{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,21]],"date-time":"2026-02-21T00:48:33Z","timestamp":1771634913548,"version":"3.50.1"},"reference-count":54,"publisher":"Emerald","issue":"1","license":[{"start":{"date-parts":[[2008,3,21]],"date-time":"2008-03-21T00:00:00Z","timestamp":1206057600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.emerald.com\/insight\/site-policies"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2008,3,21]]},"abstract":"<jats:sec><jats:title content-type=\"abstract-heading\">Purpose<\/jats:title><jats:p>The Health Insurance Portability and Accountability Act (HIPAA) is US legislation aimed at protecting patient information privacy, but it imposes a significant burden on healthcare employees, especially since the privacy provisions are still evolving and healthcare organizations are still struggling to meet compliance criteria. This study seeks to illuminate characteristics of both the environment (organization) and the individual (healthcare professional) and their relevant influence on compliance intentions by leveraging theories from the domains of social psychology, management, and information systems.<\/jats:p><\/jats:sec><jats:sec><jats:title content-type=\"abstract-heading\">Design\/methodology\/approach<\/jats:title><jats:p>A study of 208 healthcare professionals located at healthcare facilities throughout the USA were surveyed as to their perceptions regarding HIPAA compliance and the underlying organizational and individual factors that influence said compliance.<\/jats:p><\/jats:sec><jats:sec><jats:title content-type=\"abstract-heading\">Findings<\/jats:title><jats:p>The findings indicate that perceptions of organizational support and self\u2010efficacy (SE) leading to HIPAA compliance vary based on organizational and occupational characteristics. Furthermore, these perceptions of organizational support and SE explain some of the differences in their intent to comply with this legislation.<\/jats:p><\/jats:sec><jats:sec><jats:title content-type=\"abstract-heading\">Research limitations\/implications<\/jats:title><jats:p>For healthcare managers, the findings of this research may serve to validate HIPAA compliance initiatives. Through increased attention and resources dedicated to providing a supportive environment for HIPAA compliance, healthcare managers can increase the likelihood of compliance success by improving employee SE.<\/jats:p><\/jats:sec><jats:sec><jats:title content-type=\"abstract-heading\">Originality\/value<\/jats:title><jats:p>This paper represents the first empirical study to account for environmental factors and their influence on individual intentions to comply with HIPAA.<\/jats:p><\/jats:sec>","DOI":"10.1108\/09685220810862715","type":"journal-article","created":{"date-parts":[[2008,4,5]],"date-time":"2008-04-05T07:10:45Z","timestamp":1207379445000},"page":"5-19","source":"Crossref","is-referenced-by-count":31,"title":["Information privacy compliance in the healthcare industry"],"prefix":"10.1108","volume":"16","author":[{"given":"Allen C.","family":"Johnston","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Merrill","family":"Warkentin","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"140","reference":[{"key":"key2022020519542199400_b1","unstructured":"Ajzen, I. (1980), Understanding the Attitudes and Predicting Social Behavior, Prentice\u2010Hall, Englewood Cliffs, NJ."},{"key":"key2022020519542199400_b2","doi-asserted-by":"crossref","unstructured":"Ajzen, I. (1985), \u201cFrom intentions to actions: a theory of planned behavior\u201d, in Kuhl, J. and Beckman, J. (Eds), Action\u2010control: From Cognition to Behavior, Springer, Heidelberg, pp. 11\u201039.","DOI":"10.1007\/978-3-642-69746-3_2"},{"key":"key2022020519542199400_b3","doi-asserted-by":"crossref","unstructured":"Bandura, A. (1977), \u201cSelf\u2010efficacy: toward a unifying theory of behavioral change\u201d, Psychological Review, Vol. 84 No. 2, pp. 191\u2010215.","DOI":"10.1037\/0033-295X.84.2.191"},{"key":"key2022020519542199400_b4","doi-asserted-by":"crossref","unstructured":"Bretschneider, S. (1990), \u201cManagement