{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,1,28]],"date-time":"2026-01-28T22:41:42Z","timestamp":1769640102090,"version":"3.49.0"},"reference-count":68,"publisher":"Informa UK Limited","issue":"4","funder":[{"name":"funding associated with the work featured in this article"}],"content-domain":{"domain":["www.tandfonline.com"],"crossmark-restriction":true},"short-container-title":["Information Security Journal: A Global Perspective"],"published-print":{"date-parts":[[2023,7,4]]},"DOI":"10.1080\/19393555.2021.2003914","type":"journal-article","created":{"date-parts":[[2021,11,17]],"date-time":"2021-11-17T11:01:42Z","timestamp":1637146902000},"page":"266-282","update-policy":"https:\/\/doi.org\/10.1080\/tandf_crossmark_01","source":"Crossref","is-referenced-by-count":2,"title":["Security and privacy consideration for the deployment of electronic health records: a qualitative study covering Greece and Oman"],"prefix":"10.1080","volume":"32","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-2659-7138","authenticated-orcid":false,"given":"Ourania","family":"Koutzampasopoulou Xanthidou","sequence":"first","affiliation":[{"name":"Brunel University","place":["London, UK"]}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1349-5749","authenticated-orcid":false,"given":"Dimitrios","family":"Xanthidis","sequence":"additional","affiliation":[{"name":"Higher Colleges of Technology, Dubai Men\u2019s College","place":["Dubai, UAE"]}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0057-8374","authenticated-orcid":false,"given":"Christos","family":"Manolas","sequence":"additional","affiliation":[{"name":"Ravensbourne University","place":["London, UK"]}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3521-993X","authenticated-orcid":false,"given":"Han-I","family":"Wang","sequence":"additional","affiliation":[{"name":"University of York","place":["York, UK"]}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"301","published-online":{"date-parts":[[2021,11,17]]},"reference":[{"key":"e_1_3_2_2_1","unstructured":"American Academy of Family Physicians. (2015). Understanding features & functions of an EHR. AAFP. http:\/\/www.aafp.org\/practice-management\/health-it\/product\/features-functions.html"},{"key":"e_1_3_2_3_1","unstructured":"Anders J. & Daly T. (2009). The crucial role of the nurse in EHR implementation. Whitepapers. http:\/\/blr.healthleadersmedia.com\/content\/242945.pdf"},{"key":"e_1_3_2_4_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.elerap.2013.10.003"},{"key":"e_1_3_2_5_1","doi-asserted-by":"publisher","DOI":"10.1136\/bmj.322.7294.1115"},{"key":"e_1_3_2_6_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.ophtha.2013.04.029"},{"key":"e_1_3_2_7_1","doi-asserted-by":"publisher","DOI":"10.1145\/2145204.2145341"},{"key":"e_1_3_2_8_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijmedinf.2013.05.010"},{"key":"e_1_3_2_9_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.ophtha.2008.03.024"},{"key":"e_1_3_2_10_1","unstructured":"CIA Central Intelligence Agency. (2016). The world factbook. https:\/\/www.cia.gov\/library\/publications\/the-world-factbook\/fields\/2122.html"},{"key":"e_1_3_2_11_1","volume-title":"Business research methods","author":"Cooper D. R.","year":"2014","unstructured":"Cooper, D. R., Schindler, P. S., & Sun, J. (2014). Business research methods (Vol. 9). Mcgraw-hill."},{"key":"e_1_3_2_12_1","volume-title":"Research design: Qualitative, quantitative, and mixed methods approaches","author":"Creswell J. W.","year":"2013","unstructured":"Creswell, J. W., & Creswell, J. D. (2013). Research design: Qualitative, quantitative, and mixed methods approaches (4th ed.). Sage publications.","edition":"4"},{"key":"e_1_3_2_13_1","volume-title":"Qualitative inquiry and research design: Choosing among five approaches","author":"Creswell J. W.","year":"2017","unstructured":"Creswell, J. W., & Poth, C. N. (2017). Qualitative inquiry and research design: Choosing among five approaches (4th ed.). Sage publications.","edition":"4"},{"key":"e_1_3_2_14_1","volume-title":"Guide to Privacy and Security of Health Information","author":"Department of Health & Human Services USA","year":"2015","unstructured":"Department of Health & Human Services USA. (2015). Guide to Privacy and Security of Health Information HealthIT.gov. https:\/\/www.healthit.gov\/sites\/default\/files\/pdf\/privacy\/privacy-and-security-guide.pdf."