Major Pharmacies Give Cops Patient Records Without a Warrant, Lawmakers' Investigation Finds
Three major pharmacy chains admitted to encouraging staff to hand prescription records over to law enforcement without a warrant, and without a legal review.

A federal inquiry has found that several major pharmacy chains have a policy of turning over customers' pharmacy records to police without a warrant. The results have sparked concerns from lawmakers about patient privacy, especially as fights over prescription abortion medication continue nationwide.
"Americans deserve to have their private medical information protected at the pharmacy counter and a full picture of pharmacies' privacy practices, so they can make informed choices about where to get their prescriptions filled," a letter from three members of Congress addressed to the Department of Health and Human Services (HHS) read. "Americans' health records deserve the greatest degree of protection available in law."
In July, a group of nearly 50 Congressional lawmakers signed a letter to HHS, urging the agency to develop stricter regulations around pharmacies' ability to disclose customer records to law enforcement.
Following this letter, three lawmakers, Sen. Ron Wyden (D-Ore.), Rep. Pramila Jayapal (D-Wash.), Rep. Sara Jacobs (D-Calif.), launched an inquiry into how the eight largest pharmacy chains in the United States—CVS Health, Walgreens Boots Alliance, the Cigna Group, Optum Rx, Walmart Inc., the Kroger Company, Rite Aid Corporation, and Amazon Pharmacy—handle requests from law enforcement to hand over customer prescription records.
In an additional letter sent this week, Wyden, Jayapal, and Jacobs stated that five of the eight pharmacy chains said that they require these demands by police to be "reviewed by legal professionals" before responding to law enforcement. However, they also found that in three of the chains, including CVS Health, the nation's largest pharmacy company, "pharmacy staff face extreme pressure to immediately respond to law enforcement demands and, as such, the companies instruct their staff to process those requests in the store."
The letter noted that these demands typically come in the form of a subpoena, an order that doesn't require approval from a judge, unlike a warrant. While pharmacies aren't free to simply ignore these subpoenas, the letter argues that "pharmacies can and should insist on a warrant, and invite law enforcement agencies that insist on demanding patient medical records with solely a subpoena to go to court to enforce that demand." If pharmacies continue their policies of handing over pharmacy records, the lawmakers also argued that HHS should strengthen regulations to require pharmacies to adopt more stringent procedures.
Thankfully, the number of these requests appears to be fairly small. The letter noted that CVS Health received fewer than ten of these requests last year. However, despite the low number of requests, the lawmakers urged HHS to "do much more to protect patient data and push for far more transparency when pharmacy records are disclosed."
Especially as debates over controversial medications—from abortion pills to opioid medications—loom large, customers' ability to keep their prescription history private from prying law enforcement is paramount. Just as important is consumers' ability to know which pharmacies are likely to give up their private information without a warrant.
"These findings underscore that not only are there real differences in how pharmacies approach patient privacy at the pharmacy counter, but these differences are not visible to the American people," the letter reads. "If the landscape were made clearer, patients will finally be able to hold pharmacies with neglectful practices accountable by taking their business elsewhere."
Editor's Note: As of February 29, 2024, commenting privileges on reason.com posts are limited to Reason Plus subscribers. Past commenters are grandfathered in for a temporary period. Subscribe here to preserve your ability to comment. Your Reason Plus subscription also gives you an ad-free version of reason.com, along with full access to the digital edition and archives of Reason magazine. We request that comments be civil and on-topic. We do not moderate or assume any responsibility for comments, which are owned by the readers who post them. Comments do not represent the views of reason.com or Reason Foundation. We reserve the right to delete any comment and ban commenters for any reason at any time. Comments may only be edited within 5 minutes of posting. Report abuses.
Please
to post comments
The results have sparked concerns from lawmakers about patient privacy, especially as fights over prescription abortion medication continue nationwide.
Wait, what? I would have thought this was for like, opioids or something, the worry here is abortion drugs?
By the way, warrants and other elements of due process aside, this would 100% be a HIPAA violation and the Pharmacy should have known that.
Private company exemption and all that jazz - - - - - - - - - - - -
Narp. They're a "covered entity".
