A new lawsuit has been filed this month in an attempt to curtail the unconsented and currently legal traffic of de-identified medical records, this time against pharmacy giant Walgreens. The class action suit brought by Todd Murphy, a citizen of the State of California, on behalf of his children, is alleging that the company’s sale of prescription histories to data mining companies, servicing the marketing efforts of pharmaceutical companies, is an unfair, unlawful and deceptive business practice allowing Walgreen Co. to unjustly enrich itself while depriving the rightful owners of the data of their ability to benefit from the commercial value of their prescription records. There is no mention of privacy violations anywhere in the brief, and this is what makes this legal action very unique and potentially a landmark in the effort to control unauthorized sales of medical records.
The deceptive business practices are pretty straight forward to understand, since it seems that Walgreens makes all customers sign a privacy notice stating unequivocally that the company will not disclose patient information without first obtaining authorization from the patient. Furthermore California law prohibits pharmacists from disclosing prescription information to unauthorized third parties, which arguably makes the sale of data also unlawful. The bulk of the brief is describing the injury to plaintiffs caused by “detailing”, i.e. targeted in-person marketing by pharmaceutical reps to physicians, which is substantially aided by information extracted from plaintiffs prescription patterns. Detailing is portrayed as a ruthless drug company strategy to increase sales of newer and more expensive brand-name drugs, thus increasing the costs of health care, endangering patients and harming the doctor-patient relationship.
And here is where the complaint gets interesting.Continue reading…






