title: Designing for privacy management in hospitals: Understanding the gap between user activities and IT staff's understandings.
abstract: OBJECTIVE
  We examined the role of privacy in collaborative clinical work and how it is understood by hospital IT staff. The purpose of our study was to identify the gaps between hospital IT staff members' perceptions of how electronic health record (EHR) users' protect the privacy of patient information and how users actually protect patients' private information in their daily collaborative activities. Since the IT staff play an important role in implementing and maintaining the EHR, any gaps that exist between the IT staff's perceptions of user work practices and the users' actual work practices can result in a number of problems in the configuration, implementation, or customization of the EHR, which can lead to collaboration challenges, interrupted workflow, and privacy breaches.
  
  
  METHODS
  We used qualitative data collection methods for this study. We conducted semi-structured interviews with 20 hospital IT staff members. We also conducted observations of EHR users in the in-patient units of the same hospital.
  
  
  RESULTS
  We identified gaps in IT staff's understandings of users' work activities, especially in regards to privacy-compromising workarounds that are used by users and why they are used.
  
  
  CONCLUSIONS
  We discuss the reasons why this gap may exist between IT staff and users and ways to improve IT staff's understanding of why users perform certain privacy-compromising workarounds.
  
  
  CONCLUSIONS
  A hospital's IT staff face a daunting task in ensuring users' collaborative work practices are supported by the system while providing effective privacy mechanisms. In order to achieve both goals, the IT staff must have a clear understanding of their users' practices. However, as this study highlights, there may be a mismatch between the IT staff's understandings of how users protect patient privacy and how users actually protect privacy.
authors.affiliation: College of Information Sciences and Technology, The Pennsylvania State University, USA.
authors.forename: Elizabeth V
authors.initials: EV
authors.lastname: Eikey
authors.affiliation: College of Information Sciences and Technology, The Pennsylvania State University, USA.
authors.forename: Alison R
authors.initials: AR
authors.lastname: Murphy
authors.affiliation: Department of Communication Studies, Northwestern University, USA. Electronic address: mreddy@northwestern.edu.
authors.forename: Madhu C
authors.initials: MC
authors.lastname: Reddy
authors.affiliation: College of Information Sciences and Technology, The Pennsylvania State University, USA.
authors.forename: Heng
authors.initials: H
authors.lastname: Xu
mesh_terms: D001292:Attitude to Computers; D003197:Computer Literacy / Q000706:statistics & numerical data; D016494:Computer Security / Q000706:statistics & numerical data*; D003219:Confidentiality; D057286:Electronic Health Records / Q000458:organization & administration / Q000706:statistics & numerical data*; D007722:Health Knowledge, Attitudes, Practice; D006739:Hospital Administration / Q000379:methods / Q000706:statistics & numerical data*; D008490:Medical Informatics / Q000706:statistics & numerical data; D008503:Medical Staff / Q000706:statistics & numerical data*; D012984:Software; D012985:Software Design; D014481:United States; D014584:User-Computer Interface
keywords: Collaboration; Electronic health record (EHR); IT Staff; Privacy; Users; Workarounds