},{"key":"e_1_3_2_15_1","unstructured":"Eberhardt S. P. (1997). Computer system and method for storing medical histories using a carrying size card (Patent No. patent number: US5659741A). https:\/\/patents.google.com\/patent\/US5659741A\/en"},{"key":"e_1_3_2_16_1","doi-asserted-by":"publisher","DOI":"10.1145\/1118890.1118891"},{"key":"e_1_3_2_17_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.is.2014.05.004"},{"key":"e_1_3_2_18_1","doi-asserted-by":"publisher","DOI":"10.1007\/s10916-009-9370-x"},{"key":"e_1_3_2_19_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijmedinf.2011.12.008"},{"key":"e_1_3_2_20_1","first-page":"1","article-title":"Electronic health records: An international perspective on\u201d meaningful use\u201d","volume":"28","author":"Gray B. H.","year":"2011","unstructured":"Gray, B. H., Bowden, T., Johansen, I. B., & Koch, S. (2011). Electronic health records: An international perspective on\u201d meaningful use\u201d. Issue Brief (Commonwealth Fund), 28, 1\u201318 https:\/\/europepmc.org\/article\/med\/22164356.","journal-title":"Issue Brief (Commonwealth Fund)"},{"key":"e_1_3_2_21_1","volume-title":"Federal Register-Nationa Archives and Records Administration. Document Citation: 75 FR 44589, CFR: 45 CFR 170, RIN: 0991-AB58, Document number: 2010-17210.","author":"Health Information Technology: Initial Set of Standards, Implementation Specifications, and Certification Criteria for Electronic Health Record Technology,","year":"2010","unstructured":"Health Information Technology: Initial Set of Standards, Implementation Specifications, and Certification Criteria for Electronic Health Record Technology, Federal Register-Nationa Archives and Records Administration. Document Citation: 75 FR 44589, CFR: 45 CFR 170, RIN: 0991-AB58, Document number: 2010-17210. Retrieved from https:\/\/www.federalregister.gov\/documents\/2010\/07\/28\/2010-17210\/health-information-technology-initial-set-of-standards-implementation-specifications-and.Accessed day: 10\/11\/2021. (2010)"},{"key":"e_1_3_2_22_1","unstructured":"HealthIT.gov. (n.d.). Health IT legislation. USA.Gov. https:\/\/www.healthit.gov\/policy-researchers-implementers\/health-it-legislation"},{"key":"e_1_3_2_23_1","doi-asserted-by":"publisher","DOI":"10.1136\/amiajnl-2012-000907"},{"key":"e_1_3_2_24_1","unstructured":"HITECH. (n.d.). Hitech act enforcement interim final rules. HHS.Gov. http:\/\/www.hhs.gov\/hipaa\/for-professionals\/special-topics\/HITECH-act-enforcement-interim-final-rule\/index.html"},{"key":"e_1_3_2_25_1","first-page":"1","article-title":"Description of eHealth solution","author":"HYGEIAnet","year":"2004","unstructured":"HYGEIAnet. (2004). Description of eHealth solution. Regional Health Information Network of Crete, 1\u20134. http:\/\/www.ics.forth.gr\/publicity\/ics_representation\/hygeia-net.pdf.","journal-title":"Regional Health Information Network of Crete"},{"key":"e_1_3_2_26_1","unstructured":"ICSA Labs. (2015). Advanced data systems corporation. Advanced Data Systems Corporation. http:\/\/healthcare.adsc.com\/blog\/bid\/178697\/The-Role-of-Insurance-Companies-in-EHR-Medical-Billing-Software"},{"issue":"2","key":"e_1_3_2_27_1","first-page":"32","article-title":"Connecting your LIS and EHR","volume":"44","author":"Kasoff J","year":"2012","unstructured":"Kasoff, J. (2012). Connecting your LIS and EHR. MLO: Medical Laboratory Observer, 44 (2), 32\u201333. http:\/\/www.mlo-online.com\/articles\/201202\/connecting-your-lis-and-ehr.php.","journal-title":"MLO: Medical Laboratory Observer"},{"key":"e_1_3_2_28_1","unstructured":"KHPA Kansas Health Policy Authority. (2008). Implementation of plastic medical cards (memorandum). Kansas: HealthWave