DPE-2026-0019

Bijzondere gegevens in een gebeurtenis

Een gebeurtenis naar een derde verraadt gezondheid, geloof of seksualiteit via zijn naam, pad of parameters.

Familie
Gegevens
Status
actief
Geldt voor
web, mobile-app

Wat er gebeurt

A measurement or advertising component sends structured events. The event name, the address of the screen or page it fired on, or a parameter attached to it corresponds to something the person did that falls in a special category: a symptom logged, a condition read about, a support group opened, a triage question answered. No free text is needed; the label alone carries the meaning.

Waarom het ertoe doet

The person filled in a questionnaire or read a page, not a disclosure form. What reaches the recipient is a categorised fact about their health, belief or sexuality, attached to an identifier, in a stream built to be joined with other streams. Unlike a sentence in a message, a labelled event is immediately machine-usable.

Veelvoorkomende oorzaken

  • automatic screen or page tracking, where the address itself names the subject
  • event names copied from internal feature names that describe what the feature is for
  • a site-search integration that forwards the typed term as the event name and again as a search keyword
  • content published under a third party's platform, so its measurement stack receives the path as well

Dit is het níet

Text the person typed appearing verbatim in a request is User input to third parties. Here nothing typed needs to travel: the name of the event or the address of the screen is enough. Ordinary page-view measurement on a neutral page is also not this entry; what makes it one is that the value maps to a special category.

Hoe je het vaststelt

Indicator

A request to a host under a different registrable domain containing an event name, screen address or parameter value that corresponds to a special category, alongside an identifier. The correspondence must be readable from the value itself, not inferred from context.

Methode

network-with-identifier

Kwaliteit van de detectie

88 van 100

De grenzen van deze bevinding

Wat dit patroon zou weerleggen

  • The value is an opaque identifier that does not itself disclose the category.machinaal te toetsende bevinding wordt zwakkerAn opaque code the recipient can resolve through a catalogue it also holds is not opaque in practice, but that has to be established separately.
  • The recipient is a processor bound to the controller's instructions and does not use the data for its own purposes.niet uit de meting af te leidende bevinding krijgt een ander patroonThis one bites more often than expected: the recipient is sometimes the party that built the application. The category still travelled, and the finding narrows rather than disappears.
  • The event fires on a general page whose address happens to contain a word that reads as a category.met de hand te toetsende bevinding vervalt
  • The events only start after explicit consent that named this category.met de hand te toetsende bevinding wordt zwakker

Wat dit patroon níet vaststelt

  • harm; the catalogue standardises a finding so it can be referred to, it does not weigh it
  • severity; there is no score here, by design. Weighing belongs to whoever applies the entry to a concrete case
  • unlawfulness; that is for a supervisory authority or a court
  • intent; a fault is usually a build decision, not a plan
  • absence: not finding it in one capture is not evidence that it is not there

Reproduceren

  • manualMETHOD.mdno dedicated reproduction exists yet; follow the general method and the indicator above

Juridisch kader

Bepalingen

eu-gdpr-9-1eu-gdpr-6-1-aeu-gdpr-5-1-c

Veelgehoorde tegenwerpingen

We do not send health data, only usage statistics.

The category follows from the content of the message, not from the label on the pipeline. An event named after a symptom is data about health however the stream is described internally.

The data is pseudonymous.

It travels with an identifier, which is what makes it useful to the recipient. The prohibition in the regulation is not lifted by pseudonymisation.

The recipient is in the EU.

That answers a different question. A special category reaching a party that has no role in the care or the service is the finding, wherever that party sits.

Geldt wanneer

to-processing

Aangetroffen in

De onderzoeken waarin dit patroon gemeten is.

Verwante patronen

← alle patronen