Evaluating Privacy and Security Requirements of the Electronic Prescribing System in Iran: A Qualitative Study

Résumé fourni par la source

Background Electronic prescribing (e-prescribing) systems enable physicians to generate and transmit prescriptions electronically, improving accuracy, reducing medication errors, and supporting clinical decision-making.These systems also enhance communication between healthcare providers and pharmacies, contributing to safer and more efficient patient care.Because e-prescribing involves the exchange of sensitive patient information, ensuring data privacy, confidentiality, and cybersecurity is essential for the safe and effective use of these systems.The aim of this study is to identify and evaluate the privacy and security requirements of the electronic prescribing system in Iran from the perspectives of different stakeholders.Methods A qualitative study was conducted in Urmia, Iran, in 2024.A total of 15 participants were recruited, including information technology specialists (n = 7), health information management professionals (n = 3), and physicians (n = 5).Data were collected through face-to-face, semi-structured interviews, each lasting approximately 30-40 minutes.The interview data were transcribed verbatim and analyzed using qualitative content analysis with MAXQDA software, and the coding process was independently reviewed by a second researcher to enhance the credibility and reliability of the findings. ResultsAnalysis identified three major themes and 15 sub-themes.Participants emphasized the importance of technical safeguards, including multi-factor authentication, robust password policies, role-based access control, encryption, realtime security alerts, and system protections against external threats.Managerial measures, such as audits, training, and standards-based security practices, together with user-related behaviors, including security awareness and responsible system use, were also considered critical.Conclusion The e-prescribing system has positively influenced outpatient healthcare services in Iran.Ensuring privacy and security, however, depends on the implementation of robust technical safeguards, effective managerial strategies, and responsible user behavior.Future research should evaluate the nationwide implementation of the system and investigate opportunities to further optimize its performance and effectiveness.

Ce résumé expose les affirmations des auteurs. BNTIC ne l’interprète pas comme une validation indépendante des résultats.