HealthTrackerAudit / report
HealthTrackerAudit report: https://www.demo-clinic.example/book-appointment
Demo report on a fictional sample site.
17 / 100
4 of 6 checks need attention (2 high priority).
- ✗ Observed: advertising pixels on the page (high): Loaded: Meta (Facebook) pixel.
- ✗ Observed: session-replay tools on the page (high): Loaded: Hotjar.
- ✓ Observed: analytics and other third-party tags (inventory) (low): 3 third-party tag(s): Meta (Facebook) pixel, Google tag / Analytics, Hotjar.
- ✗ Observed: forms that post to a third-party domain (medium): Forms post to: forms.demo-vendor.example.
- ✗ Observed: a consent management tool (medium): No known consent tool observed.
- ✓ Observed: privacy notice link (low): A privacy link is present.
Automated observations of one publicly served page (scripts in the HTML; tags fired later by a tag manager may not be visible). Context: HHS OCR bulletin on use of online tracking technologies by HIPAA covered entities and business associates (Dec 2022, updated Mar 2024), parts of which were vacated in AHA v. Becerra (N.D. Tex., June 2024). Not legal advice and not a HIPAA compliance determination.