Clearinghouse. https:\/\/khap2.kdhe.state.ks.us\/kfmam\/policydocs\/plasticmedicalcardimpmemo8-22-08.pdf"},{"key":"e_1_3_2_29_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.clsr.2011.07.013"},{"key":"e_1_3_2_30_1","doi-asserted-by":"publisher","DOI":"10.3390\/ijerph15061137"},{"key":"e_1_3_2_31_1","doi-asserted-by":"publisher","DOI":"10.1371\/journal.pone.0040200"},{"key":"e_1_3_2_32_1","doi-asserted-by":"publisher","DOI":"10.25300\/MISQ\/2014\/38.2.06"},{"key":"e_1_3_2_33_1","doi-asserted-by":"publisher","DOI":"10.3233\/978-1-61499-078-9-105"},{"key":"e_1_3_2_34_1","doi-asserted-by":"publisher","DOI":"10.1080\/07421222.1995.11518075"},{"key":"e_1_3_2_35_1","doi-asserted-by":"publisher","DOI":"10.1145\/2658983"},{"key":"e_1_3_2_36_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2014.10.014"},{"key":"e_1_3_2_37_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijmedinf.2008.06.005"},{"key":"e_1_3_2_38_1","article-title":"NASA cybersecurity: an examination of the agency\u2019s","author":"Martin P.","year":"2012","unstructured":"Martin, P. (2012). NASA cybersecurity: an examination of the agency\u2019s. Information Security h\u2006ttps:\/\/oig.n\u2006asa.gov\/docs\/FINAL_written_statement_for_ IT_ hearing_February_26_edit_v2.pdf.","journal-title":"Information Security"},{"key":"e_1_3_2_39_1","unstructured":"Matthews A. (2016). Police arrest a 15-year-old glasgow schoolboy on suspicion of hacking into the FBI\u2019s top-secret computer system. Mailonline. https:\/\/www.dailymail.co.uk\/news\/article-3452774\/FBI-arrest-15-year-old-Glasgow-schoolboy-suspicion-hacking-secret-computer-system.html"},{"key":"e_1_3_2_40_1","volume-title":"Qualitative research design: An interactive approach","author":"Maxwell J. A","year":"2013","unstructured":"Maxwell, J. A. (2013). Qualitative research design: An interactive approach (Vol. 41, 3rd ed.). Sage publications.","edition":"3"},{"key":"e_1_3_2_41_1","doi-asserted-by":"publisher","DOI":"10.1136\/bmj.320.7226.50"},{"key":"e_1_3_2_42_1","doi-asserted-by":"publisher","DOI":"10.1002\/asi.20416"},{"key":"e_1_3_2_43_1","volume-title":"Qualitative data analysis: An expanded sourcebook","author":"Miles M. B.","year":"1994","unstructured":"Miles, M. B., & Huberman, A. M. (1994). Qualitative data analysis: An expanded sourcebook. sage."},{"key":"e_1_3_2_44_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijmedinf.2010.03.004"},{"key":"e_1_3_2_45_1","unstructured":"nyc.gov\/health. (2015). What do electronic health records mean for our practive? http:\/\/www.nyc.gov\/html\/doh\/html\/pcip\/pcip.shtml"},{"key":"e_1_3_2_46_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijmedinf.2008.01.002"},{"key":"e_1_3_2_47_1","unstructured":"Passarani I. (2013). Patient access to Electronic Health Records. in \u201cReport of the eHealth Stakeholder Group\u201d BEUC."},{"key":"e_1_3_2_48_1","unstructured":"Record Demographics. (2014). https:\/\/www.healthit.gov\/providers-professionals\/achieve-meaningful-use\/core-measures-2\/record-demographics"},{"key":"e_1_3_2_49_1","doi-asserted-by":"publisher","DOI":"10.1097\/cin.0000000000000042"},{"key":"e_1_3_2_50_1","doi-asserted-by":"publisher","DOI":"10.1197\/jamia.M2273"},{"key":"e_1_3_2_51_1","doi-asserted-by":"publisher","DOI":"10.1080\/14780887.2013.853855"},{"key":"e_1_3_2_52_1","doi-asserted-by":"publisher","DOI":"10.1002\/asi.22635"},{"key":"e_1_3_2_53_1","doi-asserted-by":"publisher","DOI":"10.2307\/248922"},{"key":"e_1_3_2_54_1","doi-asserted-by":"publisher","DOI":"10.17705\/1CAIS.01324"},{"key":"e_1_3_2_55_1","doi-asserted-by":"publisher","DOI":"10.47102\/annals-acadmedsg.V38N6p494"},{"key":"e_1_3_2_56_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.im.2013.09.007"},{"key":"e_1_3_2_57_1","unstructured":"U.S. Department of Health & Human Services. (2021 Security Rule Guidance Material . HHS.Gov. https:\/\/www.hhs.gov\/hipaa\/for-professionals\/security\/guidance\/index.html)."},{"key":"e_1_3_2_58_1","unstructured":"Vanelli J. (2000). Medical information card reader (Patent No. Patent number: D426833). https:\/\/patents.justia.com\/inventor\/john-vanelli"},{"key":"e_1_3_2_59_1","volume-title":"Managing health care information systems: A practical approach for health care executives","author":"Wager K. A.","year":"2005","unstructured":"Wager, K. A., Lee, F. W., & Glaser, J. P. (2005). Managing health care information systems: A practical approach for health care executives. John Wiley & Sons."