A4 Refereed article in a conference publication
Health data leaks to third parties in web-based health services
Authors: Rauti, Sampsa; Carlsson, Robin; Laato, Samuli; Heino, Timi; Puhtila, Panu; Leppänen, Ville
Editors: Kasurinen, Jussi; Päivärinta, Tero; Vartiainen, Tero
Conference name: Annual Doctoral Symposium of Computer Science
Publisher: CEUR-WS
Publication year: 2024
Journal: CEUR Workshop Proceedings
Book title : TKTP 2024: Annual Doctoral Symposium for Computer Science 2024: Proceedings of the 41 st Doctoral Symposium of the Finnish Society for Computer Science
Journal name in source: CEUR Workshop Proceedings
Volume: 3776
First page : 117
Last page: 121
eISSN: 1613-0073
Publication's open availability at the time of reporting: Open Access
Publication channel's open availability : Open Access publication channel
Web address : https://ceur-ws.org/Vol-3776/shortpaper10.pdf
Self-archived copy’s web address: https://research.utu.fi/converis/portal/detail/Publication/458969247
Self-archived copy's licence: CC BY
Self-archived copy's version: Publisher`s PDF
Today, users may share sensitive health data on web-based health services. We rely on these services to keep our data safe and secured, but this is not always the case. Therefore, this study investigates the privacy of a snapshot of 10 Finnish web-based health services, providing an analysis of health data leaks. We show that all analyzed services leaked at least some kind of personal data to third parties – from topics of visited pages to details on appointment bookings. While the situation has improved after we have notified the health service providers about this issue, the study serves as a reminder of the ongoing challenges in protecting user privacy in online health services and highlights the pressing need to address these issues.
Keywords:
Data concerning health, data leaks, Medical websites, third-party services, Web privacy
Downloadable publication This is an electronic reprint of the original article. |
Funding information in the publication:
This research has been funded by Academy of Finland project 327397, IDA – Intimacy in Data-Driven Culture