A Telehealth Privacy and Security Self-Assessment Questionnaire for Telehealth Providers: Development and Validation

Background: Telehealth is a great approach for providing high quality health care services to people who cannot easily access these services in person. However, because of frequently reported health data breaches, many people may hesitate to use telehealth-based health care services. It is necessary...

Full description

Saved in:
Bibliographic Details
Main Authors: Leming Zhou, Robert Thieret, Valerie Watzlaf, Dilhari DeAlmeida, Bambang Parmanto
Format: Article
Language:English
Published: Hawaii Pacific University Library 2019-06-01
Series:International Journal of Telerehabilitation
Subjects:
Online Access:http://telerehab.pitt.edu/ojs/index.php/Telerehab/article/view/6276
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1849315689451487232
author Leming Zhou
Robert Thieret
Valerie Watzlaf
Dilhari DeAlmeida
Bambang Parmanto
author_facet Leming Zhou
Robert Thieret
Valerie Watzlaf
Dilhari DeAlmeida
Bambang Parmanto
author_sort Leming Zhou
collection DOAJ
description Background: Telehealth is a great approach for providing high quality health care services to people who cannot easily access these services in person. However, because of frequently reported health data breaches, many people may hesitate to use telehealth-based health care services. It is necessary for telehealth care providers to demonstrate that they have taken sufficient actions to protect their patients’ data security and privacy. The government provided a HIPAA audit protocol that is highly useful for internal security and privacy auditing on health care systems, however, this protocol includes extensive details that are not always specific to telehealth and therefore is difficult to be used by telehealth practitioners. Objective: The goal of this study was to develop and validate a telehealth privacy and security self-assessment questionnaire for telehealth providers.  Methods: In our previous work, we performed a systematic review on the security and privacy protection offered in various telehealth systems. The results from this systematic review and the HIPAA audit protocol were used to guide the development of the self-assessment questionnaire. The draft of the questionnaire was created by the research team and distributed to a group of telehealth providers for evaluating the relevance and clarity of each statement in the draft. The questionnaire was adjusted and finalized according to the collected feedback and face-to-face discussions by the research team. A website was created to distribute the questionnaire and manage the answers from study participants. A psychometric analysis was performed to evaluate the reliability of the questionnaire. Results: There were 84 statements in the draft questionnaire. Five telehealth providers provided their feedback to the statements in this draft. They indicated that a number of these statements were either redundant or beyond the capacity of telehealth care practitioners, who typically do not have formal training in information security. They also pointed out that the wording of some statements needed to be adjusted. The final released version of the questionnaire had 49 statements. In total, 31 telehealth providers across the nation participated in the study by answering all the statements in this questionnaire. The psychometric analysis indicated that the reliability of this questionnaire was high.    Conclusion: With the availability of this self-assessment questionnaire, telehealth providers can perform a quick self-assessment on their telehealth systems. The assessment results may be used to identify possible vulnerabilities in telehealth systems and practice or demonstrate to patients the sufficient security and privacy protection to patients’ data.
format Article
id doaj-art-844694ff0c5a45ffbec37ec43b74b9ce
institution Kabale University
issn 1945-2020
language English
publishDate 2019-06-01
publisher Hawaii Pacific University Library
record_format Article
series International Journal of Telerehabilitation
spelling doaj-art-844694ff0c5a45ffbec37ec43b74b9ce2025-08-20T03:52:04ZengHawaii Pacific University LibraryInternational Journal of Telerehabilitation1945-20202019-06-0111131410.5195/ijt.2019.62766065A Telehealth Privacy and Security Self-Assessment Questionnaire for Telehealth Providers: Development and ValidationLeming Zhou0Robert Thieret1Valerie Watzlaf2Dilhari DeAlmeida3Bambang Parmanto4The University of PittsburghThe University of PittsburghThe University of PittsburghThe University of PittsburghThe University of PittsburghBackground: Telehealth is a great approach for providing high quality health care services to people who cannot easily access these services in person. However, because of frequently reported health data breaches, many people may hesitate to use telehealth-based health care services. It is necessary for telehealth care providers to demonstrate that they have taken sufficient actions to protect their patients’ data security and privacy. The government provided a HIPAA audit protocol that is highly useful for internal security and privacy auditing on health care systems, however, this protocol includes extensive details that are not always specific to telehealth and therefore is difficult to be used by telehealth practitioners. Objective: The goal of this study was to develop and validate a telehealth privacy and security self-assessment questionnaire for telehealth providers.  