Introduction

Confidentiality refers to the restriction of access to personal information from unauthorized persons and processes at authorized times and in an authorized manner [1, 2]. When we say patients have the right to confidentiality, it refers to keeping privileged communication secret and cannot be disclosed without the patient’s authorization [3, 4].

Health professionals have a legal obligation to handle patients' information privately and securely [5]. As a result, patients and professionals develop trust and a positive relationship. If such highly sensitive data is improperly disclosed, it could threaten patients' safety [6]. Hence confidentiality needs to be respected to protect patients’ well-being and maintain society’s trust in the physician–patient relationship. The issue of confidentiality has been recognized as a global concern. As a result, several internationally agreed on principles and guidelines for maintaining the sanctity of patients’ private lives during treatment. This law, known as Data Protection Act, was enacted in 1998 and was last revised in 2018 [7, 8]. The Data Protection Act was created to provide protection and set guidelines for handling personal data [7]. There is no comprehensive data protection law in Ethiopia that covers health data protection [9]. Ethiopia's only confidentiality-oriented policy is the healthcare administration law, which requires health practitioners to maintain confidentiality. This law mandates health providers to keep patients' health information confidential [10]. Furthermore, only a few research have looked into health professionals' awareness of ethical rules and data security and sharing laws in Ethiopia [9].

Confidentiality is the basis of the legal elements of health records and an ethical cornerstone of excellent care [11]. More importantly, the quality of information shared with healthcare experts is determined by their capacity to keep it private. Otherwise, the patient may withhold important information, lowering the quality of care offered.

Although information sharing is essential in an interdisciplinary health team, each professional should limit information disclosure to an unauthorized health professional to plan and carry out procedures in the patient's best interests [12]. The exchange of patient medical records and data with an unauthorized person continues to be a common occurrence in a variety of clinical settings [5]. Breaches of confidentiality in clinical practice due to negligence, indiscretion, or sometimes even maliciously jeopardize a duty inherent in the physician–patient relationship [8]. Breaches of confidentiality and sharing data with unauthorized parties may have the potential to harm the patients’ health [13]. Health care quality declines due to a loss of confidence in the professional-patient relationship [14]. Patients become hesitant to seek care and attend follow-up appointments due to their mistrust of health providers [7, 8].

Until recently, the standard curricula of Ethiopia's recent medical schools did not include a medical ethics course. Nevertheless, following proposals from the Ethiopian Medical Association and curriculum review committees, the medical ethics course was first established at Addis Ababa University's Faculty of Medicine in 2004 [15]. Despite the existence of a medical ethics course, patients' concern about maintaining their confidentiality has grown, and reports of unethical behavior by health professionals on patient confidentiality are familiar [15].

There are so many problems regarding patient medical record confidentiality and data sharing [16]. The loss of patient medical records due to handling by unauthorized staff without consent and transporting to another department is a big issue in Ethiopia. That can affect patients’ quality of care by consuming time, harming patient satisfaction, causing improper diagnosis, and making it difficult to get the previous history.

The significance of this research is that it addresses the rapidly growing trend of patient data sharing and confidentiality among health practitioners in developing countries taking Ethiopia as an example. There is limited evidence regarding health professional knowledge and attitude related to patients’ confidentiality in resources limited settings. Therefore, this study will fill evidence gaps on health professional knowledge, attitude, and associated factors related to patient confidentiality in Ethiopia. This study will provide policymakers with up-to-date information on health professionals' knowledge and attitude towards patient confidentiality. Aside from that, the outcomes of this study may aid legislators in developing plans to improve health professionals' knowledge and attitude toward patient confidentiality.

Method

Study design and setting

An Institutional based cross-sectional study was conducted among health professionals from August–September 2021. Gondar is a historical town situated in the northwestern part of Ethiopia, 772 km far from the capital Addis Ababa and 168 km from Bahir Dar [17]. The University of Gondar specialized hospital is one of the largest teaching hospitals in the Amhara region providing tertiary level care for more than seven million people in the northwest part of the country coming from Amhara, Tigray, and Benishangul Gumuz regions [18]. It has 960 health professionals distributed over 30 services units responsible for delivering healthcare services to an average of 800 patients per day.

Study subjects and eligibility criteria

All healthcare professionals working in the University of Gondar specialized hospital and those available during the study period were the sources and study population. The study excluded health professionals with less than six months of experience, those who had not been found in the hospital for various reasons, and those on yearly leave during the data collection period.