But they're doing the government's bidding so I expect Reason and every other Leftist to see that as a forgivable act. LOL.
"Muh private company"
I have a friend who is a pharmacist in a hospital. Conversations with her are like the ones we had with one of our Drill Sargents who was Special Forces. Occasionally she stops, thinks for a minute, and then says,"can't say anymore." Because she would be violatIng HIPPAA by disclosing information about a specific patient. Even if I've no way of knowing the guy she is talking about. A name, a drug type and a reason for it being prescribed is enough.
When I was on dialysis there were some people on the floor I had known for years. When I got the call to get a kidney transplant the nurses at the dialysis center couldn't tell the other patients that I had gotten a kidney. Again, a HIPPAA violation. They aren't fooling around, you can't gossip about a patient and their meds or treatment. It's a huge deal.
Yeah I wondered about that. If I were in that position I'd say "Get a warrant of $50K for the fine.".
Think of what a hideous troll a pro life group could become if they decided to use the tactic of get the data (use a cop member or pretend to be involved with an investigation) then make sure thier friends, family, significant other, employer, social media, all know they took some clump of cell evicting pills.
Well, I suppose of the issue was pro life groups getting prescription records, but the issue seems to be police. I never pegged the police as "pro life".
Police abuse of power for personal gains. Abortion is a topical item, what about outing people who got the jab? Or worse, those who didn't get the jab at the height of the paranoia.
I'm pretty sure pharmacies don't have records of people to whom they did not provide anything.
Has this actually happened? Or is it just Reason twisting this into some abortion rights bullshit?
Just for fun, here is the civil penalties for HIPAA violation:
HIPAA violation is due to willful neglect and is not corrected: $50,000 per violation, with an annual maximum of $1.5 million.
Paging all class action attorneys - - - - - -
45 CFR 164.512(e) and (f)
Yes, the police are supposed to provide written documentation. (It does not, however, have to be a court order or warrant.) But no reasonable jury is going to hold a pharmacy clerk accountable for giving in to an armed police officer's implied threats.
True, I'd be hard pressed as a jurist to convict the pharmacist. The cop is who needs to get the shit kicked out of him... in a purely legal and economical way.
That's different. My jab protects you, your jab protects me, but my jab doesn't protect me and your jab doesn't protect you.
I would. Hey you knew the law, or should have.
Already knew CVS was a piece of shit, but this is a new low.
But it's ok for private companies to censor when "asked" by the government.
Stop enabling big pharma and their distributors. Get off the standard American diet and start exercising to possibly escape this indentured existence.
Blah blah blah. My grandfather was born and raised on a farm and for most of his life ate only what they raised or traded for. Being the OG Tough Old Bird he didn't even use asprin. He developed Polycycstic Kidney Disorder and had to go on dialysis in the 1970s. It's a genetic disorder. So stuff your paranoid conspiracy theories. Believe it or not you can do everything right and still have an organ or a whole system crap out on you.
So, because some ailments are not caused by poor diet and lack of exercise, we should therefore dismiss as "paranoid conspiracy theories" the advice to eat well and exercise?
Some people need to stop seeing smoke filled rooms and shadowy figures in everything they don't understand. Doctors in South Dakota have treated my family well. By extension the medications they prescribed have been helpful to allow us a quality of life we would not have enjoyed without them.
I am from a long line of farmers and ranchers. We all worked hard and ate pretty standard fare with little coming from boxes yet kidney disease has devastated generations of us.
Hell, I'm the first godless heathen in the bunch and even that didn't spare the majority of us.
Eat well, exercise, die anyways.
No one is saying a sensible diet and regular exercise aren't good things. Reasonably fit people are less likely to get many diseases, and more likely to recover if they do. People are simply pointing out that even the healthiest diet and exercise routines won't prevent every disease. Cleaning up your house to reduce fire hazards is also great, but that doesn't mean there's no reason to have a fire extinguisher too.
Blah blah blah. Possibly is word of which you may need to learn the definition.
Anyhow, socialized medicine passes the costs of poor health decisions and folks bullshitting themselves on to others.