},{"key":"e_1_3_2_60_1","unstructured":"Walker T. & Madden M. (2004). Patient encounter electronic medical record system method and computer product (Patent No. Patent number: US20040128323A1). https:\/\/patents.google.com\/patent\/US20040128323"},{"key":"e_1_3_2_61_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijmedinf.2005.08.009"},{"key":"e_1_3_2_62_1","unstructured":"Wilson C. (1999). 15-year-old admits hacking NASA computers abcNews Network . https:\/\/abcnews.go.com\/Technology\/story?id=119423&page=1"},{"key":"e_1_3_2_63_1","unstructured":"World Economic Situation and Prospects. (2012). Country classification data sources country classifications and aggregation methodology. http:\/\/www.un.org\/en\/development\/desa\/policy\/wesp\/wesp_current\/2012country_class.pdf"},{"key":"e_1_3_2_64_1","volume-title":"Electronic health records: Manual for developing countries","author":"World Health Organization","year":"2006","unstructured":"World Health Organization. (2006). Electronic health records: Manual for developing countries. WHO Regional Office for the Western Pacific."},{"issue":"1","key":"e_1_3_2_65_1","first-page":"11","article-title":"Online database system for patients data Organization","volume":"2","author":"Xanthidis D.","year":"2012","unstructured":"Xanthidis, D., & Aleisa, E. A. (2012). Online database system for patients data Organization. Journal of Information Organization, 2(1), 11 https:\/\/www.dline.info\/jio\/fulltext\/v1n1\/2.pdf.","journal-title":"Journal of Information Organization"},{"key":"e_1_3_2_66_1","first-page":"445","article-title":"A framework for the deployment of an electronic medical record ecosystem","author":"Xanthidis D.","year":"2019","unstructured":"Xanthidis, D., & Koutzampasopoulou Xanthidou, O. (2019). A framework for the deployment of an electronic medical record ecosystem. SYSCON 2019 445\u2013449 https:\/\/www.researchgate.net\/publication\/332265288_A_Framework_for_the_Deployment_of_an_Electronic_Medical_Record_ecosystem.","journal-title":"SYSCON 2019"},{"issue":"2","key":"e_1_3_2_67_1","first-page":"273","article-title":"Security, privacy, accessibility and availability issues addressed when developing websties in the GCC","volume":"88","author":"Xanthidis D.","year":"2016","unstructured":"Xanthidis, D., & Violettas, G. (2016). Security, privacy, accessibility and availability issues addressed when developing websties in the GCC. Journal of Theoretical and Applied Information Technology, 88(2), 273.","journal-title":"Journal of Theoretical and Applied Information Technology"},{"key":"e_1_3_2_68_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijmedinf.2012.08.004"},{"key":"e_1_3_2_69_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijmedinf.2011.12.002"}],"container-title":["Information Security Journal: A Global Perspective"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.tandfonline.com\/doi\/pdf\/10.1080\/19393555.2021.2003914","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,4,14]],"date-time":"2025-04-14T08:48:18Z","timestamp":1744620498000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.tandfonline.com\/doi\/full\/10.1080\/19393555.2021.2003914"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,11,17]]},"references-count":68,"journal-issue":{"issue":"4","published-print":{"date-parts":[[2023,7,4]]}},"alternative-id":["10.1080\/19393555.2021.2003914"],"URL":"https:\/\/doi.org\/10.1080\/19393555.2021.2003914","relation":{},"ISSN":["1939-3555","1939-3547"],"issn-type":[{"value":"1939-3555","type":"print"},{"value":"1939-3547","type":"electronic"}],"subject":[],"published":{"date-parts":[[2021,11,17]]},"assertion":[{"value":"The publishing and review policy for this title is described in its Aims & Scope.","order":1,"name":"peerreview_statement","label":"Peer Review Statement"},{"value":"http:\/\/www.tandfonline.com\/action\/journalInformation?show=aimsScope&journalCode=uiss20","URL":"http:\/\/www.tandfonline.com\/action\/journalInformation?show=aimsScope&journalCode=uiss20","order":2,"name":"aims_and_scope_url","label":"Aim & Scope"},{"value":"2021-11-17","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}