information systems in public and private organizations: an empirical test\u201d, Public Administration Review, Vol. 50 No. 5, pp. 536\u201045.","DOI":"10.2307\/976784"},{"key":"key2022020519542199400_b5","doi-asserted-by":"crossref","unstructured":"Bruning, S.D., DeMiglio, P.A. and Embry, K. (2006), \u201cMutual benefit as outcome indicator: factors influencing perceptions of benefit in organization\u2010public relationships\u201d, Public Relations Review, Vol. 32 No. 1, pp. 33\u201040.","DOI":"10.1016\/j.pubrev.2005.10.005"},{"key":"key2022020519542199400_b6","doi-asserted-by":"crossref","unstructured":"Burke, R.J. (2001), \u201cRestructuring stressors and perceived hospital effectiveness\u201d, Nursing Leadership, Vol. 14 No. 1, pp. 21\u20106.","DOI":"10.12927\/cjnl.2001.16307"},{"key":"key2022020519542199400_b7","doi-asserted-by":"crossref","unstructured":"Campbell, D.T. and Fiske, D.W. (1959), \u201cConvergent and discriminant validation by the multitrait\u2010multimethod matrix\u201d, Psychological Bulletin, Vol. 56 No. 2, pp. 81\u2010105.","DOI":"10.1037\/h0046016"},{"key":"key2022020519542199400_b8","unstructured":"Chin, W. (1998), \u201cThe partial least squares approach to structural equation modeling\u201d, in Marcoulides, G.A. (Ed.), Modern Methods for Business Research, Lawrence Erlbaum Associates, Mahwah, pp. 295\u2010336."},{"key":"key2022020519542199400_b9","doi-asserted-by":"crossref","unstructured":"Connell, N.A.D. and Young, T.P. (2007), \u201cEvaluating healthcare information systems through an enterprise perspective\u201d, Information & Management, Vol. 44 No. 4, pp. 433\u201040.","DOI":"10.1016\/j.im.2007.04.002"},{"key":"key2022020519542199400_b10","doi-asserted-by":"crossref","unstructured":"Dantu, R., Oosterwijk, H., Kolan, P. and Husna, H. (2007), \u201cSecuring medical networks\u201d, Network Security, Vol. 6, pp. 13\u201016.","DOI":"10.1016\/S1353-4858(07)70055-7"},{"key":"key2022020519542199400_b11","doi-asserted-by":"crossref","unstructured":"Eisenberger, R., Huntington, R., Hutchinson, S. and Sowa, D. (1986), \u201cPerceived organizational support\u201d, Journal of Applied Psychology, Vol. 71 No. 3, pp. 500\u20107.","DOI":"10.1037\/0021-9010.71.3.500"},{"key":"key2022020519542199400_b12","doi-asserted-by":"crossref","unstructured":"Eisenberger, R., Stinglhamer, F., Vandenberghe, C. and Sucharski, I. (2002), \u201cPerceived supervisor support: contributions to perceived organizational support and employee retention\u201d, Journal of Applied Psychology, Vol. 87 No. 4, pp. 565\u201073.","DOI":"10.1037\/0021-9010.87.3.565"},{"key":"key2022020519542199400_b13","doi-asserted-by":"crossref","unstructured":"Fedorowicz, J. and Ray, A.W. (2004), \u201cImpact of HIPAA on the integrity of healthcare information\u201d, International Journal of Healthcare Technology and Management, Vol. 6 No. 2, pp. 142\u201057.","DOI":"10.1504\/IJHTM.2004.004954"},{"key":"key2022020519542199400_b14","doi-asserted-by":"crossref","unstructured":"Fogarty, K. (2006), \u201cStitching up health records: privacy compliance lags\u201d, eWeek, available at: www.eweek.com\/article2\/0,1896,1949646,00.asp (accessed April 26, 2006).","DOI":"10.32473\/edis-fy848-2006"},{"key":"key2022020519542199400_b15","doi-asserted-by":"crossref","unstructured":"Gefen, D. and Straub, D. (2005), \u201cA practical guide to factorial validity using PLS\u2010Graph: tutorial and annotated example\u201d, Communications of the AIS, Vol. 16 No. 5, pp. 91\u2010109.","DOI":"10.17705\/1CAIS.01605"},{"key":"key2022020519542199400_b21","unstructured":"Holzer, M. (1986), \u201cWorkforce reduction and productivity\u201d, Public Administration Quarterly, Vol. 10, pp. 86\u201098."