Health data represents one of the most sensitive and valuable types of information due to the detailed personal and medical information it contains. With increasing cyber threats targeting healthcare institutions, implementing effective cybersecurity standards has become imperative. This applied study aims to evaluate the impact of implementing cybersecurity standards on protecting health data in private medical centers in Dammam City, Saudi Arabia.

The study adopted an analytical-applied methodology combining descriptive and exploratory approaches. Questionnaires were distributed to two model medical complexes with statistical analysis performed using SPSS software. Results revealed significant variation in implementation levels: Model Complex 1 achieved 79.4% compliance with cybersecurity standards, while Model Complex 2 achieved 56.3%. The overall average compliance across both centers was 70%. The study identified that shortage of specialized technical personnel (68% of respondents) and weak security awareness among employees (75% of respondents) represent the primary barriers to effective implementation. Critical gaps were identified in security awareness and training (57.5%) and human resources (62.5%).

The study recommends eight comprehensive strategies: recruiting and developing specialized cybersecurity personnel, implementing regular multi-phase training programs, developing and updating documented security policies, upgrading technical infrastructure through phased implementation, allocating dedicated cybersecurity budgets (annually 80,000-150,000 Saudi Riyal for medium-sized centers), ensuring compliance with the National Cybersecurity Framework and ISO/IEC 27001 standards, conducting periodic security assessments, and strengthening cooperation between medical centers and government agencies.