A4 Refereed article in a conference publication

Several Online Pharmacies Leak Sensitive Health Data to Third Parties




AuthorsCarlsson, Robin; Rauti, Sampsa; Mickelsson, Sini; Mäkilä, Tuomas; Heino, Timi; Pirjatanniemi, Elina; Leppänen, Ville

EditorsRocha Alvaro, Adeli Hojjat, Dzemyda Gintautas, Moreira Fernando, Colla Valentina

Conference nameWorld Conference on Information Systems and Technologies

PublisherSpringer Science and Business Media Deutschland GmbH

Publishing placeCham

Publication year2024

JournalLecture notes in networks and systems

Book title Information Systems and Technologies: WorldCIST 2023, Volume 1

Series titleLecture Notes in Networks and Systems

Volume799

First page 164

Last page175

ISBN978-3-031-45641-1

eISBN978-3-031-45642-8

ISSN2367-3370

eISSN2367-3389

DOIhttps://doi.org/10.1007/978-3-031-45642-8_16

Web address https://doi.org/10.1007/978-3-031-45642-8_16

Self-archived copy’s web addresshttps://research.utu.fi/converis/portal/detail/Publication/387704148


Abstract
As the demand for digital services keeps growing, online pharmacies have become a very important part of essential digital services. When sensitive personal data such as medicine orders are processed, privacy issues become increasingly important. In this paper, we take a look at personal data delivered to third parties in 20 Finnish online pharmacies. More specifically, we study whether the data on prescription medicine orders is leaked out to third-party analytics services. Our findings reveal that 14 (70%) of studied pharmacies send out information about the customers intending to order prescription medicines to third parties, and 7 (35%) of the pharmacies even leak the data about the specific prescription medicine a specific customer is ordering. We also discuss implications of the data leaks and give suggestions on how this alarming state of affairs can be alleviated.

Downloadable publication

This is an electronic reprint of the original article.
This reprint may differ from the original in pagination and typographic detail. Please cite the original version.




Funding information in the publication
This research has been funded by Academy of Finland project 327397, IDA - Intimacy in Data-Driven Culture.


Last updated on 2025-06-03 at 08:30