. Madden GR, Weinstein RA, Sifri CD. Diagnostic stewardship for healthcare-associated infections: Opportunities and challenges to safely reduce test use. Infect Control Hosp Epidemiol. 2018;39(2):214–8. pmid:29331159
14. Seh AH, Zarour M, Alenezi M, Sarkar AK, Agrawal A, Kumar R, et al. Healthcare data breaches: Insights and implications. Healthcare (Basel). 2020;8(2):133. pmid:32414183
15. Inau E, Sack J. Initiatives, concepts, and implementation practices of FAIR (findable, accessible, interoperable, and reusable) data principles in health data stewardship. Researchprotocols.Org. https://www.researchprotocols.org/2021/2/e22505/. 2021. Accessed 2024 May 14.
16. Nguyen TH, Nguyen TT, Zhang J. A data stewardship framework and methodology for health data governance. Int J Environ Res Public Health. 2019;16(23):4634.
17. Mew JRC, Muller C, Lehmann J, Barnes T. Data stewardship: A matter of organization and governance. JeSLIB. 2019;8(2):e1167.
18. Kascak LR, Lebbon AR, Song H, Sullivan CJ, Fox C. Data quality management: A qualitative study of strategies to improve health data quality. Int J Med Inform. 2021;152:104496.
19. Algharai AM, Alotaibi WA, Alharthi MA, Aljuaid HA, Alzahrani AS, Alshehri MA, et al. The impact of health information governance on the quality of healthcare services. Inform Med Unlocked. 2022;29:100889.
20. Kruse CS, Goswamy R, Raval YJ, Marawi S. Challenges and opportunities of big data in health care: A systematic review. JMIR Med Inform. 2018;4(4):e51.
21. Brinkerhoff DW, Cross HE, Sharma S, Williamson T. Stewardship and health systems strengthening: An overview. Public Adm Dev. 2019;39(1):4–10.
22. Kagoya HR, Andia Biraro IA, Ejuu G, Musoke P, Nabukeera-Barungi N, Sendagala S, et al. Progress, opportunities and challenges for electronic health information systems in resource limited settings: A review of the literature. Afr Eval J. 2022;10.
23. Onyoni GO, Obimbo MM, Wanzala P. Gaps in health data stewardship: A study of health information management practices in Kenya. J Health Inform Afr. 2019;6(1):1–9.
24. Dagliati A, Malovini A, Tibollo V, Bellazzi R. Health informatics and EHR to support clinical research in the COVID-19 pandemic: an overview. Brief Bioinform. 2021;22(2):812.
25. Mollah MB, Humaun Kabir MM, Hasan MK. Digital health data governance in developing countries: A Bangladesh perspective. Int Technol Manag Rev. 2020;9(1):108–23.
26. Green BF. Data stewardship: A practical guide for the healthcare professional. Springer Publishing Company. 2023.
27. Jansen P, van Den Berg L, van Overveld P, Boiten JW. Research data stewardship for healthcare professionals. Fundamentals of clinical data science, library.Oapen.Org. https://library.oapen.org/bitstream/handle/20.500.12657/22918/1007243.pdf?sequence=1#page=42. 2019. Accessed 2024 May 14.
28. Pagliari C, Smith A, Johnson B, Williams D. Information governance in healthcare: A comprehensive analysis. J Health Inform Manag. 2019;35(2).
29. Wendelborn C, Anger M. What is data stewardship? Towards a comprehensive understanding. Elsevier. https://www.sciencedirect.com/science/article/pii/S1532046423000588. 2023. Accessed 2024 May 14.
30. Chan BTB, Veillard JHM, Cowling K, Klazinga NS, Brown AD, Leatherman S. Stewardship of quality of care in health systems: Core functions, common pitfalls, and potential solutions. Wiley Online Library. 2018;39(1):34–46.
31. Nasiri T, Takian A, health SY-I. Stewardship in health, designing a multi-layer meta model: A review article. ncbi.Nlm.Nih.Gov. 2019. https://www.ncbi.nlm.nih.gov/pmc/articles/PMC6500540/
32. Bae JP, Chen YF, Rohani VA, Longmann CL. Data quality improvement in electronic health records. J Ambul Care Manage. 2022;45(3):195–206.
