Healthcare practitioners face a complex balancing act between providing optimal patient care and adhering to stringent data protection requirements, especially with the rapid adoption of digital tools. This is particularly salient in Kenya, which has progressive legislation like the Data Protection Act, 2019 and the Digital Health Act, 2023, setting high standards for health data governance.

Key Challenges for Healthcare Practitioners:

1. Complexity of Regulations and Compliance Burden:
   • Understanding the Law: The Data Protection Act and Digital Health Act are comprehensive, covering consent, purpose limitation, data minimization, accuracy, storage limitation, security, and accountability. Practitioners, often focused on clinical care, may struggle to fully grasp the nuances of these laws and their implications for daily workflows.
   • Documentation and Consent: Obtaining explicit, informed, and verifiable consent for various data processing activities (e.g., direct care, research, sharing with third parties) can be time-consuming and cumbersome, potentially delaying urgent care or burdening already busy staff.
   • Data Minimization: Determining what data is “strictly necessary” for a specific purpose can be subjective and challenging, especially when anticipating future needs for continuity of care or research.
2. Technological Integration and Security Risks:
   • Outdated Infrastructure: Many healthcare facilities, especially in resource-constrained settings, may have outdated IT systems that lack robust security features, making them vulnerable to cyberattacks (e.g., ransomware, data breaches).
   • Interoperability vs. Security: While integrated health information systems (EHRs, EMRs) improve care coordination, they also create larger attack surfaces if not properly secured. Achieving interoperability while maintaining strict access controls is a significant technical challenge.