A new investigation from Bloomberg has revealed how state-run health insurance marketplaces have - often accidentally - been sharing sensitive data with tech giants.
This is such bad but not very uncommon. Many universities also have these clear privacy violations in their application portals. For example look at Yeshiva University and County College Morris to what trackers they load in using this shitty company Ellucian. Mind that this is also the system were students have to upload sensitive documents such as a passport copy to support their applications.
My own university actually used to do the same and because they seemed unwilling to change it I filled a complain at the ICO and it has been changed after since.