Security and Privacy of Online Record Access: A Survey of Adolescents' Views and Experiences in Sweden.

PURPOSE: Ensuring security of online health records and patients' perceptions of security are concerns in adolescent healthcare. Little is known about adolescents' perceptions about healthcare's ability to protect online health records. This article explores adolescents' perspectives on security and privacy of their online health records, potential differences based on gender and health, attitudes to sharing information, and perceptions of what constitutes sensitive information. METHODS: This study included a subset of items from a national online patient survey conducted in Sweden (January-February 2022), focusing on respondents aged 15-19 years. Gender and health status differences were calculated using the Kruskal-Wallis test. RESULTS: Of 218 adolescent respondents (77.1% female), a minority had security and privacy concerns. A notable proportion (41.3%) wished to control who could see their records, and those who reported better perceived health were more likely to want to manage access to their electronic health record (H = 13.569, p = .009). Most had not experienced unauthorized access to their records (75.2%) and had never shared health information on other online applications (85.8%). More than half (56.0%) perceived some information as sensitive, where mental health was the most common (76.0%). Most felt that reading their notes improved their trust for their healthcare professional (65.6%) and supported better communication with healthcare professionals (66.5%). DISCUSSION: In this national survey, adolescents generally reported few concerns about patient portals. Findings emphasize the need for security and privacy protection and to empower adolescents with greater control over access to their health information housed in electronic health record systems.

Patients' Experiences of Demanded Access to Online Health Records.

Patient-Accessible Electronic Health Records (PAEHR) is particularly controversial in mental healthcare. We aim to explore if there is any association between patients with mental health conditions and the experience of someone demanding access to their PAEHR. A chi-square test showed a significant association between group belonging and experiences of someone demanding access to the PAEHR.

The NORDeHEALTH 2022 Patient Survey: Cross-Sectional Study of National Patient Portal Users in Norway, Sweden, Finland, and Estonia.

BACKGROUND: Although many surveys have been conducted on patients accessing their own health records in recent years, there is a limited amount of nationwide cross-country data available on patients' views and preferences. To address this gap, an international survey of patient users was conducted in the Nordic eHealth project, NORDeHEALTH. OBJECTIVE: We aimed to investigate the sociodemographic characteristics and experiences of patients who accessed their electronic health records (EHRs) through national patient portals in Norway, Sweden, Finland, and Estonia. METHODS: A cross-sectional web-based survey was distributed using the national online health portals. The target participants were patients who accessed the national patient portals at the start of 2022 and who were aged ≥15 years. The survey included a mixture of close-ended and free-text questions about participant sociodemographics, usability experience, experiences with health care and the EHR, reasons for reading health records online, experience with errors, omissions and offense, opinions about security and privacy, and the usefulness of portal functions. In this paper, we summarized the data on participant demographics, past experience with health care, and the patient portal through descriptive statistics. RESULTS: In total, 29,334 users completed the survey, of which 9503 (32.40%) were from Norway, 13,008 (44.35%) from Sweden, 4713 (16.07%) from Finland, and 2104 (7.17%) from Estonia. National samples were comparable according to reported gender, with about two-thirds identifying as women (19,904/29,302, 67.93%). Age distributions were similar across the countries, but Finland had older users while Estonia had younger users. The highest attained education and presence of health care education varied among the national samples. In all 4 countries, patients most commonly rated their health as "fair" (11,279/29,302, 38.48%). In Estonia, participants were more often inclined to rate their health positively, whereas Norway and Sweden had the highest proportion of negative health ratings. Across the whole sample, most patients received some care in the last 2 years (25,318/29,254, 86.55%). Mental health care was more common (6214/29,254, 21.24%) than oncological care (3664/29,254, 12.52%). Overall, most patients had accessed their health record "2 to 9 times" (11,546/29,306, 39.4%), with the most frequent users residing in Sweden, where about one-third of patients accessed it "more than 20 times" (4571/13,008, 35.14%). CONCLUSIONS: This is the first large-scale international survey to compare patient users' sociodemographics and experiences with accessing their EHRs. Although the countries are in close geographic proximity and demonstrate similar advancements in giving their residents online records access, patient users in this survey differed. We will continue to investigate patients' experiences and opinions about national patient-accessible EHRs through focused analyses of the national and combined data sets from the NORDeHEALTH 2022 Patient Survey.

