The aim of the research was to contribute to the expansion of knowledge on human resources competencies, in order to prevent the emergence and propagation of risks at the organizational and cyber levels. The practical analysis used quantitative-comparative analysis within public and private medical units in Romania, presenting in detail the human resources competencies necessary for risk management. The results indicate that mandatory human resources competencies exert a significant influence on cybersecurity readiness through general and specific competencies, such as IT&C skills, security ethics, and economic competencies. Furthermore, the study highlights critical legal implications regarding GDPR compliance and data privacy liability. The originality of the study is supported by the conclusions resulting from the analysis of the capacity of human resources to integrate theoretical knowledge with practical competencies in the process of cyber risk perception and management. From the perspective of future research directions, the need to identify appropriate methods for assessing the competencies acquired by human resources, applied specifically in the context of cyber risks, is emerging.

© The Author(s) 2025. Published by RITHA Publishing. This article is distributed under the terms of the license CC-BY 4.0., which permits any further distribution in any medium, provided the original work is properly cited maintaining attribution to the author(s) and the title of the work, journal citation and URL DOI.

Article’s history: Received 25th of November, 2025; Revised 7th of December, 2025; Accepted for publication 27th of December, 2025; Available online: 30th of December, 2025 Published as article in Volume I, Issue 2(2), 2025.

Riza, I., & Bogdan, A.M. (2025). Human Resource Competencies in Healthcare Cybersecurity: Risk Management and Legal Compliance Implications. Applied Journal of Economics, Law and Governance, Volume I, Issue 2(2), 205-216. https://doi.org/10.57017/ajelg.v1.i2(2).06 

Conflict of Interest Statement: The authors declare that the research was conducted in the absence of any commercial or financial relationships that could be construed as a potential conflict of interest.

Acknowledgment: This research was funded by Spiru Haret University, Central Research Institute through Internal Research Grant Program “Challenges in a Technology & Data-Driven Society” (Grant No.: ID 840/13.04.2023), period: 1st May, 2023–30th December, 2025. 

Data Availability Statement : Data available on request: The data that support the findings of this study are available from the corresponding author upon reasonable request.