Impact of Information security policy compliance on protecting patient privacy: mediating role of SETA program
Abdulkadir Jeilani, Titik Khawa Abdul Rahman, Ali Dahir · Information Security Journal A Global Perspective · 2025
In the realm of healthcare, safeguarding patient privacy is paramount, necessitating robust information security measures. The study investigated the mediating role of Security Education, Training, and Awareness (SETA) programs in the relationship between Information Security Policy Compliance (ISPC) and Patient Privacy Protection (PPP). Grounded in Protection Motivation Theory (PMT), the research aims to elucidate how SETA programs influence employees’ compliance behaviors and, subsequently, the protection of patient privacy. Employing a quantitative research design and stratified random sampling technique, data were collected from 252 healthcare professionals through structured questionnaires only 242 responses were valid after filtering process. Structural equation modeling (SEM) was utilized to assess the measurement and structural models. The findings reveal that SETA programs significantly enhance ISPC, which in turn positively impacts PPP, confirming the mediating role of ISPC. These results highlighted the efficacy of SETA programs in fostering a security-conscious culture within healthcare organizations. The implications of these findings and the limitations of the study are discussed.