Several Online Pharmacies Leak Sensitive Health Data to Third Parties




Carlsson, Robin; Rauti, Sampsa; Mickelsson, Sini; Mäkilä, Tuomas; Heino, Timi; Pirjatanniemi, Elina; Leppänen, Ville

Rocha Alvaro, Adeli Hojjat, Dzemyda Gintautas, Moreira Fernando, Colla Valentina

World Conference on Information Systems and Technologies

PublisherSpringer Science and Business Media Deutschland GmbH

Cham

2024

Lecture notes in networks and systems

Information Systems and Technologies: WorldCIST 2023, Volume 1

Lecture Notes in Networks and Systems

799

164

175

978-3-031-45641-1

978-3-031-45642-8

2367-3370

2367-3389

DOIhttps://doi.org/10.1007/978-3-031-45642-8_16

https://doi.org/10.1007/978-3-031-45642-8_16

https://research.utu.fi/converis/portal/detail/Publication/387704148



As the demand for digital services keeps growing, online pharmacies have become a very important part of essential digital services. When sensitive personal data such as medicine orders are processed, privacy issues become increasingly important. In this paper, we take a look at personal data delivered to third parties in 20 Finnish online pharmacies. More specifically, we study whether the data on prescription medicine orders is leaked out to third-party analytics services. Our findings reveal that 14 (70%) of studied pharmacies send out information about the customers intending to order prescription medicines to third parties, and 7 (35%) of the pharmacies even leak the data about the specific prescription medicine a specific customer is ordering. We also discuss implications of the data leaks and give suggestions on how this alarming state of affairs can be alleviated.


This research has been funded by Academy of Finland project 327397, IDA - Intimacy in Data-Driven Culture.


Last updated on 2025-06-03 at 08:30