Patients' Experiences of Unwanted Access to Their Online Health Records.

Patient-Accessible Electronic Health Records (PAEHR) are particularly disputed in mental healthcare. We aim to explore if there is any association between patients having a mental health condition and someone unwanted seeing their PAEHR. A chi-square test showed a statistically significant association between group belonging and experiences of someone unwanted seeing their PAEHR.

Do you want to receive bad news through your patient accessible electronic health record? A national survey on receiving bad news in an era of digital health.

Despite the fact that patient accessible electronic health records (PAEHRs) have been around for many years in several countries, there is a lack of research investigating patient's preferences for receiving bad news, including through PAEHRs. Little is also known about the characteristics of the patients who prefer to receive bad news through the PAEHR in terms of, for example medical diagnosis, age and educational level. This study, based on a national patient survey in Sweden (N = 2587), investigated this. Results show that, generally, receiving bad news by reading in the PAEHR is still among the least preferred options. Additionally, a higher proportion of men want to receive bad news in the PAEHR compared to women (p = 0.001), and the same goes for those who are not working/have worked in healthcare (p = 0.007). An effect of disease groups was also found, showing that diabetes patients in particular, want to receive bad news through the PAEHR.

Cancer patients' information seeking behavior related to online electronic healthcare records.

Patients' online access to their EHR together with the rapid proliferation of medical information on the Internet has changed how patients use information to learn about their health. Patients' tendency to turn to the Internet to find information about their health and care is well-documented. However, little is known about patients' information seeking behavior when using online EHRs. By using information horizons as an analytical tool this paper aims to investigate the information behavior of cancer patients who have chosen to view their EHRs (readers) and to those who have not made that option (non-readers). Thirty interviews were conducted with patients. Based on information horizons, it seems that non-reading is associated with living in a narrower information world in comparison to readers. The findings do not suggest that the smallness would be a result of active avoidance of information, or that it would be counterproductive for the patients. The findings suggest, however, that EHRs would benefit from comprehensive linking to authoritative health information sources to help users to understand their contents. In parallel, healthcare professionals should be more aware of their personal role as a key source of health information to those who choose not to read their EHRs.

'I do not share it with others. No, it's for me, it's my care': On sharing of patient accessible electronic health records.

This study explores patients' perspectives on sharing their personal health data, which is traditionally shared through discussions with peers and relatives. However, other possibilities for sharing have emerged through the introduction of online services such as Patient Accessible Electronic Health Records (PAEHR). In this article, we investigate strategies that patients adopt in sharing their PAEHR. Data were collected through a survey with 2587 patients and through 15 semi-structured interviews with cancer patients. Results show that surprisingly few patients share their information, and that older patients and patients with lower educational levels share more frequently. A large majority of patients trust the security of the system when sharing despite the high sensitivity of health information. Finally, we discuss the design implications addressing identified problems when sharing PAEHR, as well as security and privacy issues connected to sharing.

E-Consent for Data Privacy: Consent Management for Mobile Health Technologies in Public Health Surveys and Disease Surveillance.

Community health workers in primary care programs increasingly use Mobile Health Data Collection Systems (MDCSs) to report their activities and conduct health surveys, replacing paper-based approaches. The mHealth systems are inherently privacy invasive, thus informing individuals and obtaining their consent is important to protect their rights to privacy. In this paper, we introduce an e-Consent tool tailored for MDCSs. It is developed based on the requirement analysis of consent management for data privacy and built upon the solutions of Participant-Centered Consent toolkit and Consent Receipt specification. The e-Consent solution has been evaluated in a usability study. The study results show that the design is useful for informing individuals on the nature of data processing, allowing them to make informed decisions.