Jim Fixx. Big name in running. Wrote two books on running. Was on all the.popular TV shows telling people to get out and run to be healthy. Promoted the whole healthy living scene. Eat good, exercise, all that.
Died at 52 of a heart attack. While running. If the universe has a sense of humor his body was found by a 92 year old smoker on his way to the liquor store to pick up his daily fifth of bourbon.
I had a boss who talked about how doctors and meds are bad for you. Talked up his version of eating healthy and such. Refused to take meds that doctors prescribed. Fucker blamed the aspirin he took for why he fell down the stairs and broke his arm. Everyone knew it was the bottle of Crown Royal he drank down at the vouenteer firestation while they were prepping the annual banquet.
No doubt that some people may benefit from a better diet and more exercise alone. However most will need some adjustments as suggested by a doctor monitoring their vital statistics. Some will need a lot of help and their diet and exercise will have almost no effect.
My wife's boss has a son who does the whole healthy thing. He's high-school aged and looks like a Greek God. He's in the hospital for liver failure induced by a variety of immune system gone mad that is murdering his liver.
Your advise is bull shit. It simply doesn't hold up when faced with reality.
Your posts are weak like you. Maybe those pills you take are rotting your brain or perhaps you are just numb; I hope you found a dictionary to look up and learn possibly. I don’t care what your neighbor’s college roommate’s mailman’s cat did.
You're the one who dropped the "Big" bomb on the conversation. Big Tobacco, Big Gun, Big Auto, Big Oil. Big Pharma. All signs of a paranoid person seeing conspiracies behind thing too Big for their tiny brains to understand. Just blame the companies because they aren't small mom and pop companies.
Forgive me if I am not willing to take medical advise from someone who thinks the pharmaceutical companies and doctors belong to some dark cabal.
While you are leveling yourself down, feel free to burn that strawman.
They are businesses in the business to have more business. They aren’t there to fix you, they are there to keep you as a customer. Did you get your next booster? Fauci and Biden will give you a pat on the back. And be sure to check your pill alarm. Might be time for some more.
So do you believe auto mechanics are out to get you? All of them conspiring with the auto industry and aftermarket companies using substandard parts so your car keeps breaking down?
Are the plumbers out to get you as well? What about the carpenters and electricians? Do they gather in secret rooms to plot how to best insure your pipes will clog and breakers fail?
I see you didn’t burn your strawman. Did you take your pills on time? Fauci thanks you for getting vaxxed.
Did you find a dictionary yet?
Lots of people have congenital health problems. Lots of people have health problems caused by what they choose to eat and do. The latter group can be helped a lot by following Chumby's advice. So what the hell are you arguing about? No one claimed that every health problem can be fixed by good diet and exercise. Only that a lot can, which is definitely true.
Who remembers Dunphy bragging about this shit years ago?
Who remembers Dunphy?
Me.
Pepperidge Farms remembers.
Third party doctrine is old news.
We don't need complex executive-agency rules about protecting pharmacy records. Congress could solve this will a single-sentence bill. Abolish the third-party doctrine. If you want to prosecute me for a crime, get a warrant. It shouldn't matter whether I put my papers into the hands of a third party - they're still my papers.
Want my pharmacy records? Get a warrant. Want my bank records? Get a warrant. Want my emails? Get a warrant. Life and the law would be so much simpler if we stuck to the plain wording of the Constitution.
Oh but pity the poor IRS....
Nope. Can't type it with a strait face.
Actually HIPPA already covers this, but as usual nobody cares what the actual law is.
But if we stick with the plain wording of the constitution, there will be no gun control!
Long Island NY police requires applicants for a pistol license (just to own a pistol) to list all prescriptions taken. Many applicants fudge their response, not wanting to list dick pills or oxy meds (any narcotic on the list requires a notarized statement from your doctor that you aren't a risk if you are possessing a pistol). The consensus in the gun community was they had no way of verifying your prescriptions. Guess again. So much for privacy penumbra's when it comes to guns.
Someone with a serious oxy problem will likely be too busy sleeping to go out and shoot somebody. Have dick pills ever resulted in violence?
