Skip to Main content Skip to Navigation
Conference papers

In-Depth Technical and Legal Analysis of Tracking on Health Related Websites with ERNIE Extension

Abstract : Searching the Web to find doctors and make appointments online is a common practice nowadays. However, simply visiting a doctors website might disclose health related information. As the GDPR only allows processing of health data with explicit user consent, health related websites must ask consent before any data processing, in particular when they embed third party trackers. Admittedly, it is very hard for owners of such websites to both detect the complex tracking practices that exist today and to ensure legal compliance. In this paper, we present Ernie, a browser extension we designed to visualise six state-of-the-art tracking techniques based on cookies. Using Ernie, we analysed 385 health related websites that users would visit when searching for doctors in Germany, Austria, France, Belgium, and Ireland. More specifically, we explored the tracking behavior before any interaction with the consent pop-up and after rejection of cookies on websites of doctors, hospitals, and health related online phone-books. We found that at least one form of tracking occurs on 62% of the websites before interacting with the consent pop-up, and 15% of websites include tracking after rejection. Finally, we performed a detailed technical and legal analysis of three health related websites that demonstrate impactful legal violations.This paper shows that while, from a legal point of view, health related websites are more privacy-sensitive than other kinds of websites, they are exposed to the same technical difficulties to implement a legally compliant website.We believe Ernie, the browser extension we developed, to be an invaluable tool for policy-makers and regulators to improve detection and visualization of the complex tracking techniques used on these websites.
Document type :
Conference papers
Complete list of metadata

https://hal.archives-ouvertes.fr/hal-03241333
Contributor : Imane FOUAD Connect in order to contact the contributor
Submitted on : Wednesday, October 6, 2021 - 4:15:08 PM
Last modification on : Thursday, August 4, 2022 - 5:18:38 PM

File

WPES21__Health_websites_Tracki...
Files produced by the author(s)

Identifiers

Citation

Vera Wesselkamp, Imane Fouad, Cristiana Santos, Yanis Boussad, Nataliia Bielova, et al.. In-Depth Technical and Legal Analysis of Tracking on Health Related Websites with ERNIE Extension. WPES 2021 - 20th Workshop on Privacy in the Electronic Society, Nov 2021, Seoul, South Korea. ⟨10.1145/3463676.3485603⟩. ⟨hal-03241333v2⟩

Share

Metrics

Record views

852

Files downloads

481