The electronic medical record(EMR) is designed to automatically keep, gather and retrieve patient information that is entered by the EMR end-user (Lee et al., 2013).After the digitisation trend, EHR found to be a way to enhance the quality of health care services and a successful implementation of the EHR brings benefits to the health care professional, customers and the health organisation(Yoshida et al., 2013).the most reported privacy violation comes from the HCPs misuse who have a privileged access to the EHR system (Foth, 2017).Ponemon (2011) reported that a majority of healthcare organisations struggle to protect EHR data.