Third-Party Data Leaks in the Websites of Finnish Social and Healthcare Districts




Puhtila, Panu; Vuorinen, Esko; Rauti, Sampsa

Rocha, Álvaro; Adeli, Hojjat; Dzemyda, Gintautas; Moreira, Fernando; Poniszewska-Marańda, Aneta

World Conference on Information Systems and Technologies

PublisherSpringer Science and Business Media Deutschland GmbH

2024

Lecture notes in networks and systems

Good Practices and New Perspectives in Information Systems and Technologies: WorldCIST 2024, Volume 1

Lecture Notes in Networks and Systems

985

139

152

978-3-031-60214-6

978-3-031-60215-3

2367-3370

2367-3389

DOIhttps://doi.org/10.1007/978-3-031-60215-3_14

https://doi.org/10.1007/978-3-031-60215-3_14

https://research.utu.fi/converis/portal/detail/Publication/457045184



With digitalization, the use of essential social and healthcare services online has become increasingly prevalent. In this paper, we conduct a survey on the websites of Finnish social and healthcare districts and determine to what extent, if any, they leak their users’ personal data to third parties through the use of the collection and tracking of user data and actions with the web analytics tools. Our findings show that 82.6% of the studied websites leaked personal data to outside actors, but the extent and contents of these data leaks varied. Our study also demonstrates that in many cases, privacy policies of the studied websites do not always report personal data items transferred to third parties and fail to adequately inform users. The cookie banners of the studied websites were also found to contain several dark patterns.


This research has been funded by Academy of Finland project 327397, IDA—Intimacy in Data-Driven Culture.


Last updated on 2025-13-05 at 10:23