An assessment of knowledge on the protection of personal data among nursing staff

Abstract

Introduction : Numerous legal acts are in place to protect the personal data of patients. The Act on the Protection of Personal Data contains basic information on the principles of data processing, as well as specifying what criminal sanctions are in place for non-compliance.

The aim of the study was to assess the level of knowledge about personal data protection among nursing staff working in the Świętokrzyskie Province. Additionally, an analysis of the subjective assessment of whether there is a need for training in the field of personal data of the above-mentioned professional group was performed.

Materials and methods : The study was conducted among 141 male and female nurses working in the Świętokrzyskie Province. The study group consisted of 109 people working in the hospital and 32 people working in primary health care. The average age of respondents was 41.3 years. The study used the diagnostic survey method. A tailored questionnaire was used to assess knowledge about the protection of personal data. The obtained results were statistically developed using Excel. The present study used the χ² test and statistical significance was assumed at the level of p < 0.05.

Results : Among of respondents 89% selected paper and electronics as the leading methods of storing data. A very small number of respondents, namely about 4% of the surveyed people, have passed patient information to a third party. Among of people 81% are aware of the criminal liability for violating the provisions on the protection of personal data. Less than half of the respondents (38%) knew the correct length of time that medical records can be stored – 20 years. No relationship was found between the type of workplace and demand for training, and the type of workplace and the subjective assessment of the level of knowledge of the respondents in the field of personal data protection.

Conclusions : Nursing staff working in primary health care show a greater need for training on the General Data Protection Regulations (GDPR) than nursing staff working in hospitals. There is no statistically significant difference between the workplace of nursing staff and the demand for training. The subjective assessment of knowledge of the respondents in the field of personal data protection in the case of hospital nurses is low, and in the case of primary health care employees is average.