Bring-your-own-device in medical schools and healthcare facilities: A review of the literature

Background: Enabling personal mobile device use through a bring-your-own device (BYOD) policy can potentially save significant costs for medical schools and healthcare facilities, as they would not always have to acquire facility-owned devices. The BYOD policy is also perceived as a driver for balancing user needs for convenience with institutional needs for security. However, there seems to be a paucity in the literature on BYOD policy development, policy evaluation, and evaluation of mobile device implementation projects. Objective: This review explored the literature to identify BYOD policy components (issues, interventions, and guidelines) that could potentially inform BYOD policy development and implementation in medical schools and healthcare facilities. Methods: A literature search on PubMed, Web of Science, and Ebscohost (Academic Search Premier, ERIC, CINAHL, and MEDLINE) was conducted using the following search terms and their synonyms: healthcare facilities, mobile devices, BYOD, privacy and confidentiality, and health records. We developed a review matrix to capture the main aspects of each article and coded the matrix for emerging themes. The database and hand search yielded 1 594 articles, 14 of which were deemed as meeting the inclusion criteria. Results: Several themes emerging from the analysis include: device management, data security, medical applications, information technology, education and/or curriculum, policy, and guidelines. The guidelines theme seems to provide a direction for BYOD policy development and implementation while the policy theme seems to be the comprehensive solution that synergizes BYOD implementation. Conclusion: Rather than an approach of 'chasing' issues with interventions, a more feasible approach towards achieving a safe mobile device use environment is through the development of comprehensive BYOD policies that would balance users' need for convenience with organizational security and patient privacy. The paucity in peer-reviewed literature calls for robust research that uses socio-technical approaches to development and evaluation of BYOD policies in medical schools and healthcare facilities.