33. Adeya G, Nzanzu A, Rehema K, Weitzman ER. Challenges and opportunities for health data quality management in resource-constrained settings: A systematic review. J Glob Health Rep. 2022;6:e2022002.
34. Smith J, Johnson A, Williams S, Brown M. Health information governance: Understanding the dynamics. J Healthc Inf Manage. 2019;33(1).
35. de Carvalho Junior MA, Bandiera-Paiva P. Health information system role-based access control current security trends and challenges. J Healthc Eng. 2018;2018:6510249. pmid:29670743
36. Bossen C, Bertelsen PS. Digital health care and data work: Who are the data professionals?. Health Inf Manag. 2024;53(3):243–51. pmid:37491822
37. Karasneh R, Al-Mistarehi A-H, Al-Azzam S, Abuhammad S, Muflih SM, Hawamdeh S, et al. Physicians’ knowledge, perceptions, and attitudes related to patient confidentiality and data sharing. Int J Gen Med. 2021;14:721–31. pmid:33688243
38. Whittaker M, Hodge N, Mares RE, Rodney A. Preparing for the data revolution: identifying minimum health information competencies among the health workforce. Hum Resour Health. 2015;13:17. pmid:25889677
39. Wang Y, Kung L, change TB-T. Big data analytics: Understanding its capabilities and potential benefits for healthcare organizations. Forecast Soc. 2018.
40. Mashoufi M, Ayatollahi H, Khorasani-Zavareh D, Talebi Azad Boni T. Data quality in health care: Main concepts and assessment methodologies. Methods Inf Med. 2023;62(1–02):5–18. pmid:36716776
41. American Health Information Management Association AHIMA. Data Quality and Integrity Advocacy. https://www.ahima.org/advocacy/policy-statements/data-quality-and-integrity. 2024. Accessed 2025 March 12.
42. AbuHalimeh A. Improving data quality in clinical research informatics tools. Front Big Data. 2022;5:871897. pmid:35574572
43. Smith ME, Steinbart EJ, Dwyer C. Data privacy policies differ from developed and developing nations. J Glob Inf Technol Manag. 2020;23(1):45–63.
44. Zhang Y, Callaghan-Koru JA, Koru G. The challenges and opportunities of continuous data quality improvement for healthcare administration data. JAMIA Open. 2024;7(3):ooae058. pmid:39091510
45. Khatri V, Brown CV. Designing data governance. Commun ACM. 2010;53(1):148–52.
46. Khong I, Aprila Yusuf N, Nuriman A, Bayu Yadila A. Exploring the impact of data quality on decision-making processes in information intensive organizations. ATM. 2023;7(3):253–60.
47. Haug A, Zachariassen F, Liempd D van. The costs of poor data quality. JIEM. 2011;4(2).
48. Ndabarora E, Chipps JA, Uys L. Systematic review of health data quality management and best practices at community and district levels in LMIC. Inf Dev. 2013;30(2):103–20.
49. Bian J, Lyu T, Loiacono A, Viramontes TM, Lipori G, Guo Y, et al. Assessing the practice of data quality evaluation in a national clinical data research network through a systematic scoping review in the era of real-world data. J Am Med Inform Assoc. 2020;27(12):1999–2010. pmid:33166397
50. Kusi BA, Alhassan AL, Ofori-Sasu D, Sai R. Insurance regulations, risk and performance in Ghana. JFRC. 2019;28(1):74–96.
51. Zhang R, Indulska M, Sadiq S. Discovering data quality problems. Bus Inf Syst Eng. 2019;61(5):575–93.
52. Ehrlinger L, Wöß W. A survey of data quality measurement and monitoring tools. Front Big Data. 2022;5:850611. pmid:35434611
53. Peng G, Privette JL, Tilmes C, Bristol S, Maycock T, Bates JJ, et al. A conceptual enterprise framework for managing scientific data stewardship. Data Sci J. 2018;17:15. pmid:33101400
54. Muthee V, Bochner AF, Osterman A, Liku N, Akhwale W, Kwach J, et al. The impact of routine data quality assessments on electronic medical record data quality in Kenya. PLoS One. 2018;13(4):e0195362. pmid:29668691
55. Daniel C, Serre P, Orlova N, Bréant S. Initializing a hospital-wide data quality program. The AP-HP experience. Elsevier. 2019.
