Data Security Practices in Health Information Management Systems in Selected Nigerian Healthcare Institutions
Abstract
The increasing adoption of electronic health information systems has improved healthcare service delivery through enhanced storage, retrieval, and management of patient records. However, digitalisation has also heightened concerns regarding data security, particularly in developing countries where technological and cybersecurity capacities remain limited. This study examined data security practices among Health Information Management (HIM) practitioners in selected healthcare institutions in Bayelsa State, Nigeria. A descriptive cross-sectional survey design was adopted. The study population consisted of 149 HIM practitioners from Federal Medical Centre Yenagoa, Niger Delta University Teaching Hospital, and Diete Koki Memorial Hospital. Using stratified sampling, 109 respondents were selected. Data were collected through a structured questionnaire with a reliability coefficient of 0.84 determined using Cronbach’s alpha. Descriptive statistics, including frequencies, percentages, means, and standard deviations, were used for analysis, while chi-square statistics tested the study hypothesis at a 0.05 significance level. Out of 109 questionnaires administered, 102 were properly completed and returned, yielding a response rate of 93.6%. Findings revealed a high level of awareness of data security practices among respondents (grand mean = 3.32). Commonly implemented measures included password management (mean = 3.39), access control (mean = 3.21), and routine system logout procedures (mean = 3.33). However, data encryption (mean = 2.97) and regular system updates (mean = 2.88) were inadequately implemented. Major challenges identified were inadequate funding (mean = 3.63), poor technological infrastructure (mean = 3.55), and insufficient staff training (mean = 3.49). The study concludes that strengthening infrastructure, training, funding, and policy enforcement is essential for improving data security in healthcare institutions. Keywords: Data Security, Health Information Management Systems, Nigeria, Patient Confidentiality, Cybersecurity.