Influence of trust on hospital staff compliance with the data protection act, moderated by noncompliance costs – a Ugandan case study

Purpose The increasing emphasis on data privacy in healthcare underscores the importance of adherence to regulations such as the Uganda Data Protection and Privacy Act (DPPA). As hospitals utilize Electronic Health Information Systems (EHIS), understanding the factors that influence compliance with the DPPA becomes critical. This study aims to explore how trust and the perceived cost of noncompliance affect adherence to the DPPA among hospital staff. By examining these relationships, the research seeks to provide insights into how healthcare institutions can enhance regulatory compliance and protect patient information. Design/methodology/approach Employing a cross-sectional quantitative design, this study surveyed 309 hospital staff from three Ugandan facilities. Data were collected using a structured questionnaire that assessed trust, perceived costs of noncompliance and DPPA compliance. Multiple linear regression analysis was conducted using the SPSS statistical software to evaluate the influence of trust and noncompliance costs on DPPA adherence and to investigate the moderating effect of noncompliance costs on the trust-compliance relationship. Findings The analysis shows that both trust and perceived noncompliance costs significantly influence compliance with the DPPA, with noncompliance costs also moderating the trust-compliance relationship. These factors are crucial in driving adherence to data protection regulations. Originality/value This study contributes by offering new insights into the role of trust and noncompliance costs on data protection regulation compliance. By demonstrating the moderating role of noncompliance costs within the nexus of trust and compliance, this paper extends the regulatory compliance theories and actionable recommendations to the health sector for improvement in data protection practices.