NHS trusts are violating their promises to never share private information with Facebook on patients' medical conditions, appointments, and treatments.
Investigations have found a hidden monitoring feature in 20 NHS trusts' websites that has been sharing users' browsing data with the internet giant for years in a serious privacy violation.
Pages viewed, buttons clicked, and keyword searches are all described in depth in the data. It is compared to the user's IP address, which is an identifier associated with an individual or household, and in many cases, Facebook account information.
NHS websites have transferred records of information to the company that include information that, when linked to an individual, could reveal personal medical information.
"id": "NHS153625623",
"linkid": "nhs",
"type": "Data Leak",
"date": "05/2023",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"