Methods: In our previous work, we performed a systematic review on the security and privacy protection offered in various telehealth systems. The results from this systematic review and the HIPAA audit protocol were used to guide the development of the self-assessment questionnaire. The draft of the questionnaire was created by the research team and distributed to a group of telehealth providers for evaluating the relevance and clarity of each statement in the draft. The questionnaire was adjusted and finalized according to the collected feedback and face-to-face discussions by the research team. A website was created to distribute the questionnaire and manage the answers from study participants. A psychometric analysis was performed to evaluate the reliability of the questionnaire. Results: There were 84 statements in the draft questionnaire. Five telehealth providers provided their feedback to the statements in this draft. They indicated that a number of these statements were either redundant or beyond the capacity of telehealth care practitioners, who typically do not have formal training in information security. They also pointed out that the wording of some statements needed to be adjusted. The final released version of the questionnaire had 49 statements. In total, 31 telehealth providers across the nation participated in the study by answering all the statements in this questionnaire. The psychometric analysis indicated that the reliability of this questionnaire was high.    Conclusion: With the availability of this self-assessment questionnaire, telehealth providers can perform a quick self-assessment on their telehealth systems. The assessment results may be used to identify possible vulnerabilities in telehealth systems and practice or demonstrate to patients the sufficient security and privacy protection to patients’ data.http://telerehab.pitt.edu/ojs/index.php/Telerehab/article/view/6276privacyquestionnaire developmentreliabilitysecurity
spellingShingle Leming Zhou
Robert Thieret
Valerie Watzlaf
Dilhari DeAlmeida
Bambang Parmanto
A Telehealth Privacy and Security Self-Assessment Questionnaire for Telehealth Providers: Development and Validation
International Journal of Telerehabilitation
privacy
questionnaire development
reliability
security
title A Telehealth Privacy and Security Self-Assessment Questionnaire for Telehealth Providers: Development and Validation
title_full A Telehealth Privacy and Security Self-Assessment Questionnaire for Telehealth Providers: Development and Validation
title_fullStr A Telehealth Privacy and Security Self-Assessment Questionnaire for Telehealth Providers: Development and Validation
title_full_unstemmed A Telehealth Privacy and Security Self-Assessment Questionnaire for Telehealth Providers: Development and Validation
title_short A Telehealth Privacy and Security Self-Assessment Questionnaire for Telehealth Providers: Development and Validation
title_sort telehealth privacy and security self assessment questionnaire for telehealth providers development and validation
topic privacy
questionnaire development
reliability
security
url http://telerehab.pitt.edu/ojs/index.php/Telerehab/article/view/6276
work_keys_str_mv AT lemingzhou atelehealthprivacyandsecurityselfassessmentquestionnairefortelehealthprovidersdevelopmentandvalidation
AT robertthieret atelehealthprivacyandsecurityselfassessmentquestionnairefortelehealthprovidersdevelopmentandvalidation
AT valeriewatzlaf atelehealthprivacyandsecurityselfassessmentquestionnairefortelehealthprovidersdevelopmentandvalidation
AT dilharidealmeida atelehealthprivacyandsecurityselfassessmentquestionnairefortelehealthprovidersdevelopmentandvalidation
AT bambangparmanto atelehealthprivacyandsecurityselfassessmentquestionnairefortelehealthprovidersdevelopmentandvalidation
AT lemingzhou telehealthprivacyandsecurityselfassessmentquestionnairefortelehealthprovidersdevelopmentandvalidation
AT robertthieret telehealthprivacyandsecurityselfassessmentquestionnairefortelehealthprovidersdevelopmentandvalidation
AT valeriewatzlaf telehealthprivacyandsecurityselfassessmentquestionnairefortelehealthprovidersdevelopmentandvalidation
AT dilharidealmeida telehealthprivacyandsecurityselfassessmentquestionnairefortelehealthprovidersdevelopmentandvalidation
AT bambangparmanto telehealthprivacyandsecurityselfassessmentquestionnairefortelehealthprovidersdevelopmentandvalidation