A4 Vertaisarvioitu artikkeli konferenssijulkaisussa
Effects of Informing Finnish Website Owners about Third-Party Data Leaks
Tekijät: Savela, Riki; Rauti, Sampsa; Rajapaksha, Sammani; Puhtila, Panu
Toimittaja: Babic, Snjezana; Car, Zeljka; Cicin-Sain, Marina; Ergovic, Pavle; Galinac Grbac, Tihana; Gros, Stjepan; Jovic, Alan; Jurekovic, Darko; Katulic, Tihomir; Koricic, Marko; Kralj, Nenad; Mornar, Vedran; Petrovic, Juraj; Skala, Karolj; Skvorc, Dejan; Sruk, Vlado; Tijan, Edvard; Valacich, Joe; Vrcek, Neven; Vrdoljak, Boris
Konferenssin vakiintunut nimi: MIPRO ICT and Electronics Convention
Julkaisuvuosi: 2026
Lehti: International Convention on Information and Communication Technology, Electronics and Microelectronics
Kokoomateoksen nimi: 2026 49th MIPRO ICT and Electronics Convention (MIPRO)
Vuosikerta: 49
Aloitussivu: 823
Lopetussivu: 828
ISBN: 979-8-3315-6310-3
eISBN: 979-8-3315-6309-7
ISSN: 1847-3938
eISSN: 1847-3946
DOI: https://doi.org/10.1109/MIPRO70003.2026.11592039
Julkaisun avoimuus kirjaamishetkellä: Ei avoimesti saatavilla
Julkaisukanavan avoimuus : Ei avoin julkaisukanava
Verkko-osoite: https://ieeexplore.ieee.org/document/11592039
Users’ personal data is collected by various third-party services on modern websites. Often this happens without the users’ knowledge, creating serious privacy risks especially when sensitive information such as health or political data is being processed. This paper studies how website maintainers respond to disclosures of third-party data leaks in their web services. We conduct a longitudinal comparison with two time points for four different categories of Finnish websites – online pharmacies, healthcare service websites, municipal websites, and voting advice applications. The maintainers of these websites were informed about third-party data leaks on their websites. The findings show how effectively website maintainers reacted to these disclosures in different scenarios and how the data leak situation evolved over time. These results illustrate real-world data-leak prevention practices and their effectiveness in different kinds of sensitive web services.