Mobile Health Systems for Community-Based Primary Care: Identifying Controls and Mitigating Privacy Threats.

BACKGROUND: Community-based primary care focuses on health promotion, awareness raising, and illnesses treatment and prevention in individuals, groups, and communities. Community Health Workers (CHWs) are the leading actors in such programs, helping to bridge the gap between the population and the health system. Many mobile health (mHealth) initiatives have been undertaken to empower CHWs and improve the data collection process in the primary care, replacing archaic paper-based approaches. A special category of mHealth apps, known as mHealth Data Collection Systems (MDCSs), is often used for such tasks. These systems process highly sensitive personal health data of entire communities so that a careful consideration about privacy is paramount for any successful deployment. However, the mHealth literature still lacks methodologically rigorous analyses for privacy and data protection. OBJECTIVE: In this paper, a Privacy Impact Assessment (PIA) for MDCSs is presented, providing a systematic identification and evaluation of potential privacy risks, particularly emphasizing controls and mitigation strategies to handle negative privacy impacts. METHODS: The privacy analysis follows a systematic methodology for PIAs. As a case study, we adopt the GeoHealth system, a large-scale MDCS used by CHWs in the Family Health Strategy, the Brazilian program for delivering community-based primary care. All the PIA steps were taken on the basis of discussions among the researchers (privacy and security experts). The identification of threats and controls was decided particularly on the basis of literature reviews and working group meetings among the group. Moreover, we also received feedback from specialists in primary care and software developers of other similar MDCSs in Brazil. RESULTS: The GeoHealth PIA is based on 8 Privacy Principles and 26 Privacy Targets derived from the European General Data Protection Regulation. Associated with that, 22 threat groups with a total of 97 subthreats and 41 recommended controls were identified. Among the main findings, we observed that privacy principles can be enhanced on existing MDCSs with controls for managing consent, transparency, intervenability, and data minimization. CONCLUSIONS: Although there has been significant research that deals with data security issues, attention to privacy in its multiple dimensions is still lacking for MDCSs in general. New systems have the opportunity to incorporate privacy and data protection by design. Existing systems will have to address their privacy issues to comply with new and upcoming data protection regulations. However, further research is still needed to identify feasible and cost-effective solutions.

Patients' Experiences of Accessing Their Electronic Health Records: National Patient Survey in Sweden.

BACKGROUND: Internationally, there is a movement toward providing patients a Web-based access to their electronic health records (EHRs). In Sweden, Region Uppsala was the first to introduce patient-accessible EHRs (PAEHRs) in 2012. By the summer of 2016, 17 of 21 county councils had given citizens Web-based access to their medical information. Studies on the effect of PAEHRs on the work environment of health care professionals have been conducted, but up until now, few extensive studies have been conducted regarding patients' experiences of using PAEHRs in Sweden or Europe, more generally. OBJECTIVE: The objective of our study was to investigate patients' experiences of accessing their EHRs through the Swedish national patient portal. In this study, we have focused on describing user characteristics, usage, and attitudes toward the system. METHODS: A national patient survey was designed, based on previous interview and survey studies with patients and health care professionals. Data were collected during a 5-month period in 2016. The survey was made available through the PAEHR system, called Journalen, in Sweden. The total number of patients that logged in and could access the survey during the study period was 423,141. In addition to descriptive statistics reporting response frequencies on Likert scale questions, Mann-Whitney tests, Kruskal-Wallis tests, and chi-square tests were used to compare answers between different county councils as well as between respondents working in health care and all other respondents. RESULTS: Overall, 2587 users completed the survey with a response rate of 0.61% (2587/423,141). Two participants were excluded from the analysis because they had only received care in a county council that did not yet show any information in Journalen. The results showed that 62.97% (1629/2587) of respondents were women and 39.81% (1030/2587) were working or had been working in health care. In addition, 72.08% (1794/2489) of respondents used Journalen about once a month, and the main reason for use was to gain an overview of one's health status. Furthermore, respondents reported that lab results were the most important information for them to access; 68.41% (1737/2539) of respondents wanted access to new information within a day, and 96.58% (2454/2541) of users reported that they are positive toward Journalen. CONCLUSIONS: In this study, respondents provided several important reasons for why they use Journalen and why it is important for them to be able to access information in this way-several related to patient empowerment, involvement, and security. Considering the overall positive attitude, PAEHRs seem to fill important needs for patients.

