Awareness of, attitudes towards, and practices of health information management professionals in South Korea relating to privacy of personal health information.

Background: While information and communication technology has continued to advance, privacy of personal health information (PHI) has remained a challenge for health information management (HIM) professionals. Objective: This study aims to examine the awareness, attitude and practice relating to PHI privacy among HIM professionals in South Korea. Method: A survey questionnaire was developed for the study based on critical appraisal of relevant literature and expert consensus. It was completed by a sample of 312 respondents who were members of the Korean Health Information Management Association, over the age of 21, and worked in a healthcare organisation. Demographic data and questionnaire items (assessed on a 5-point Likert-type scale) were analysed using descriptive statistics, t-tests and ANOVA. Results: Mean scores and SDs for awareness, attitude and practice related to PHI privacy were calculated: 4.21 (0.60) for awareness, 4.17 (0.60) for attitude and 4.31 (0.63) for practice. Significant positive correlations were found between awareness and attitude scores (r = 0.765, p < 0.01); awareness and practice scores (r = 0.585; p < 0.01); and attitude and action scores (r = 0.672; p < 0.01). HIM professionals' awareness, attitude, and practice towards PHI privacy differed significantly according to age, level of education, years of HIM experience, type of employment, main task, number of completed privacy education activities within the previous 3 years and whether or not they had signed a pledge of confidentiality on PHI. More highly-educated, full-time employed respondents, those who had completed a greater number of privacy education activities and had more experience as HIM professionals, achieved higher scores on awareness, attitude and practice than did other respondents. These differences were all statistically significant (p < 0.01). Conclusion: Although causality cannot be inferred from results of this study, findings suggest that there is a relationship between PHI being a core responsibility of HIM professionals and their subsequent awareness, attitude and practice to ensure its privacy and confidentiality. To improve privacy practice, educational efforts should be prioritised and supported at all levels, including national, organisational, individual, and by professional HIM associations.