Hospital Medical Equipment Data Security Governance: A Grounded Theory Informed Data Lifecycle and Governance Matrix Protocol

Summary

This protocol presents a grounded theory-informed matrix workflow mapping six data lifecycle stages to six governance domains to audit and improve hospital medical equipment data security. Based on evidence, artifacts, and 48 stakeholder interviews across 14 hospitals, it generates heat maps and prioritized actions for iterative governance improvement.

Abstract

This article describes a reproducible governance protocol for hospital medical equipment data security grounded in qualitative evidence. From August to October 2024, we conducted semi-structured interviews with 48 stakeholders across 14 tertiary public hospitals in S City. Transcripts were analyzed using grounded theory procedures (Strauss and Corbin: open, axial, and selective coding), yielding 360 reference points, 149 initial concepts, 39 categories, 27 main categories, and 7 core categories. Building on the National Health Commission of the People's Republic of China's safety and quality management agenda and adopting the SQ (I SPORT) matrix logic as an organizing scaffold, we developed a Medical equipment data security audit and tracking protocol based on grounded theory (M-ATSSPD). The protocol operationalizes a matrix that maps six data lifecycle stages (Acquisition, Transmission, Storage, Sharing, Processing, and Disposal) to six governance domains (Organization and Personnel, Metadata, Compliance and Policies, Monitoring and Audit, Incident Response, and Technical Tooling). It specifies scoring anchors (0-3), evidence mapping rules, and heat map visualization to identify high-risk cells, prioritize corrective actions, and support iterative improvement without vendor dependence. The protocol further defines cell-level ownership and documentation requirements to strengthen cross-departmental coordination, compliance readiness, and incident preparedness, and provides guidance for transferability across public hospital settings.

Introduction

With the acceleration of hospital informatization and the rise of smart healthcare, medical equipment has become increasingly networked and interoperable, making equipment-generated data a core asset for clinical decision-making and hospital operations¹. These data may include personally identifiable information, device operational logs, and diagnostic outputs such as physiological parameters, imaging objects, and treatment records, which are closely linked to patient privacy and care quality². Security incidents involving such data can directly affect patient safety and trust in clinical services³

Protocol

1. Ethical approval and informed consent procedures

1. Obtain approval from an institutional review board before recruitment.
2. Provide each participant with an information sheet describing study aims, recording procedures, confidentiality protections, and withdrawal rights, and obtain written informed consent before conducting any interview.
3. Record interviews only after receiving explicit permission.
4. Transcribe recordings verbatim and de-identify transcripts by removing names, phone numbers, and site-specific identifiers.
5. Store audio files, transcripts, and consent forms in an access-controlled repositor....

Results

Guided by grounded theory, evidence from the screened literature and the interview corpus was synthesized to derive a model of factors influencing hospital medical-equipment data security. Three-level coding (open, axial, and selective) was performed, and the analytic workflow is summarized below³⁰.

Open coding
Source texts were examined line by line, retaining verbatim phrasing to preserve meaning and context. Meaning units were coded into sub-node.......

Discussion

This protocol operationalizes hospital medical-equipment data-security governance as a traceable, evidence-based workflow linking grounded theory outputs to a 6 × 6 maturity matrix and an action-and-verification loop. The SQ (M-ATSSPD) matrix was derived by integrating interview and literature evidence into stable categories and translating them into lifecycle stages (Acquisition, Transmission, Storage, Sharing, Processing, and Disposal) and governance domains (Organization and Personnel, Metadata, Compliance and Po.......

Materials

List of materials used in this article

Name	Company	Catalog Number	Comments
Qualitative analysis software (MAXQDA 24)	VERBI Software GmbH (Berlin, Germany)	N/A (License-based; order/serial in invoice)	Used for literature content analysis and coding; export codebook/coded segments/memos and archive with version numbers.
Statistical computing software (R v4.3.2)	R Foundation for Statistical Computing (Vienna, Austria)	N/A (Open-source)	Used for Cohen’s κ, Wilson CI, and statistical comparisons; archive scripts and outputs.
R package “irr” (κ calculation)	Comprehensive R Archive Network (CRAN)	N/A (Open-source)	Used for Cohen’s κ (e.g., kappa2); record package version used.
Spreadsheet software (Microsoft Excel / Microsoft 365 Excel)	Microsoft Corporation (Redmond, WA, USA)	N/A (License-based)	Used for weighted scoring formulas and conditional-format heat map; archive workbook and rule settings.
Reference-management software (choose one: EndNote or Zotero)	Clarivate (EndNote) / Zotero	N/A (License-based/Open-source)	Used for exporting citations and deduplication; archive deduplication log.
China National Knowledge Infrastructure (CNKI)	CNKI (Tsinghua Tongfang)	N/A (Online subscription)	Literature retrieval database; record exact query, filters, and export format in search log.
IEEE Xplore	IEEE	N/A (Online subscription)	Literature retrieval database; record exact query, filters, and export format in search log.
Mixed Methods Appraisal Tool (MMAT, 2018)	MMAT authors (Hong et al.)	N/A	Quality appraisal tool for mixed-methods studies; archive completed appraisal table.
CASP Qualitative Checklist (latest version used)	Critical Appraisal Skills Programme (CASP)	N/A	Quality appraisal checklist for qualitative-only studies; archive completed appraisal table.
Secure, access-controlled repository (encrypted storage)	Institutional IT / compliant cloud / on-prem	N/A	Store audio, transcripts, consent forms, scripts, matrices, heat maps, and audit trails with role-based permissions.
Audio recorder (digital recorder or smartphone)	Any equivalent	N/A	Record interviews with permission; model optional if a specific device was used.
Computer workstation	Any equivalent	N/A	Used for coding, scoring, analysis, and archiving.
Transcription tool/workflow	Any equivalent	N/A	Verbatim transcription + de-identification; keep workflow secure.
De-identification tag template	Self-prepared	N/A	Standard tags for removing identifiers in transcripts.
Participant information sheet + consent form	Self-prepared	N/A	Required for informed consent and confidentiality protections.
Screening table template	Self-prepared	N/A	Record inclusion/exclusion decisions and reasons.
Evidence artifact register	Self-prepared	N/A	Register artifacts (A–I) with IDs =, owners, dates, and locations.
Matrix workbook template (6 × 6)	Self-prepared (spreadsheet)	N/A	Contains indicators, weights, formulas, cell scores, and documentation fields.
Heat-map rule set documentation	Self-prepared (export/screenshot)	N/A	Store conditional-format thresholds and absolute comparability settings.
Action register template	Self-prepared	N/A	Record prioritized cells, owners, deadlines, verification metrics, and closure evidence.
Coding decision log + versioned codebook	Self-prepared / exported	N/A	Record retain/merge/split decisions and codebook versioning after adjudication.
Analytic trace package	Self-prepared / exported	N/A	Coded excerpts, memos, diagrams enabling traceable grounded-theory transparency.