},{"key":"key2022020519542199400_b17","doi-asserted-by":"crossref","unstructured":"Jago, A.G. and Vroom, V.H. (1978), \u201cPredicting leader behavior from a measure of behavioral intent\u201d, Academy of Management Journal, Vol. 21 No. 5, pp. 715\u201023.","DOI":"10.5465\/255711"},{"key":"key2022020519542199400_b18","doi-asserted-by":"crossref","unstructured":"Kaplan, B. (1987), \u201cThe medical computing \u2018lag\u2019: perceptions of barriers to the application of computers to medicine\u201d, International Journal of Assessment Health Care, Vol. 3 No. 1, pp. 123\u20106.","DOI":"10.1017\/S026646230001179X"},{"key":"key2022020519542199400_b22","doi-asserted-by":"crossref","unstructured":"Karl, K.A. and Sutton, C.L. (1998), \u201cJob values in today's workforce: a comparison of public and private sector employees\u201d, Public Personnel Management, Vol. 27 No. 4, pp. 515\u201030.","DOI":"10.1177\/009102609802700406"},{"key":"key2022020519542199400_b19","unstructured":"Kilroy, J. (2000), \u201cTriple play \u2013 company operations\u201d, Health Management Technology, Vol. 21, pp. 36\u20107."},{"key":"key2022020519542199400_b20","doi-asserted-by":"crossref","unstructured":"Koslowsky, M., Kluger, A.N. and Yinon, Y. (1988), \u201cPredicting behavior: combining intention with investment\u201d, Journal of Applied Psychology, Vol. 73 No. 1, pp. 102\u20106.","DOI":"10.1037\/0021-9010.73.1.102"},{"key":"key2022020519542199400_b54","doi-asserted-by":"crossref","unstructured":"Kwon, I\u2010W.G. and Banks, D.W. (2004), \u201cFactors related to the organizational and professional commitment of internal auditors\u201d, Managerial Auditing Journal, Vol. 19 No. 5.","DOI":"10.1108\/02686900410537748"},{"key":"key2022020519542199400_b26","doi-asserted-by":"crossref","unstructured":"Loch, K.D., Straub, D.W. and Kamel, S. (2003), \u201cDiffusing the internet in the Arab world: the role of social norms and technological culturation\u201d, IEEE Transactions on Engineering Management, Vol. 50 No. 1, pp. 45\u201064.","DOI":"10.1109\/TEM.2002.808257"},{"key":"key2022020519542199400_b24","doi-asserted-by":"crossref","unstructured":"Lu, L., Leung, K. and Koch, P.T. (2006), \u201cManagerial knowledge sharing: the role of individual, interpersonal, and organizational factors\u201d, Management and Organization Review, Vol. 2 No. 1, pp. 15\u201041.","DOI":"10.1111\/j.1740-8784.2006.00029.x"},{"key":"key2022020519542199400_b30","doi-asserted-by":"crossref","unstructured":"McCaughan, E. and Parahoo, K. (2000), \u201cMedical and surgical nurses' perceptions of their level of competence and educational needs in caring for patients with cancer\u201d, Journal of Clinical Nursing, Vol. 9, pp. 420\u20108.","DOI":"10.1046\/j.1365-2702.2000.00403.x"},{"key":"key2022020519542199400_b27","doi-asserted-by":"crossref","unstructured":"Marakas, G.M., Yi, M.Y. and Johnson, R.D. (1998), \u201cThe multilevel and multifaceted character of computer self\u2010efficacy: toward clarification of the construct and an integrative framework for research\u201d, Information Systems Research, Vol. 9 No. 2, pp. 126\u201063.","DOI":"10.1287\/isre.9.2.126"},{"key":"key2022020519542199400_b28","doi-asserted-by":"crossref","unstructured":"Mathieu, J.E., Martineau, J.W. and Tannenbaum, S.I. (1993), \u201cIndividual and situational influences on the development of self\u2010efficacy: implications for training effectiveness\u201d, Personnel Psychology, Vol. 46, pp. 125\u201047.","DOI":"10.1111\/j.1744-6570.1993.tb00870.x"},{"key":"key2022020519542199400_b29","doi-asserted-by":"crossref","unstructured":"Maurer, T.J., Pierce, H.R. and Shore, L.M. (2002), \u201cPerceived beneficiary of employee development activity: a three\u2010dimensional social exchange model\u201d, Academy of Management Review, Vol. 27 No. 3, pp. 432\u201044.","DOI":"10.5465\/amr.2002.7389930"},{"key":"key2022020519542199400_b31","doi-asserted-by":"crossref","unstructured":"Mercuri, R.T. (2004), \u201cThe HIPAA\u2010potamus in health care data security\u201d, Communications of the ACM, Vol. 47 No. 7, pp. 25\u20108.","DOI":"10.1145\/1005817.1005840"},{"key":"key2022020519542199400_b32","doi-asserted-by":"crossref","unstructured":"Mone, M.A., McKinley, W. and Barker, V.L. III (1998), \u201cOrganizational decline and innovation: a contingency framework\u201d, Academy of Management Review, Vol. 23 No. 1, pp. 115\u201032.","DOI":"10.5465\/amr.1998.192965"},{"key":"key2022020519542199400_b33","doi-asserted-by":"crossref","unstructured":"Mueller, G.C., McKinley, W., Mone, M.A. and Barker, V.L. III (2001), \u201cOrganizational decline \u2013 a stimulus for innovation?