The foundations for electronic health records (EHRs) were laid in the 1960s and 1970s, becoming part of everyday clinical practice in the 1990s (
1). In most high-income countries, it is now almost unthinkable to store paper-based patient health records, which was the norm just one generation ago. However, EHRs have some drawbacks, including maintenance costs, workflow disruptions, time spent adjusting to new systems, and data privacy concerns (
2).
Benefits and Concerns Regarding EHR Use
EHR benefits include improved quality of care and improved access to care (
3,
4), more efficient service delivery, and better clinical outcomes (
5); additional benefits include improved efficiency of disease prevention, follow-up, and coordination between health care professionals (
6). EHRs also open new opportunities for cost-effectively examining longitudinal and complex data from large and diverse populations and for building clinical decision support systems (CDSSs) (
7).
Similar to other digital information about individuals, clinical “big data” raise concerns about safety and privacy. To address these issues, the European Union introduced data protection rules (i.e., the General Data Protection Regulation) that added structure for how people can access information about themselves; in addition, these rules place limits on what organizations can do with people’s personal data (
8). The United States has no federal data privacy law such as the General Data Protection Regulation. Although big data (including clinical big data) have received considerable attention from various professional groups (
9), the voices of service users regarding use of such data are not always heard. Involvement of service users must be a part of clinical practice planning and operations; however, it is still experienced by many groups as tokenistic and policy driven rather than as genuine concern for the individual (
10), which is especially important when evaluating research that can ultimately inform practice (
11). Knowledge about service users’ awareness and attitudes toward the storing and sharing of their health data should be a part of clinical practice and research planning.
EHRs and Service Users’ Involvement
Research that elicits service users’ opinions and attitudes toward EHRs is only limited. Weitzman et al. (
12) found that nearly all of the community members they studied were willing to share health information to support research and public health; however, half of the study participants wanted to control this information whereby a user could decide what information can be shared, with whom the information can be shared, and what information should be excluded from sharing. Such EHR control has increased recently with legislation requiring transparency about how service users’ information is utilized (
13). Kim et al. (
14) reported that most patients were willing to share general medical EHRs as well as biospecimens; 77% chose to control and amend information to be shared. For example, patients wanted to choose to share only what they considered relevant for specific research and to be able to make specific choices. In another general health care study, patients favored broad permission, with “yes” or “no” options only (
13). Kim et al. (
14) argued that an “all or nothing approach” can lead to loss of EHR data that are useful for research. Zurita and Nøhr (
15) affirmed that patients accepted EHRs and new technologies; however, the patients were adamant that portability (being able to move information across services), access for other health care providers (i.e., family physicians), and privacy protections were all important.
With rapid digitalization of mental health services (especially during the COVID-19 pandemic), substantial amounts of data are collected. Stigma associated with mental health services was one of the reasons why EHR uptake was slower than in general health care and why mental health EHRs were separated from other EHRs (
16–
18). As reported by Salomon et al. (
19), 63% of mental health professionals expressed low willingness to input confidential or sensitive information, and 83% favored limiting the routine access to patient EHRs. Other behavioral health professionals have found that service users did not wish to share records detailing diagnosis (47%) and substance use (48%); however, users were willing to share records of emergency admissions and treatments (57%) as well as historic patient records (52%) because these records were seen as important for ongoing care (
20).
Service Users’ Voice on EHR Storage and Sharing
Satinsky et al. (
21) found that mental health service users showed little awareness of health data uses for research but were largely comfortable sharing their health records. Some participants raised issues of transparency, advocating for clear opt-out choices and processes, whereas others stressed an interest in being part of reference groups to stay up to date on findings. Likewise, participants of Kim et al.’s (
14) study were willing to share family mental health histories (40%), mental health treatment procedures (39%), details of mental health medications (40%), and mental health disease conditions (40%). Shen et al. (
22) reported that mental health service users favored sharing health information, even after considering the sensitive nature of the data. However, data exchange was based on trust and being well informed about how their data benefit others’ experiences.
Results from a study by O’Brien et al. (
23) indicated that most service users were more attentive to the benefits of EHR sharing than the risks; the authors found few discrepancies in these views between general health and mental health service users. The service users were most concerned about EHRs being stolen or hacked (83%) and thought that the largest benefits of sharing included helping doctors make better decisions about health (94%) and making therapies available faster (94%). Overall, service users have been positive about sharing mental health EHRs for research and improving services (
14,
22,
23). However, persistent concerns include issues relating to privacy and security, hacking of personal information, and anonymity (
21–
23).