Timing It Right - Patients' Online Access to Their Record Notes in Sweden.

In Sweden, and internationally, there is an ongoing debate about the effects of national implementations of Patient Accessible Electronic Health Records (PAEHRs). The purpose of this paper was to describe the current situation in Sweden and compare this with the expectations on reasonable waiting time for information access of users of the Swedish PAEHR. Data were collected from publicly available resources regarding current implementation in the 21 county councils, contrasted with patient experiences, gathered from a national online survey. The results indicate that patients have high expectations on immediate access to information, while this varies greatly in implementation across Sweden.

Cancer patients' attitudes and experiences of online access to their electronic medical records: A qualitative study.

Patients' access to their online medical records serves as one of the cornerstones in the efforts to increase patient engagement and improve healthcare outcomes. The aim of this article is to provide in-depth understanding of cancer patients' attitudes and experiences of online medical records, as well as an increased understanding of the complexities of developing and launching e-Health services. The study result confirms that online access can help patients prepare for doctor visits and to understand their medical issues. In contrast to the fears of many physicians, the study shows that online access to medical records did not generate substantial anxiety, concerns or increased phone calls to the hospital.

Managing healthcare information: analyzing trust.

Purpose - The purpose of this paper is to analyze two case studies with a trust matrix tool, to identify trust issues related to electronic health records. Design/methodology/approach - A qualitative research approach is applied using two case studies. The data analysis of these studies generated a problem list, which was mapped to a trust matrix. Findings - Results demonstrate flaws in current practices and point to achieving balance between organizational, person and technology trust perspectives. The analysis revealed three challenge areas, to: achieve higher trust in patient-focussed healthcare; improve communication between patients and healthcare professionals; and establish clear terminology. By taking trust into account, a more holistic perspective on healthcare can be achieved, where trust can be obtained and optimized. Research limitations/implications - A trust matrix is tested and shown to identify trust problems on different levels and relating to trusting beliefs. Future research should elaborate and more fully address issues within three identified challenge areas. Practical implications - The trust matrix's usefulness as a tool for organizations to analyze trust problems and issues is demonstrated. Originality/value - Healthcare trust issues are captured to a greater extent and from previously unchartered perspectives.

Supporting Active Patient and Health Care Collaboration: A Prototype for Future Health Care Information Systems.

This article presents and illustrates the main features of a proposed process-oriented approach for patient information distribution in future health care information systems, by using a prototype of a process support system. The development of the prototype was based on the Visuera method, which includes five defined steps. The results indicate that a visualized prototype is a suitable tool for illustrating both the opportunities and constraints of future ideas and solutions in e-Health. The main challenges for developing and implementing a fully functional process support system concern both technical and organizational/management aspects.

Disturbing or facilitating?--on the Usability of Swedish eHealth Systems 2013.

As many evaluations show, healthcare organizations do not accomplish the intended effects of their eHealth systems due to inadequate usability. On behalf of the Swedish Ministry of Health and Social Affairs, the usability of current eHealth systems in Swedish healthcare have been analysed from the perspective of healthcare and social service professionals. The objective of the study was to report on current problems, potential solutions as well as to relate these to research in relevant areas. Using a participatory approach, seven workshops were held where researchers within health informatics collaborated with staff from different care providers, representatives of the national associations of health and social care professionals and the national eHealth system vendor organization. This paper presents a foundation for further development of eHealth systems, condensed into 10 issues that the Swedish health and social care professionals find imperative to improve. The study emphasizes that the development of eHealth systems is always a matter of organizational and process development and must be integrated into the care practice improvement process. Further, based on the findings, some identified challenges are discussed.