Sample size determination and sampling procedure

The sample size was calculated using the single population proportion formula, n = Z(α/2)2 pq/d2 [19]. We assumed: n = the required sample size, Z = the value of standard normal distribution corresponding to α/2, 1.96, p = proportion of health professionals who had good knowledge and attitude towards confidentiality, q = proportion of health professionals who had unfavorable knowledge and attitude towards confidentiality, and d = precision assumed as 0.05. To our knowledge, no study has been conducted in Ethiopia to determine the knowledge and attitude of health professionals towards patient confidentiality. Therefore, we assumed p (proportion of health professionals who had good knowledge and attitude towards confidentiality) to be 0.5. Hence, the required sample size was calculated to be 384. After adding a 10% non-response rate, 423 health care professionals were enrolled in the study.

Stratified with a simple random sampling method was used to select the 423 participants. Firstly, the sample was stratified based on their department. Then the selection was proportionally allocated in each stratum depending on the numbers of healthcare providers in each stratum or department to assess their knowledge, attitude, and associated factors related to patients' confidentiality. After allocating samples in each stratum proportionally, a computer-generated simple random sampling technique was employed to select the study subjects in each department (Fig. 1).

Fig. 1
figure 1

Sampling procedure and sample allocation in University of Gondar hospital

Study variables

The primary outcome variable of this study was knowledge and attitude towards patient confidentiality. The questionnaires used in this study were developed based on a review of related literature [20, 21]. Socio-demographic and work-related characteristics were used as independent variables in this study.

Operational definitions

Knowledge about patients' confidentiality was assessed using seven items with “yes” and “no” responses. Each correct answer was equal to one point, while each incorrect answer was equal to zero points, with a height possible score of 7 for the knowledge part. A mean of 7 questions regarding Knowledge towards patient confidentiality was calculated. And those above the mean score were categorized as ‘good’ knowledge, and those below were categorized as ‘poor’ knowledge [20].

Attitudes toward patient confidentiality were assessed by using 14 questions with a 5 point Likert scale from ‘strongly disagree’ (score 1) to ‘strongly agree’ (score 5) [20]. The final score in the attitude section ranges from 14 to 70. A mean of the 14 questions of attitude towards patient’s confidentiality was calculated. Those above the mean value were categorized as ‘favorable’ attitude, and those below the mean value were categorized as ‘unfavorable’ attitude [20].

Data collection tool and quality control

A self-administered, organized, and pre-tested questionnaire was created in English. The data collection process included two supervisors and ten data collectors. One-day training was given to the data collectors to eliminate ambiguities. A pre-test was conducted outside of the study area, in Gondar town health centers, with 10% of the study population. The validity and reliability of the data collection instrument were assessed using the pre-test results. The Cronbach alpha value for the attitude questions was 0.82, whereas the Cronbach alpha value for the knowledge questions was 0.76. These figures show that the questionnaire is highly reliable.

Data processing and analysis

The data entry was performed using Epi Data version 4.6 software packages and analyzed using Statistical Package for Social Sciences (SPSS) version 25. Descriptive statistics were computed to describe the socio-demographic variables and health professionals’ knowledge and attitudes about patient confidentiality and data sharing. Bi-variable and multivariable binary logistic regression analyses were done to measure the association between the dependent and independent variables. In the bi-variable regression analysis, variables with a p value of less than 0.2 were included in the multivariable regression analysis to assess their adjusted impacts on the dependent variables. Odds ratio with 95% confidence level and P value were calculated to ascertain the strength of association and to decide statistical significance. For all significantly associated variables, the cut-off value was p < 0.05. Before conducting the logistic regression model, assumptions of multi-collinearity were checked. The result revealed all the variance inflation factor (VIF) values less than three, which confirmed the absence of multi-collinearity.

Result

Description of participant’s socio-demographic and work-related characteristics

Of 423 participants, 410 responded to a questionnaire with a 96.9% response rate. The mean age of the participants was 28.12(SD ± 5.16) years which ranges from 21 to 50 years. The majority 271(66.1%) of the study participants were male and most of them 334 (81.5%) were orthodox religious followers. In terms of the educational level of the health professional, more than half 228 (55.6%) of participants have a BSc degree (Table 1). Of the total respondents, above three fourth 79.8% health professionals had below five years of work experience. A majority 47.8% of respondents were nurse professionals. Almost all 95.4% health professionals had direct contact with the patients and around 39% had visits above 40 patients per day. The results showed that about 5.9% of health professionals faced more than two ethical dilemmas daily while treating patients. In addition, 44.1% of the participants were taking training on medical ethics (Table 1).

