Members of CVS’ Pharmacy Rewards Program Could Have Their Personal Information Shared
Are you a member of CVS's ExtraCare Pharmacy & Health Rewards program? If so, it's possible the national pharmacy chain has shared your personal health information with others.
If you have signed up to join the ExtraCare Pharmacy & Health Rewards program, that means you have signed a HIPAA waiver that states, "my health information may potentially be re-disclosed and thus is no longer protected by the federal Privacy Rule."
With this waiver signed, CVS would then be allowed to share your medical condition and prescription medications with other outlets. With this data companies could use it for advertising and other means.
This does not apply to those who have just the ExtraCare Rewards Program card for regular store savings. This is only for those who have signed up for the Pharmacy & Health Rewards Program that allows you to earn up to $50 in pharmacy rewards in a year. You also must sign up for the program each year.
Walgreens and RiteAid pharmacies offer similar programs, but do not require customers to relinquish their HIPAA rights.
The Los Angeles Times did a story on the subject in 2013, posing the question if CVS was complying with California's privacy laws. CVS maintained it was legal since customers would have to be the ones to make the choice to waive HIPAA protections.
If you are currently a member and no longer want to be a part of the program, you can opt out online here, or call 1-888-607-4287.
If you are currently a member of CVS' pharmacy program, will you be leaving it?