56. Castanheira A, Peixoto H, Machado J. Overcoming challenges in healthcare interoperability regulatory compliance. Advances in Intelligent Systems and Computing, 1239 AISC. Springer International Publishing. 2021. p. 44–53. https://doi.org/10.1007/978-3-030-58356-9_5
57. Gajanayake R, Iannella R, Sahama T. Information governance for COVID-19 pandemic data. Int Technol Manag Rev. 2021;10(1):12–24.
58. Amoako-Gyampah K, Acquah IS. Health information governance practices in Ghanaian hospitals. Int J Healthc Manag. 2020;13(2):99–110.
59. Kouroubali A, Katehakis DG. Policy and strategy for interoperability of digital health in Europe. Stud Health Technol Inform. 2022;290:897–901. pmid:35673148
60. Sharma A, Gamta V. Ensuring patient safety and trust: The critical importance of regulatory compliance in healthcare. Publish7promo.Com. http://publish7promo.com/id/eprint/3006. 2023. Accessed 2024 May 16.
61. Voigt P, Von dem Bussche A. The EU general data protection regulation (GDPR). A practical guide. 1st ed. Cham: Springer International Publishing. 2017.
62. Li H, Yu L, He W. The Impact of GDPR on Global Technology Development. J Glob Inf Technol Manag. 2019;22(1):1–6.
63. Russo B, Valle L, Bonzagni . Cloud computing and the new EU general data protection regulation. ieeexplore.Ieee.Org. 2018. Accessed 2024 May 16. https://ieeexplore.ieee.org/abstract/document/8552651/
64. Mennemeyer ST, Menachemi N, Rahurkar S, Ford EW. Impact of the HITECH Act on physicians’ adoption of electronic health records. J Am Med Inform Assoc. 2016;23(2):375–9. pmid:26228764
65. Burde H. Health Law the hitech act-an overview. Virtual Mentor. 2011;13(3):172–5. pmid:23127320
66. Mishkin AD, Zabinski JS, Holt G, Appelbaum PS. Ensuring privacy in telemedicine: Ethical and clinical challenges. J Telemed Telecare. 2023;29(3):217–21. pmid:36349356
67. Vuong K, Ivers R, Dykgraaf S. Ethical considerations regarding the use of pooled data from electronic health records in general practice. searchInformitOrg. 2022. Accessed 2024 May 17. https://search.informit.org/doi/abs/10.3316/informit.591386207200328
68. Udroiu A. Improving the cybersecurity of medical systems by applying the NIST framework. ieeexplore.Ieee.Org. https://ieeexplore.ieee.org/abstract/document/9847498/. 2022. Accessed 2024 May 17.
69. Koczkodaj W, Masiak J, M M-IJ. Massive health record breaches are evidenced by the office for civil rights data. ncbi.Nlm.Nih.Gov. https://www.ncbi.nlm.nih.gov/pmc/articles/PMC6556182/. 2019. Accessed 2024 May 17.
70. Hamilton J, Services KS. How systematic compliance practices can address regulatory and risk issues in healthcare. JournalsLwwCom. https://journals.lww.com/frontiersonline/FullText/2018/06000/How_Systematic_Compliance_Practices_Can_Address.4.aspx. 2018. Accessed 2024 May 16.
71. Contreras J, Matrix FN-H. Liability (and) rules for health information. HeinOnline. https://heinonline.org/hol-cgi-bin/get_pdf.cgi?handle=hein.journals/hmax29§ion=7. 2019. Accessed 2024 May 16.
© 2025 Okyere Boadu et al. This is an open access article distributed under the terms of the Creative Commons Attribution License: http://creativecommons.org/licenses/by/4.0/ (the “License”), which permits unrestricted use, distribution, and reproduction in any medium, provided the original author and source are credited. Notwithstanding the ProQuest Terms and Conditions, you may use this content in accordance with the terms of the License.