Security News > 2023 > December > Police Get Medical Records without a Warrant

Lawmakers noted the pharmacies' policies for releasing medical records in a letter dated Tuesday to the Department of Health and Human Services Secretary Xavier Becerra.

All eight of the pharmacies said they do not require law enforcement to have a warrant prior to sharing private and sensitive medical records, which can include the prescription drugs a person used or uses and their medical conditions.

Three pharmacies-­CVS Health, The Kroger Company, and Rite Aid Corporation-­told lawmakers they didn't even require their pharmacy staff to consult legal professionals before responding to law enforcement requests at pharmacy counters.

According to the lawmakers, CVS, Kroger, and Rite Aid said that "Their pharmacy staff face extreme pressure to immediately respond to law enforcement demands and, as such, the companies instruct their staff to process those requests in store."

The rest of the pharmacies-­Amazon, Cigna, Optum Rx, Walmart, and Walgreens Boots Alliance­-at least require that law enforcement requests be reviewed by legal professionals before pharmacists respond.

Only Amazon said it had a policy of notifying customers of law enforcement demands for pharmacy records unless there were legal prohibitions to doing so, such as a gag order.

News URL

https://www.schneier.com/blog/archives/2023/12/police-get-medical-records-without-a-warrant.html