A person does not need to submit a diagnosis for a website visit to reveal what kind of help they may be seeking.
Australia’s Privacy Commissioner found in separate determinations that Medmate Australia and Monash IVF interfered with privacy when sensitive information collected through third-party tracking pixels was used to target advertising on social-media platforms. The findings followed a year-long investigation into the health-service websites.
The Commissioner said collecting sensitive information in this way requires consent. The accompanying inspection covered 50 health-service websites and asked providers to understand what their third-party code collects rather than treating a marketing tag as an invisible implementation detail.
The browser request is the disclosure
A tracking pixel is usually code that sends an event to another server when a page loads or a person acts. Depending on its configuration, the request can carry a page address, referrer, event name, device details and identifiers stored by the browser. Page names and query strings can turn ordinary analytics fields into clues about fertility, medication or another health concern.
A proper audit starts in the browser’s network log and the tag manager, not the privacy-policy draft. Teams should record every external destination, the exact payload for each event, the condition that triggers it, retention and the downstream advertising purpose. Sensitive routes should default to no third-party marketing requests.
Consent cannot repair unnecessary collection
A banner is not a licence to send every available field. Consent for sensitive information must be informed and specific, while data minimisation still asks whether the collection is necessary at all. Health services can measure page reliability and broad readership without building an advertising audience from individual care journeys.
The practical response is to separate essential service telemetry from marketing, strip URLs and free text from event payloads, prevent tags from firing before a valid choice and verify the deployed site after every tag-manager change. Configuration is part of the privacy system and needs the same review as application code.
Sources & further reading
Sources establish the reported facts above. Analysis and conclusions are enshit.club’s own.