In-Depth Technical and Legal Analysis of Tracking on Health Related Websites with ERNIE Extension - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Conference Papers Year : 2021

In-Depth Technical and Legal Analysis of Tracking on Health Related Websites with ERNIE Extension

Abstract

Searching the Web to find doctors and make appointments online is a common practice nowadays. However, simply visiting a doctors website might disclose health related information. As the GDPR only allows processing of health data with explicit user consent, health related websites must ask consent before any data processing, in particular when they embed third party trackers. Admittedly, it is very hard for owners of such websites to both detect the complex tracking practices that exist today and to ensure legal compliance. In this paper, we present Ernie, a browser extension we designed to visualise six state-of-the-art tracking techniques based on cookies. Using Ernie, we analysed 385 health related websites that users would visit when searching for doctors in Germany, Austria, France, Belgium, and Ireland. More specifically, we explored the tracking behavior before any interaction with the consent pop-up and after rejection of cookies on websites of doctors, hospitals, and health related online phone-books. We found that at least one form of tracking occurs on 62% of the websites before interacting with the consent pop-up, and 15% of websites include tracking after rejection. Finally, we performed a detailed technical and legal analysis of three health related websites that demonstrate impactful legal violations.This paper shows that while, from a legal point of view, health related websites are more privacy-sensitive than other kinds of websites, they are exposed to the same technical difficulties to implement a legally compliant website.We believe Ernie, the browser extension we developed, to be an invaluable tool for policy-makers and regulators to improve detection and visualization of the complex tracking techniques used on these websites.

Domains

Web
Fichier principal
Vignette du fichier
WPES21__Health_websites_Tracking.pdf (1.22 Mo) Télécharger le fichier
Origin : Files produced by the author(s)

Dates and versions

hal-03241333 , version 1 (31-05-2021)
hal-03241333 , version 2 (06-10-2021)

Identifiers

Cite

Vera Wesselkamp, Imane Fouad, Cristiana Santos, Yanis Boussad, Nataliia Bielova, et al.. In-Depth Technical and Legal Analysis of Tracking on Health Related Websites with ERNIE Extension. WPES 2021 - 20th Workshop on Privacy in the Electronic Society, Nov 2021, Seoul, South Korea. ⟨10.1145/3463676.3485603⟩. ⟨hal-03241333v2⟩
1009 View
735 Download

Altmetric

Share

Gmail Facebook X LinkedIn More