Advancing cybersecurity use of sensitive data in electronichealthcare system: a review of privacy and regulations

Abstract

Addressing cybersecurity challenges in electronic healthcare system is imperative in ensuring trustworthiness in distributed healthcare information systems, thereby safeguarding sensitive patient information and optimizing healthcare service delivery in line with regulatory requirements. The use of data-driven technologies presents a promising opportunity for significant advances in information management required for an improved healthcare privacy protection for patients care, offering opportunities toward increased database accessibility in healthcare information management. This not only guarantees adherence to legal frameworks but also lays the groundwork for the ethical and accountable application of distributed systems in the medical field. To gain a thorough grasp of the requirements for cybersecurity in health-care workforce groups, this study applied a methodology that relied on a survey questionnaire. After that, it uses a risk-based methodology to estimate the risk of different cybersecurity and data privacy threats related to the stakeholder, determines the best ways to mitigate those cybersecurity risks, and suggests subsets of human-centric policies to manage each cybersecurity risk in the distributed healthcare setting. The results we obtained indicate that the effective management of individual cybersecurity risks across various healthcare organizations and diverse employee groups are facilitated by the adoption of a risk-based strategy for information privacy and cybersecurity risks protection in the healthcare system.