EPIC Urges 7th Circuit to Uphold Wiretap Act to Protect Private Communications Containing Sensitive Health Data
Summary
EPIC has urged the U.S. Court of Appeals for the Seventh Circuit to apply the Wiretap Act's crime-tort exception in a case involving Edward-Elmhurst Health. The health system is accused of disclosing patient MyChart portal information to Meta, as it embedded Meta Pixel and other tracking technologies into its webpages, which collected and disclosed visitor information to unknown companies.
IFF Assessment
This article details a potential privacy violation and unauthorized disclosure of sensitive health data, which is detrimental to individuals' security.
Defender Context
This case highlights the risks associated with third-party tracking technologies embedded in healthcare portals, which can lead to unauthorized data disclosures. Defenders should be aware of the potential for sensitive information to be exfiltrated through such tracking scripts and advocate for stricter data handling policies and technologies that minimize third-party access.