Red from tweaktown:
Facebook has been busted for receiving sensitive medical information from hospital websites, raising the question if the social media giant has broken federal law.
Ars Technica, partnered with The Markup, a non-profit that focuses on data-driven journalism and the impacts of technology throughout society, investigated the websites of the top 100 hospitals across the United States and found that 33 of them featured a tracker called the Meta Pixel. This tracker is designed to send Facebook a packet of data whenever an individual clicks the "Schedule Online Now" button.
An example of what this packet of data can contain is the University Hospitals Cleveland Medical Center website, where the Meta Pixel will send Facebook a data packet that contains the doctor's name, and the search term the team used to identify the patient, which was "pregnancy termination".
The Markup found that if a patient is logged into their Facebook account when they arrive on the hospital's website the, some of the browsers the individual is logging in with would attach third-party cookies that linked the individual tracked medical information from the website with the user's Facebook account. Furthermore, each of the data packets comes with an IP address that can be combined with other data on an individual to find an address.
"This is an extreme example of exactly how far the tentacles of Big Tech reach into what we think of as a protected data space. I think this is creepy, problematic, and potentially illegal," said Nicholson Price, a University of Michigan law professor that studies big data and healthcare.
Facebook has been busted for receiving sensitive medical information from hospital websites, raising the question if the social media giant has broken federal law.
Ars Technica, partnered with The Markup, a non-profit that focuses on data-driven journalism and the impacts of technology throughout society, investigated the websites of the top 100 hospitals across the United States and found that 33 of them featured a tracker called the Meta Pixel. This tracker is designed to send Facebook a packet of data whenever an individual clicks the "Schedule Online Now" button.
An example of what this packet of data can contain is the University Hospitals Cleveland Medical Center website, where the Meta Pixel will send Facebook a data packet that contains the doctor's name, and the search term the team used to identify the patient, which was "pregnancy termination".
The Markup found that if a patient is logged into their Facebook account when they arrive on the hospital's website the, some of the browsers the individual is logging in with would attach third-party cookies that linked the individual tracked medical information from the website with the user's Facebook account. Furthermore, each of the data packets comes with an IP address that can be combined with other data on an individual to find an address.
"This is an extreme example of exactly how far the tentacles of Big Tech reach into what we think of as a protected data space. I think this is creepy, problematic, and potentially illegal," said Nicholson Price, a University of Michigan law professor that studies big data and healthcare.