EHRs can be also used to build a CDSS, a computerized tool that uses patient information and health care data to enable clinicians to make recommendations on the next step in a patient’s care. CDSSs in child and adolescent mental health settings are uncommon and have major shortcomings (
24). Therefore, we are building an Individualized Digital DEcision Assist System (IDDEAS), which is a new CDSS based on clinical guidelines and decades of anonymized EHR-derived mental health data (
25). Because the EHR is central to CDSSs, it was important to understand service users’ attitudes toward and perceptions about storing and sharing of their EHRs. In this study, we investigated mental health service users’ awareness about health authorities’ storing and sharing of EHR information, users’ attitudes about EHR storage and sharing, and their opinions about the purposes of EHR sharing.
Methods
Participants
This study was connected with the IDDEAS innovation project and was conducted in Norway. Mental health service users, who were members of ADHD Norway (a service users’ organization), were invited to participate. The regional ethical committee concluded that this study was outside its remit and recommended approval from the Norwegian Centre for Research Data, which was obtained.
Questionnaire
An original questionnaire included questions about service users’ demographic characteristics and 19 items that focused on awareness and attitudes about EHR storage and sharing. Two items focused on users’ awareness that health authorities store and share EHRs. Twelve items, rated on a 5-point Likert scale, focused on mental health service users’ attitudes about EHR storage and sharing. Opinions about purposes of sharing health records were assessed with one question and the following response options: clinical decision support, research, better health care quality, education and teaching, and clinical practice follow-up. Four open-ended questions had free-text answer options to voice concerns about storing and sharing health data. Survey completion took approximately 20 minutes. ADHD Norway, in collaboration with the Vårres service users’ organization, assisted in converting the original questionnaire into an Internet-based EasyQuest survey form.
Procedure and Data Collection
Participants were recruited via e-mail distributed by ADHD Norway to all its registered members (N=5,021). The e-mail contained a link to the survey. Data were collected from March to April 2021, and no identifiable data were collected. All data were sent to ADHD Norway for safekeeping and encryption. A passcode was used for safe data sharing with coauthors.
Analysis and Interpretation
We analyzed quantitative data with SPSS, version 25.0. Independent-sample t tests, chi-square statistics, and Fisher’s exact tests were used for univariate comparisons of demographic characteristics and individual items. Some variables were clustered: education (≥4 years university, <4 years university, and nonuniversity) and employment (employed or unemployed). The survey also generated qualitative data, consisting of mostly brief one-sentence answers but also narratives. Comments of interest are presented in the Results section to amplify quantitative observations.
Results
Demographic Characteristics
All registered ADHD Norway members (N=5,021) were invited to participate in the study. ADHD Norway indicated that approximately 30% of these members had outdated e-mail addresses, leaving a target population of approximately 3,500 service users. Of these, 253 participated in this study (7% response rate) (
Table 1).
Awareness of Health Authorities Storing and Sharing Health Records
Most service users (N=240, 95%) were aware that health authorities stored their EHRs. More than a half (N=147, 58%) were aware that the EHRs were shared among health care professionals and for research. No significant differences in these responses were found by education, employment, age, or gender.
Participants’ Attitudes Toward Data Storage
Most service users (N=210, 83%) approved of health authorities storing EHRs, could see the benefits of EHR storage for patients (N=213, 84%), and were not worried about EHR storage (N=162, 64%) (
Figure 1). No significant differences were detected when these responses were compared by education, employment, age, and gender.
Participants’ Attitudes Toward Data Sharing
Most service users (N=180, 71%) reported that it was ethical to share EHRs for health care and research. The same proportion (N=180, 71%) trusted health authorities with record sharing; even more users (N=190, 75%) were willing to share their records to help others with similar diagnoses and indicated benefits from sharing them (N=190, 75%). Just above one-third of the participants (N=92, 36%) were unaware that records were shared for research. Almost two-thirds of the participants (N=156, 62%) were aware of data anonymization and understood the privacy risks associated with sharing (N=175, 69%); more than a half (N=149, 59%) felt no need to limit use of anonymized data.
In addition, service users who were employed reported significantly more trust in health authorities and saw no need to withhold health data from anonymous use compared with those who were unemployed (Likert score mean±SD=3.89±1.1 vs. 3.48±1.3, t=2.72, df=251, p<0.01, and 3.72±1.3 vs. 3.53±1.4, t=2.07, df=251, p<0.05, respectively). No significant differences were detected between unemployed and employed users when the responses were compared by education, age, and gender.
Participants’ Opinions About Reasons for Sharing EHRs
Most service users wanted EHR sharing for use in policy development (N=205, 81%), education and training (N=215, 85%), care quality improvements (N=225, 89%), research (N=230, 91%), and clinical decision support (N=205, 81%). These responses did not significantly differ by gender, education, employment, or age.
When we grouped service users by their trust in health authorities with respect to EHR storage, we found that those with more trust also were more willing to share their records (N=173 [90%] vs. N=19 [10%], χ2=60.59, df=1, p<0.001) and reported greater awareness about sharing records for research (N=113 [61%] vs. N=71 [39%], χ2=16.92, df=1, p<0.001).