\u201d, Business Horizons, Vol. 44 No. 6, pp. 25\u201035.","DOI":"10.1016\/S0007-6813(01)80070-7"},{"key":"key2022020519542199400_b34","unstructured":"Myer, M.W. (1979), Change in Pubic Bureaucracies, Cambridge University Press, London."},{"key":"key2022020519542199400_b35","doi-asserted-by":"crossref","unstructured":"Rainey, H.G. (1979), \u201cPerceptions of incentives in business and government: implications for civil service reform\u201d, Public Administration Review, Vol. 39 No. 5, pp. 440\u20108.","DOI":"10.2307\/3109918"},{"key":"key2022020519542199400_b36","doi-asserted-by":"crossref","unstructured":"Rainey, H.G. (1983), \u201cPublic agencies and private firms: incentive structures, goals and individual roles\u201d, Administration and Society, Vol. 15 No. 2, pp. 207\u201042.","DOI":"10.1177\/009539978301500203"},{"key":"key2022020519542199400_b37","doi-asserted-by":"crossref","unstructured":"Rhoades, L. and Eisenberger, R. (2002), \u201cPerceived organizational support: a review of the literature\u201d, Journal of Applied Psychology, Vol. 87 No. 4, pp. 698\u2010714.","DOI":"10.1037\/0021-9010.87.4.698"},{"key":"key2022020519542199400_b38","doi-asserted-by":"crossref","unstructured":"Rhoades, L., Eisenberger, R. and Armeli, S. (2001), \u201cAffective commitment of the organization: the contribution of perceived organizational support\u201d, Journal of Applied Psychology, Vol. 86 No. 5, pp. 825\u201036.","DOI":"10.1037\/0021-9010.86.5.825"},{"key":"key2022020519542199400_b39","doi-asserted-by":"crossref","unstructured":"Richardson, M., Tailby, S., Danford, A., Stewart, P. and Upchurch, M. (2005), \u201cBest value and workplace partnership in local government\u201d, Personnel Review, Vol. 34 No. 6, pp. 713\u201028.","DOI":"10.1108\/00483480510623484"},{"key":"key2022020519542199400_b40","doi-asserted-by":"crossref","unstructured":"Robinson, T. (2005), \u201cData security in the age of compliance\u201d, netWorker, Vol. 9 No. 3, pp. 24\u201030.","DOI":"10.1145\/1086762.1086764"},{"key":"key2022020519542199400_b41","doi-asserted-by":"crossref","unstructured":"Setoon, T., Muldrow, T.W., Buckley, T. and Schay, B.W. (2002), \u201cCreating high\u2010performance organizations in the public sector\u201d, Human Resource Management, Vol. 41 No. 3, pp. 341\u201054.","DOI":"10.1002\/hrm.10045"},{"key":"key2022020519542199400_b42","doi-asserted-by":"crossref","unstructured":"Smith, M.P. and Nock, S.L. (1980), \u201cSocial class and the quality of life in public and private organizations\u201d, Journal of Social Issues, Vol. 36 No. 4, pp. 59\u201075.","DOI":"10.1111\/j.1540-4560.1980.tb02637.x"},{"key":"key2022020519542199400_b44","unstructured":"Spil, T., Katsma, C., Ligt, E. and Wassenaar, A. (2005), \u201cIT based innovation success in healthcare: the art of implementation and use of an electronic patient record\u201d, Proceedings of the International Conference on the Management of Healthcare & Medical Technology, Aalborg, Denmark."},{"key":"key2022020519542199400_b46","unstructured":"Thomas, J. (2005), \u201cCommon HIPAA violations for providers\u201d, Health Care Biller, Vol. 14 No. 5, pp. 10\u201011."},{"key":"key2022020519542199400_b47","doi-asserted-by":"crossref","unstructured":"Torkzadeh, G. and Van Dyke, T.P. (2002), \u201cEffects of training on internet self\u2010efficacy and computer user attitudes\u201d, Computers in Human Behavior, Vol. 18 No. 5, pp. 479\u201094.","DOI":"10.1016\/S0747-5632(02)00010-9"},{"key":"key2022020519542199400_b51","doi-asserted-by":"crossref","unstructured":"Venkatesh, V. and Davis, F.D. (2000), \u201cA theoretical extension of the technology acceptance model: four longitudinal field studies\u201d, Management Science, Vol. 46 No. 2, pp. 186\u2010204.","DOI":"10.1287\/mnsc.46.2.186.11926"},{"key":"key2022020519542199400_b48","doi-asserted-by":"crossref","unstructured":"Wiley, C. (1997), \u201cWhat motivates