title: Securing ePHI--can clinicians and IT ever agree?
abstract: The Health Insurance Portability and Accountability Act (HIPAA) affects patients, IT professionals and providers. Implementation requires cooperation among clinical and staff, presuming an equal understanding of the law and its implementation. Two Q-sort sessions with different Conditions of Instruction (COI) were attended by each study participant: one COI focused on a personal perspective about the effectiveness of security standards in preventing or mitigating security problems with EPHI. The second COI examined the participant's perception of how a co-worker would see aspects of security problems. The first Q-sort resulted in four distinct factors, two of which, administratively minded and patient centric, suggest divergence in opinion. The second sort's results reveal the inability of participants to forecast what their co-workers will perceive as salient to a security situation. Results suggest that people might adapt to changes required by security applications if the changes in workflow are described in role-based situations.
authors.affiliation: College of Applied Health Sciences, University of Illinois at Chicago, USA.
authors.forename: Greer W P
authors.initials: GW
authors.lastname: Stevenson
authors.forename: Annette L
authors.initials: AL
authors.lastname: Valenta
mesh_terms: D016494:Computer Security; D004059:Diffusion of Innovation; D020408:Health Insurance Portability and Accountability Act; D006801:Humans; D008498:Medical Record Linkage; D016347:Medical Records Systems, Computerized; D011779:Q-Sort; D014481:United States