Analysing perception of data security and privacy framework of patients’ data in Indian hospitals

Purpose This paper examines the perception of people involved in the management of patients’ data towards the security and privacy framework in Indian hospitals. The paper aims to identify the major weaknesses in the data management system and their implications for data administrators, government agencies and regulators. Design/methodology/approach The authors use a survey method to examine the perceived data security and privacy by assessing Vulnerabilities, Mitigation Strategies, Incident Response and Compliance in the data management systems of 132 hospitals in India with 496 respondents deploying an SEM Model. Findings Results indicate that trust among patients and other healthcare partners is disintegrating. The authors also find a dire need for training data management staff, replacing technological infrastructure, properly implementing regulations and synchronising knowledge of data breaches between government agencies and data administrators. Originality/value This paper is probably the first attempt at researching this area in the Indian context. This research has important managerial implications for Indian hospitals that need to transform their operational models and invest in digital infrastructure upgrades. This research also has significant policy implications for the Health Ministry and other regulators. Government authorities can evolve a portal for continuous patient feedback and grievances in a data security context. In addition, public awareness programs on data security aspects may be conducted regularly for society’s benefit.