Effectiveness of Implementation and Contextual Factor Analysis of Patient Personal Data Protection

Abstract

Digitalization in healthcare services provides significant benefits but also poses challenges, particularly in protecting patients’ personal data. Data stored by healthcare institutions is highly vulnerable to misuse if not managed properly. In addition, limited technological infrastructure and resources can hinder the effectiveness of patient data protection at the West Nusa Tenggara Provincial Hospital. This study aims to analyse the relationship between staff members’ understanding of the Personal Data Protection Law (PDP Law) and their level of compliance, and to explore contextual factors such as technical barriers and ethical dilemmas they face. The study utilizes a mixed-methods approach with a sequential explanatory design. The population consists of medical personnel and administrative staff at the West Nusa Tenggara Provincial Hospital, with a sample of 102 respondents in the quantitative phase, followed by in-depth interviews in the qualitative phase. The results indicate that 96.1% of respondents have a good level of understanding and 84.3?monstrate a high level of compliance, with a significant positive relationship between understanding and compliance. However, a high level of ambivalence (49%) regarding the use of secondary data was identified due to the absence of internal operational norms. Furthermore, 26.5% of respondents reported difficulty understanding the technical aspects of digital data protection. Overall, the implementation of the PDP Law is effective in terms of knowledge and moral awareness but remains weak in its legal structure and technological infrastructure, making staff compliance vulnerable because systems do not yet automatically ensure data security.