employees according to over 40 years of motivation surveys\u201d, International Journal of Manpower, Vol. 18 No. 3, pp. 263\u201080.","DOI":"10.1108\/01437729710169373"},{"key":"key2022020519542199400_b50","doi-asserted-by":"crossref","unstructured":"Wilson, E.V. and Lankton, N.K. (2004), \u201cInterdisciplinary research and publication opportunities in information systems and healthcare\u201d, Communications of AIS, Vol. 14 No. 17, pp. 332\u201043.","DOI":"10.17705\/1CAIS.01417"},{"key":"key2022020519542199400_b52","doi-asserted-by":"crossref","unstructured":"Yoon, J., Han, N. and Seo, Y. (1996), \u201cSense of control among hospital employees: an assessment of choice processes, empowerment, and buffering hypotheses\u201d, Journal of Applied Social Psychology, Vol. 26 No. 8, pp. 687\u2010716.","DOI":"10.1111\/j.1559-1816.1996.tb02739.x"},{"key":"key2022020519542199400_b53","doi-asserted-by":"crossref","unstructured":"Zimmerman, M.A. (1995), \u201cPsychological empowerment: Issues and illustrations\u201d, American Journal of Community Psychology, Vol. 23 No. 5, pp. 581\u201092.","DOI":"10.1007\/BF02506983"},{"key":"key2022020519542199400_frd1","doi-asserted-by":"crossref","unstructured":"Gefen, D., Straub, D. and Boudreau, M. (2000), \u201cStructural equation modeling techniques and regression: guidelines for research practice\u201d, Communications of AIS, Vol. 4 No. 7, pp. 1\u201078.","DOI":"10.17705\/1CAIS.00407"},{"key":"key2022020519542199400_frd2","doi-asserted-by":"crossref","unstructured":"Lankton, N.K. and St Louis, R.D. (2005), \u201cInformation systems in health care VIII \u2013 using paper\u2010based scenarios to examine perceptions of interactive communication systems\u201d, Communications of AIS, Vol. 16 No. 33, pp. 687\u2010704.","DOI":"10.17705\/1CAIS.01633"},{"key":"key2022020519542199400_frd3","doi-asserted-by":"crossref","unstructured":"Lim, K.H., Ward, L.M. and Benbasat, I. (1997), \u201cAn empirical study of computer system learning: comparison of co\u2010discovery and self\u2010discovery methods\u201d, Information Systems Research, Vol. 8 No. 3, pp. 254\u201073.","DOI":"10.1287\/isre.8.3.254"},{"key":"key2022020519542199400_frd4","doi-asserted-by":"crossref","unstructured":"Smith, S.W. (2003), \u201cHumans in the loop: human\u2010computer interaction and security \u2013 group of 3\u201d, IEEE Security & Privacy Magazine, Vol. 1 No. 3, pp. 75\u20109.","DOI":"10.1109\/MSECP.2003.1203228"},{"key":"key2022020519542199400_frd5","doi-asserted-by":"crossref","unstructured":"Straub, D.W., Boudreau, M.C. and Gefen, D. (2004), \u201cValidation guidelines for IS positivist research\u201d, Communications of AIS, Vol. 13 No. 24, pp. 380\u2010427.","DOI":"10.17705\/1CAIS.01324"},{"key":"key2022020519542199400_frd6","doi-asserted-by":"crossref","unstructured":"Wilson, E.V. (2003), \u201cAsynchronous health care communication\u201d, Communications of the ACM, Vol. 46 No. 6, pp. 79\u201084.","DOI":"10.1145\/777313.777316"}],"container-title":["Information Management &amp; Computer Security"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/www.emeraldinsight.com\/doi\/full-xml\/10.1108\/09685220810862715","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/www.emerald.com\/insight\/content\/doi\/10.1108\/09685220810862715\/full\/xml","content-type":"application\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/www.emerald.com\/insight\/content\/doi\/10.1108\/09685220810862715\/full\/html","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,7,25]],"date-time":"2025-07-25T00:09:04Z","timestamp":1753402144000},"score":1,"resource":{"primary":{"URL":"http:\/\/www.emerald.com\/ics\/article\/16\/1\/5-19\/179057"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2008,3,21]]},"references-count":54,"journal-issue":{"issue":"1","published-print":{"date-parts":[[2008,3,21]]}},"alternative-id":["10.1108\/09685220810862715"],"URL":"https:\/\/doi.org\/10.1108\/09685220810862715","relation":{},"ISSN":["0968-5227"],"issn-type":[{"value":"0968-5227","type":"print"}],"subject":[],"published":{"date-parts":[[2008,3,21]]}}}