Doesn't talk radio, the preferred media of J6 yahoos, advertise dick pills and gold coins?
If you really want to draw a correlation, that's where to start.
You just enjoy stirring the shit. It has to be that.
You telling me Sean Hannity isn't sponsored by dick pills?
What's with the Sean Hannity fixation in your trolls lately?
Tucker Carlson, sure. Glenn Greenwald, Russell Brand, Matt Taibbi, okay. But I don't know anyone here who's on your enemies list who listens to Hannity.
Seems like you're way off target.
The fact that you are so defensive is very telling.
No you drunk pussy, he’s just calling you on your bullshit.
Now fuck off, adults are trying to have a conversation here.
Fuck if I know. I haven't listened to talk radio sing 2001. I got tired of the drum beat for The War in Iraq.
I stopped when Trump got the nomination and the host changed, mid-sentence, from being critical of the guy to worshipping the toilet he shat on. That's when I had my "duh" moment and realized that talk radio hosts are shameless shills for the Republican party, and anyone who takes them seriously is a brainwashed tool.
Seriously? It took you that long?
Did you ever listen to the Satellite Radio station for leftist talk radio? It was like listening to Rush, but less subtle, and less skillful.
And Rush was never afraid to debate anyone.
Do you realize what happens when you tell the Gestapo police No?
They aren't the customers' pharmacy records. They're the pharmacy's records, created and owned by the pharmacy.
They're about a customer? So fucking what? Does the customer have a contract with the pharmacy that says they can't talk about the customer? The pharmacy isn't initiating force or engaging in fraud either by making the records or handing them over. Absent an agreement to the contrary, in an actually free country anyone would be allowed to talk about your interactions with them to anyone they damn well please.
So, in an actually libertarian society, the pharmacy would be legally allowed to give or sell the records to anyone they like, (which includes the police, because, any-damn-one they like) absent a voluntary agreement that they wouldn't. Did you get such an agreement before buying from them? No? Then they're free to say whatever they like.
Insofar as any legislation, government regulation, or other form of coercion stops pharmacies from providing their records to anyone, that's a demonstration of the un-libertarian nature of the coercion.
In an actual Libertarian society, the pharmacy wouldn't have any patient records, because drugs wouldn't require prescriptions. They'd just have an anonymous receipt for the amount paid and the goods purchased.
Hmm? Do you really think pharmacies would be completely unlike every other business in America? Grocery stores are under no obligation to try to track who you are and what you bought, but they damn well do their best to, because that information is worth money to them. Pharmacies would do the exact same thing.
re: "Does the customer have a contract with the pharmacy that says they can’t talk about the customer?"
Yes. It's right there in their Notice of Privacy Practices.
Read the HIPPAA agreement you have to sign to pick up meds. It explains why you are wrong.
Reading is racist.
HIPAA, of course, means "Health Insurance Portability and Accountability Act". Now, what was that last word there? As in legislative act?
If you don't understand the difference between a voluntary agreement and coercion by the government . . . well, you're certainly qualified to write for Reason.
In a libertarian society a competing pharmacy could sell you drugs anonymously without keeping records. And the police wouldn't have any reason to care what drugs you are buying in the first place.
I started using BioTRUST Vitamins and Supplements, and I must say, the experience has been nothing short of exceptional. From the moment I began incorporating these products into my daily routine, I noticed a significant improvement in my overall well-being. The quality of these supplements is truly remarkable, as they are made from the finest ingredients and backed by extensive scientific research, find more reviews on https://biotrust.pissedconsumer.com/review.html . Not only do they provide me with the necessary nutrients my body needs, but they also enhance my energy levels and support my immune system. The results have been truly transformative, and I highly recommend BioTRUST Vitamins and Supplements to anyone looking to optimize their health and vitality.
A subpoena is a court order, just as a search warrant would be. Pharmacy records are simply business records.
Subpoenas aren't signed by a judge, so they can't be a court order. They may be used to get a court order - but the reason cops use a subpoena instead of a warrant is to avoid the trouble of finding a judge who will sign without asking questions.