PrivacySignal
Healthcare

Study of Healthcare Websites Shows Widespread and Risky Use of Tracking and Analytics Tools

HIPAA Journal · · US Federal · Healthcare Privacy

A new study found that most healthcare websites deploy third-party marketing and analytics tools that could expose sensitive patient information to outside companies. The findings point to a systemic gap between what healthcare sites collect and what patients reasonably expect about who sees their data.

Why this matters: When you visit a hospital or clinic website, you probably assume that what you look up stays between you and your provider. It often does not. Marketing trackers do not know you are searching for a cancer specialist or a mental health clinic. They just collect and send the data. Healthcare organizations are bound by HIPAA, but the tools they embed on their websites frequently are not. That mismatch puts real people at risk of having medical interests exposed to advertisers, data brokers, or anyone who buys the feed downstream. The organization running the website is responsible for what it puts on the page.

Who should care: Healthcare professionals · Privacy officers · Compliance · Cybersecurity

This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.

Analysis

All analysis →

Weekly Editorial Analysis from Experts and Editors

Logged Is Not Authorized

Georgia law restricts police use of license plate data to law enforcement purposes. A new lawsuit alleges deputies searched a man's vehicle five times while he was suing their sheriff. Two recorded reasons were "info" and "37." The system accepted both.

· 6 min read Read →
Deep Signal · Part I of III

The Algorithm Said So

Federal rulemakers are deciding what to do when artificial intelligence produces the kind of conclusion that once required an expert. They disagree about how to regulate it. They also disagree about whether the problem has arrived.

· 10 min read Read →

Related stories

Healthcare
HIPAA Journal · · US Federal

Healthcare Providers Discover Unauthorized PHI Disclosures to AI Tools

At least two healthcare providers have reported data privacy incidents in which patient health information was uploaded to AI tools without authorization. The disclosures were announced separately and involve protected health information shared outside approved channels.

Who should care: Healthcare professionals · Privacy officers · Compliance · AI governance · Lawyers · Administrators · General readers · Policy

#healthcare#ai-governance#ai#privacy Read original →
Healthcare
C CBC · · International

Critics warn of health data privacy concerns as Ottawa ramps up AI strategy

Canada's federal government is advancing its artificial intelligence strategy, and critics are raising concerns about how health data may be collected, used, or shared in that process.

Who should care: Healthcare professionals · Privacy officers · Compliance · General readers · AI governance · Policy

#healthcare#ai#privacy Read original →
Healthcare
The Guardian — Tech · · International

British people don’t trust Palantir – it’s not too late to reverse the NHS’s dependence on it | Ben Coleman

A Labour MP and health committee member is calling on UK ministers to let Palantir's £330 million NHS data platform contract expire next March rather than renew it, arguing the NHS should not remain dependent on a US tech company for control of patient data.

Who should care: Healthcare professionals · Privacy officers · Compliance

#healthcare Read original →
Healthcare
The Record · · International

Medical services company settles with 4 states over 2023 hack of sensitive patient records

Perry Johnson Companies, a Nevada-based medical services firm, has reached a settlement with attorneys general in Connecticut, New Jersey, New York, and Michigan over a 2023 breach that exposed sensitive patient records held by its medical transcription, coding, and imaging subsidiaries.

Who should care: Healthcare professionals · Privacy officers · Compliance

#healthcare Read original →
Healthcare
HIPAA Journal · · US Federal

Security Incident at EHR Vendor Affects Patients of New York Counselling Practices

A security incident at an electronic health records vendor has led to the exposure of personal and health information belonging to patients of Hispanic Counseling Center and Brooklyn Counseling Services, two New York-based mental health practices. Both organizations have begun notifying affected patients.

Who should care: Healthcare professionals · Privacy officers · Compliance

#healthcare Read original →
Healthcare
HIPAA Journal · · US Federal

Judge Certifies Classes in Meta Platforms Healthcare Data Privacy Litigation

A federal judge has certified plaintiff classes in consolidated litigation against Meta over allegations that the company collected health-related data through its tracking tools embedded on healthcare websites. Class certification is a significant procedural step that allows the case to proceed on behalf of a large group of affected individuals.

Who should care: Healthcare professionals · Privacy officers · Compliance · General readers · Policy

#healthcare#privacy Read original →