Comments of Interest
In the qualitative portion of the study, mental health service users were invited to use free-text responses in order to highlight their perceptions of risks and concerns regarding their EHRs. Examples of these responses have been extracted as comments of interest because they capture common themes that were shared repeatedly among participants. Among these themes, three main areas of concern included lack of transparency, skepticism about anonymization, and data misuse.
With regard to lack of transparency, the following concerns (among others) were raised:
“Historically, there has been little information for service users about what, how, and which health information is recorded, including access. Lack of info [and] access can create uncertainty for some.”
“What is stored, who has access, and how will they use it?”
The security of anonymizing confidential data was flagged as a concern and potential risk, as was skepticism about the anonymization processes, especially for EHRs containing identifiable or traceable information (e.g., DNA or rare diagnoses):
“I have nothing against health authorities sharing my health information, as long as it’s anonymized.”
“I do not trust that they are able to anonymize efficiently.”
Having the EHR end up in “the wrong hands” was mentioned, among other concerns, under the topic of data misuse. This topic was also linked to skepticism regarding anonymization. Mental health service users raised concerns about data misuse related to human error, cyberattacks, and incorrect information being used against them (e.g., employment):
“I am not certain what my information will be used for. . . . [I am concerned that, first], sensitive information will be used in relation to employment. [Second], misunderstandings arise among health care professionals due to previous illness[es] that are no longer relevant. [Third], sensitive information . . . [is] used against me in insurance cases or similar legal matters.”
“Mental health can be stigmatized and misunderstood.”
“Old, outdated records are used in current cases, which can have largely negative consequences.”
Discussion
In this study, we investigated mental health service users’ awareness and attitudes about EHR storage and sharing while also examining users’ perceived risks and benefits associated with EHR use in health care and research. Most service users were aware of EHRs being stored by health authorities and had positive attitudes toward both storing and sharing. Of the service users, 83% approved of EHRs being stored, and 84% saw it as beneficial.
For the qualitative portion of this study, mental health service users were asked to indicate concerns and risks via free-text responses mainly on the negative aspects of EHRs. The users identified concerns and perceived risks related to privacy (i.e., anonymization, hacking, misuse of data, and transparency), similar to findings from previous studies (
3,
4,
26,
27) that identified concerns about potential for breaches in confidentiality (
21–
23). Managing these concerns has led to multiple levels of control, including obtaining consent and allowing service users to affirm what data are shared (
12–
14). However, mental health professionals and service users previously still expressed reservations about sharing EHRs because of safeguarding concerns (
19,
20). Participants in this study appeared to trust health authorities who store and share their data. Given this trust, sharing sensitive health data appears relatively unproblematic, and our findings support the notion that trust among service users is linked to higher acceptance of EHR sharing (
22).
Similar to results of other studies (
14,
22,
23), mental health service users in this study agreed to storage of their EHRs and to sharing of these records for the benefit of others. Findings of this study support the results of Kim et al. (
14), who reported that most service users deliberately would choose to share data, and of O’Brien et al. (
23), who found that the predominant reason for users’ support of sharing data was that such sharing can improve health care. Previous studies in mental health settings have indicated openness to sharing, along with awareness of where data are going and for what purposes (
22) and that increasing transparency on what is shared creates more access to valuable data (
28). Regulations alone do not reassure service users that data will be protected. Health care professionals can increase trust among service users by providing clarity about the use of EHR data (
29). Trust emerges as a key factor for service users recognizing positive outcomes for patients when mental health records are stored and shared.
Despite their concerns, the participants focused on the benefits of sharing health data for service user care, helping others with similar diagnoses, and policy development. In other words, for these service users, benefits outweighed concerns. This finding supports EHR data use for the development of future systems to improve efficiency and quality of mental health care through technological advancements, including CDSSs (
24,
25,
30–
32).
The strength of this study was that it elicited opinions of mental health service users, who are often underrepresented in similar research. We note the low survey response rate and the relatively small sample size as limitations. Additional limitations included a skew in gender distribution toward women and participants with high education levels, lack of younger participants, few unemployed participants, and participation by few non-Norwegians. Lack of information on sociodemographic characteristics of the sample population was also a limitation. We also do not know whether this sample was representative of the larger population and whether these results can be generalized to all members or other groups in the health care community. The survey was anonymous, meaning that we did not have access to information about nonresponders to compare with the data from responders.
To our knowledge, this study is the first in Norway to explore mental health service users’ perspectives on EHR use. We found that although mental health service users were aware of risks of EHR data storage, they agreed to storage and sharing of their anonymized data to help other patients. This study builds a strong case against separating general medical and mental health EHRs. Our findings should encourage investigators, caregivers, and policy makers to collect and store EHR data from patients with mental disorders for use in research and policy decision making similar to how general medical data are collected and used.