"An Assessment of Adherence to Patient Privacy and Confidentiality Standard Operating Procedures in Comprehensive Care Clinics: A Case of Nakuru County Level 5 Hospital, Kenya."

Background: Patient privacy and confidentiality are fundamental pillars of healthcare, particularly in the management of HIV/AIDS where social stigma remains a significant barrier to clinical adherence. Despite the constitutional protections afforded by the Kenya Constitution (2010) and the Data Protection Act (2019), significant gaps persist between legal mandates and clinical practice in high-volume referral facilities. This study assessed the level of adherence to privacy and confidentiality Standard Operating Procedures (SOPs) at the Comprehensive Care Clinic (CCC) of Nakuru County Level 5 Hospital, Kenya.
Methodology: The study adopted a descriptive case study design employing a triangulated approach for data collection. A sample size of 79 respondents (65 clients and 14 staff) was determined using Fischer’s formula for finite populations. Data were collected via structured questionnaires, an observation checklist, and an interview guide to evaluate policy adherence, infrastructural adequacy, and socio-psychological experiences. Statistical analysis was performed using SPSS version 25, with findings presented in thematic tables and narrative form.
Results: The study achieved an 82.28% response rate. Findings revealed high institutional awareness of privacy policies (91.7%), yet significant procedural gaps were identified, including non-secure data disposal methods (41.7% hand-tearing) and reliance on informal on-the-job training (58.3%). Infrastructural assessment showed that while the standalone clinic design and semi-permanent partitions provided adequate acoustic insulation, digital vulnerabilities existed due to staff failure to log off workstations. Socially, 70.8% of clients rated privacy as "excellent," correlating physical barriers (solid walls) with psychological safety. However, a profound knowledge deficit was noted, with 86.2% of clients unaware of their legal rights to privacy.
Conclusion: While Nakuru County Level 5 Hospital has established a foundational framework for privacy, adherence is undermined by infrastructural limitations and technical laxity. The high level of client satisfaction exists alongside low rights literacy, suggesting that patients may not recognize subtle breaches.
Recommendations: The study recommends mandatory annual formal training for staff on data protection laws, upgrading semi-permanent partitions to permanent soundproof masonry, and implementing automated system "timeouts" on clinical computers. Furthermore, a targeted patient-rights advocacy campaign is essential to bridge the existing gap in health-rights literacy.

Confidentiality, Privacy, HIV/AIDS, Standard Operating Procedures, Comprehensive Care Clinic, Nakuru County.

1. World Health Organization (2011). Towards universal access: Scaling up priority HIV/AIDS interventions. [Google Scholar] [Crossref]

2. UNAIDS (2009). AIDS epidemic update 2008/2009. [Google Scholar] [Crossref]

3. Colombini, M., et al. (2014). Privacy and confidentiality in HIV care: Perspectives from Kenyan health facilities. [Google Scholar] [Crossref]

4. Government of Kenya (2010). The Constitution of Kenya: Bill of Rights. [Google Scholar] [Crossref]

5. Muchiri, G. (2021). Privacy in the corridors: Legal gaps in Kenyan hospital settings. [Google Scholar] [Crossref]

6. Government of Kenya (2019). The Data Protection Act. [Google Scholar] [Crossref]

7. KMPDC (2025). Regulatory guidelines for Data Processor Certification in Health Facilities. [Google Scholar] [Crossref]

8. Anyango, O. (2022). Information security metrics and organizational resistance in Nairobi public hospitals. [Google Scholar] [Crossref]

9. Otieno, J. (2024). EMR vulnerabilities and the Internet of Medical Things (IoMT) in Kenyan CCCs. [Google Scholar] [Crossref]

10. Smith, R. (2020). Physical barriers and patient disengagement in clinical settings. [Google Scholar] [Crossref]

11. Miller, L., et al. (2019). Psychological safety and the clinical environment: Solid walls vs. Curtains. [Google Scholar] [Crossref]

12. Brown, A. (2021). Layout designs and patient attrition in public health. [Google Scholar] [Crossref]

13. USAID (2023). Impact of donor funding on health IT and physical infrastructure. [Google Scholar] [Crossref]

14. Kamau, P. (2023). Trust and participation in HIV care: A Nakuru Case Study. [Google Scholar] [Crossref]

15. USAID (2023). Sub-Saharan Africa HIV Prevalence Trends. [Google Scholar] [Crossref]

16. Kamau, P. (2023). Youth Privacy Sensitivity in Clinical Care. [Google Scholar] [Crossref]

17. Government of Kenya (2006). The HIV and AIDS Prevention and Control Act. [Google Scholar] [Crossref]

18. Ministry of Health (2013). Kenya National Patients' Rights Charter. [Google Scholar] [Crossref]

19. Government of Kenya (2025). Quality Healthcare and Patient Safety Bill (Draft). [Google Scholar] [Crossref]

20. Ministry of Health (2020). Patient Access to Medical Records Guidelines. [Google Scholar] [Crossref]

21. Brown, A. (2021). Service Integration Models in HIV Clinics. [Google Scholar] [Crossref]

22. Otieno, J. (2024). Technical Analysis of Password Security in EMRs. [Google Scholar] [Crossref]