Table 1 Socio-demographic and work-related characteristics of study participants (N = 410)

Health professionals’ knowledge about patients’ confidentiality

Of the total participants, 59.8% with [95% CI (54.9–64.5%)] had good knowledge about confidentiality with a mean score of 3.91(SD ± 1.39) (out of a maximum of 7 points) (Fig. 2). From the knowledge questionnaire, most of the respondents 358(87.3%) were said ‘access to medical records should be governed by law’ and 183(44.6%) argued that non-medical information is also confidential. Furthermore, 291(71%) health professionals were aware that third-party insurance companies did not access patient examination results (such as insurance companies) without patient consent. However, only 115(28.0%) of participants knew that policies were not allowed to access medical records freely (Table 2).

Fig. 2
figure 2

Health professional knowledge and attitude related to patients’ confidentiality

Table 2 Health professionals’ responses related to knowledge about confidentiality (N = 410)

Health professionals attitude towards patients’ confidentiality

Of the total participants, 49.5% with [95% CI (44.6–54.3%)] had a favorable attitude towards confidentiality with a mean score of 42.8(SD ± 8.90) (out of a maximum of 70 points) (Fig. 2). Table 3 illustrates that about 126(30.7%) of participants agreed that confidentiality affects the patient in any way, and 299(72.9%) believed they don’t allow non-medical personnel to enter the examination room while they are discussing with patients. Of all respondents, 220(53.7%) and 162(39.5%) participants use lock systems and computers to store patient information.

Table 3 Health professionals’ responses related to attitudes towards patient confidentiality (N = 410)

Factors associated with health professionals’ knowledge about patients’ confidentiality

Bi-variable and multivariable binary logistic regression analyses were done to measure the association between Health professionals’ knowledge towards patients’ confidentiality and independent variables. In bi-variable regression, Sex of participants, Age of the respondents, Work experience, Training on medical ethics, Numbers of the patient served, Direct contact with the patients, Numbers of ethical dilemmas faced, Income of participants were the candidates’ variables for health professionals’ knowledge towards confidentiality for the multivariable regression analysis (P < 0.2). With the multivariable regression model sex of respondents, training on medical ethics, number of ethical dilemmas faced were significantly associated factors for health professional knowledge towards patients’ confidentiality (Table 4). This means that being male was (AOR = 1.63, 95% CI [1.03–2.59]) times more likely to have good knowledge towards patient confidentiality as compared to females after controlling for other factors. Health professionals taking training on medical ethics were (AOR = 1.73, 95% CI = [1.11–2.70]) times more likely to have a good knowledge towards patients’ confidentiality as compared to their counterparts. Similarly, health professionals who faced more ethical dilemmas were (AOR = 3.07, 95% CI [1.07–8.79]) times more likely to have good knowledge than those who faced fewer ethical dilemmas.

Table 4 Factors associated with health professionals’ knowledge about patients’ confidentiality (N = 410)

Factors associated with health professionals’ attitude towards patients’ confidentiality

In both bi-variable and multivariable analysis training on medical ethics, direct contact with the patients, Numbers of patient visits, and numbers of ethical dilemmas faced were significant variables to the attitude of health professionals towards patient confidentiality (Table 5).

Table 5 Factors associated with health professionals’ attitude towards patients’ confidentiality (N = 410)

Health professionals taking on medical ethics were (AOR = 2.30, 95% CI [1.42–3.72]) times more likely to have a favorable attitude towards patient confidentiality when compared to those who didn’t take any pieces of training on medical ethics. Health professionals who had direct contact with the patients were (AOR = 3.06, 95% CI [1.12–8.34]) times more likely to have a favorable attitude towards patient confidentiality than those who didn’t have direct contact with the patients. Health professionals who visited more patients daily (more than 40 and 30–40) were approximately (AOR = 4.38, 95% CI [2.46–7.80]) and (AOR = 1.96, 95% CI [1.12–3.43]) times more likely to have a favorable attitude towards patients’ confidentiality when compared to those who visited less than 30 patients daily. Additionally, respondents who faced more ethical dilemmas were (AOR = 3.56, 95% CI [1.23–10.26]) times more likely to have a favorable attitude towards patients’ confidentiality than those who faced fewer ethical dilemmas.

