A4 Refereed article in a conference publication
Health data leaks to third parties in web-based health services
Authors: Rauti, Sampsa; Carlsson, Robin; Laato, Samuli; Heino, Timi; Puhtila, Panu; Leppänen, Ville
Editors: Kasurinen, Jussi; Päivärinta, Tero; Vartiainen, Tero
Conference name: Annual Doctoral Symposium of Computer Science
Publisher: CEUR-WS
Publication year: 2024
Journal: CEUR Workshop Proceedings
Book title : TKTP 2024: Annual Doctoral Symposium for Computer Science 2024: Proceedings of the 41 st Doctoral Symposium of the Finnish Society for Computer Science
Journal name in source: CEUR Workshop Proceedings
Volume: 3776
First page : 117
Last page: 121
eISSN: 1613-0073
Web address : https://ceur-ws.org/Vol-3776/shortpaper10.pdf
Self-archived copy’s web address: https://research.utu.fi/converis/portal/detail/Publication/458969247
Today, users may share sensitive health data on web-based health services. We rely on these services to keep our data safe and secured, but this is not always the case. Therefore, this study investigates the privacy of a snapshot of 10 Finnish web-based health services, providing an analysis of health data leaks. We show that all analyzed services leaked at least some kind of personal data to third parties – from topics of visited pages to details on appointment bookings. While the situation has improved after we have notified the health service providers about this issue, the study serves as a reminder of the ongoing challenges in protecting user privacy in online health services and highlights the pressing need to address these issues.
Downloadable publication This is an electronic reprint of the original article. |
Funding information in the publication:
This research has been funded by Academy of Finland project 327397, IDA – Intimacy in Data-Driven Culture