"We Have No Security Concerns": Understanding the Privacy-Security Nexus in Telehealth for Audiologists and Speech-Language Pathologists

Title of the Paper

“We Have No Security Concerns”: Understanding the Privacy-Security Nexus in Telehealth for Audiologists and Speech-Language Pathologists

Bibliographic Information

• Subject Area: Health Information Technology, Privacy and Security in Telehealth
• Keywords: Telehealth, Privacy, Security, User Research, Healthcare, Audiology, Speech-Language Pathology, Data Protection, HIPAA Compliance, Medical Technology

Research Background and Issues

• Research Question: With the rise of telehealth, privacy and security issues have become increasingly prominent, especially in small-scale medical practices with limited resources. These issues are particularly acute in auxiliary healthcare fields such as audiology and speech-language pathology.
• Significance: Telehealth offers convenience to patients, but its technological complexity and potential privacy and security vulnerabilities may undermine trust in patient data protection. Investigating these privacy-security issues can help improve the adoption and efficiency of telehealth.
• Motivation: Despite the widespread adoption of telehealth technologies, existing research has primarily focused on technological development, with limited exploration of healthcare professionals' perceptions and practices regarding privacy and security. This paper aims to fill this research gap.

Proposed Solutions

• Proposed Methods or Solutions:
  • Conduct semi-structured interviews with 20 audiology and speech-language pathology professionals to study the industry's understanding of privacy and security.
  • Provide actionable strategies based on identified issues, including methodological optimizations and behavior-driven solutions.
• Innovative Contributions:
  • This is the first in-depth study specifically focusing on privacy and security practices among audiology and speech-language pathology professionals in small, resource-constrained private practices.
  • It identifies unique challenges and opportunities in these practices, balancing technological convenience with privacy protection.
• Implementation Steps and Techniques:
  • Methodology: Participant recruitment, design and execution of semi-structured interviews, text analysis.
  • Technical Tools: Use of NVivo and MAXQDA for thematic coding analysis; Cohen's Kappa method to evaluate coding consistency.
  • Data Analysis Focus: Key themes such as patient data collection processes and authentication procedures, providers' security awareness, and patients' attitudes toward privacy.

Research Findings

• Key Findings:

  1. Diverse Understandings of Privacy and Security: Audiologists and speech-language pathologists exhibit varying levels of understanding and implementation of privacy and security. Many have limited awareness of telehealth privacy and security issues, relying on family members or non-technical individuals to address technical problems.
  2. Challenges in Patient Data Collection and Authentication: New patients often submit information via phone or email, and authentication systems in some private practices remain underdeveloped.
  3. Impact of Patient Behavior on Security: Some patients use telehealth in insecure environments (e.g., parking lots) or fail to properly configure health data privacy settings.
  4. Inconsistent Security Awareness Management: Some providers view security as the responsibility of third-party platforms, with trust in platform vendors varying based on individual practice environments.
  5. Diverse Patient Attitudes Toward Privacy: While some patients prioritize convenience over privacy, others, particularly those in sensitive professions, place a higher value on privacy.

• Advantages Over Existing Solutions:

  • Provides a detailed examination of the unique privacy and security issues in the fields of audiology and speech-language pathology.
  • Offers comprehensive recommendations combining education, training, and technological improvements.

• Experimental or Evaluation Results:

  • All study participants reported low overall patient trust in telehealth.
  • Security awareness training was seen as a potential way to reduce security risks, but no standardized or mandatory requirements currently exist.

• Limitations and Future Directions:

  • Limitations:
    • The sample is limited to private practices in the United States.
    • Gender imbalance (e.g., a high proportion of female speech-language pathologists) may introduce potential bias.
    • Reliance on qualitative methods means data is largely based on participants' recollections and self-reports.
  • Future Directions:
    • Expand the study to include healthcare practitioners from diverse professions and cultural backgrounds.
    • Incorporate patient perspectives to gain a bidirectional understanding of telehealth privacy and security issues.
    • Conduct longitudinal studies to observe long-term changes in privacy and security awareness.

In summary, this study provides valuable insights into the privacy and security challenges of telehealth in audiology and speech-language pathology, offering constructive recommendations for improving technological and behavioral responses.