Discussion

This study examines health professionals’ knowledge and attitude towards patient confidentiality and associated factors in Northwest Ethiopia.

This study revealed that around 59.8% of respondents had good knowledge related to patient confidentiality. The finding is in line with two studies conducted in Iran 56.6% [22], 63% [23]. However, the results of this study demonstrated that health professionals’ good knowledge towards patient confidentiality was lower than studies conducted in Spain 68% [24] and Tehran university medical school 65% [25]. The difference could be that health professionals working in high-resource countries are more informed about patients' privacy in their daily lives and recognize the relative benefit of patient confidentiality [26]. The other reasons for the disparity could be explained by the fact that approximately 75% of participants had less than 5 years of professional experience in the current study, and they were also considerably younger than in the Spanish study [24]. Furthermore, the participants in Spain were all physicians, who are supposed to have better clinical data management and specific training [24].

In this study, 49.5% of participants had a favorable attitude towards patient confidentiality. This finding is supported by the study conducted in northern Jordan 52.4% [20]. However, this finding is lower than the study conducted in Turkey (64.4%) physicians strongly agreed to protect patient confidentiality [27]. The possible reason could be that difference awareness among health professionals in different countries results in a good level of attitude.

The study also found factors associated with health professionals’ knowledge and attitude regarding patient confidentiality. The sex of respondents, training on medical ethics, and the number of ethical dilemmas faced was all significantly associated factors of health professional knowledge towards patients’ confidentiality. Likewise, training on medical ethics, direct contact with the patients, Numbers of patient visits, and numbers of ethical dilemmas faced were significant variables to the attitude of health professionals towards patient confidentiality.

Among the factors associated with knowledge, being males were more likely to have good knowledge towards patient confidentiality than females. This finding is consistent with study findings from Jordan [20, 21], Spain [24], and the United States [28]. This might be due to males were more access to information and technology and there is high information sharing between them [21]. Furthermore, the number of ethical dilemmas experienced and training on medical ethics were revealed to be predictive variables for both knowledge and attitude. Health professionals taking training on medical ethics were more likely to have a good knowledge and attitude related to patients’ confidentiality than those who had not taken the training. The greatest strategy to ensure adherence to confidentiality laws was to provide training on medical ethics, where health organizations would routinely update all health professionals on guidelines and strategies to prevent sensitive information disclosure [21, 29, 30]. Furthermore, the legislature's role is critical, not just in terms of legal norms to safeguard patient confidentiality, but also in terms of punishments when inappropriate behavior occurs [31]. And this finding is supported by a study conducted in Barbados [32], Vietnam [33]. Besides this, this study also found that health professionals who faced more ethical dilemmas were more likely to have good knowledge and attitude as compared to those who faced a less ethical dilemma. According to Hariharan et al. suggestions, health professionals may not report such problems to their seniors and try to solve them [32]. This may be the possible reasons for facing more ethical dilemma and trying to solve by themselves to have positive knowledge and attitude towards patient confidentiality.

In addition, direct contact with the patients and the number of patient visits were associated with a favorable attitude towards patient confidentiality. Respondents who have direct contact with the patients were more aware of confidentiality. This could be because the health of practitioners that deal with patients regularly are more familiar with confidentiality rules and strategies[22]. Besides this, health professionals who visit more patients per day were more likely to have a favorable attitude related to patient confidentiality. This might be because when health professionals serve more patients per day, they get a lot of challenges which helps to change their attitude to maintain the patient's information confidentially.

Conclusion

The findings of this study revealed that health professionals have a limited attitude towards patient confidentiality but have relatively good knowledge. The sex of respondents, training on medical ethics, and many ethical dilemmas faced were significantly associated factors of health professional knowledge towards patients’ confidentiality. Likewise, training on medical ethics, direct contact with the patients, Numbers of patient visits, and numbers of ethical dilemmas faced were significant variables to the attitude of health professionals towards patient confidentiality. Providing a continuing medical ethics training package for health workers before joining the hospital and in between the working time could be recommended to improve health professionals' knowledge and attitude towards patient confidentiality.

Strength and limitations

The findings from this study provide valuable information on health professionals' knowledge and attitude related to patients' confidentiality in resources limited countries. There are some limitations to this study. First, this study was an institution-based cross-sectional survey; only health professionals who came during the data collection period were interviewed.