In-Depth Technical and Legal Analysis of Tracking on Health Related Websites with ERNIE Extension
In-Depth Technical and Legal Analysis of Tracking on Health Related Websites with ERNIE Extension
复制标题
使用 ERNIE 扩展对健康相关网站进行跟踪的深入技术和法律分析
DOI：
--
复制
发表时间：
2021
期刊：
影响因子：
--
通讯作者：
A. Legout
中科院分区：
文献类型：
--
作者：
Vera Wesselkamp;Imane Fouad;C. Santos;Yanis Boussad;Nataliia Bielova;A. Legout
如今，搜索网络寻找医生并在线预约是一种常见的做法。但是，仅访问医生网站可能会披露与健康相关的信息。由于GDPR仅允许通过明确的用户同意处理健康数据，因此与健康相关的网站必须在任何数据处理之前征得同意，特别是当它们嵌入第三方跟踪器时。跟踪当今存在并确保法律合规性的实践。在本文中，我们介绍了Ernie，这是我们设计的浏览器扩展程序，旨在可视化基于cookie的六种最先进的跟踪技术。使用Ernie，我们分析了385个与健康相关的网站，这些网站在搜索德国，奥地利，法国，比利时和爱尔兰的医生时将访问这些网站。更具体地说，我们在同意弹出窗口进行任何互动之前探索了跟踪行为，以及在医生，医院和与健康相关的在线电话书网站上拒绝饼干之后。我们发现，在与同意弹出窗口进行交互之前，至少有一种跟踪发生在62％的网站上，而15％的网站包括拒绝后跟踪。最后，我们对三个与健康相关的网站进行了详细的技术和法律分析，这些网站表明法律违规有影响力。本文表明，尽管从法律角度来看，与其他类型的网站相比，与健康相关的网站更敏感，但它们面临实施法律规定网站的相同技术困难。我们认为，我们开发的浏览器扩展程序Ernie是政策制定者和监管机构的宝贵工具，以改善这些网站上使用的复杂跟踪技术的检测和可视化。
Searching the Web to find doctors and make appointments online is a common practice nowadays. However, simply visiting a doctors website might disclose health related information. As the GDPR only allows processing of health data with explicit user consent, health related websites must ask consent before any data processing, in particular when they embed third party trackers.Admittedly, it is very hard for owners of such websites to both detect the complex tracking practices that exist today and to ensure legal compliance. In this paper, we present ERNIE, a browser extension we designed to visualise six state-of-the-art tracking techniques based on cookies. Using ERNIE, we analysed 385 health related websites that users would visit when searching for doctors in Germany, Austria, France, Belgium, and Ireland. More specifically, we explored the tracking behavior before any interaction with the consent pop-up and after rejection of cookies on websites of doctors, hospitals, and health related online phone-books. We found that at least one form of tracking occurs on 62% of the websites before interacting with the consent pop-up, and 15% of websites include tracking after rejection. Finally, we performed a detailed technical and legal analysis of three health related websites that demonstrate impactful legal violations. This paper shows that while, from a legal point of view, health related websites are more privacy-sensitive than other kinds of websites, they are exposed to the same technical difficulties to implement a legally compliant website. We believe ERNIE, the browser extension we developed, to be an invaluable tool for policy-makers and regulators to improve detection and visualization of the complex tracking techniques used on these websites.
黑暗模式和同意横幅的法律要求：互动批评视角
DOI：
10.1145/3411764.3445779
发表时间：
2021
期刊：
CHI '21: Proceedings of the 2021 CHI Conference on Human Factors in Computing
影响因子：
--
作者：
Gray, Colin M.;Santos, Cristiana;Bielova, Nataliia;Toth, Michael;Clifford, Damian
通讯作者：
Clifford, Damian