8 Total
3 High severity
5 Medium severity
0 Low severity
Summary

This is Walgreens' privacy policy explaining how the company collects, uses, and shares your personal information when you use their website, app, pharmacy services, and loyalty program. The most important thing to know is that Walgreens collects sensitive health, prescription, and financial data and may share it with advertising partners and affiliated companies, including for targeted marketing purposes. California residents and users in certain other states have the right to opt out of the sale or sharing of their personal data, and all users can request access to or deletion of their data by contacting Walgreens through its privacy portal.

Technical / Legal Breakdown

This document is Walgreens' Online Privacy and Security Policy, governing the collection, use, and sharing of personal information obtained through Walgreens' websites, mobile applications, and digital services, with a stated legal basis rooted in user consent and legitimate business operations. The policy states that Walgreens collects a broad range of data including identifiers, health and pharmacy information, financial data, geolocation, biometric data, internet activity, and inferences drawn from personal information, and the terms authorize sharing this data with service providers, business partners, marketing partners, and affiliated entities including Walgreens Boots Alliance. The policy includes provisions for California residents under CCPA granting rights to know, delete, correct, and opt out of the sale or sharing of personal information, and separately addresses sensitive health-related data governed by state health privacy laws including Washington's My Health MY Data Act; notably, the policy asserts broad rights to use de-identified and aggregated data without restriction, and the scope of third-party advertising data sharing engages significant regulatory scrutiny. The policy implicates HIPAA for pharmacy and clinical services data, CCPA and state consumer privacy laws for personal data rights, and FTC Act requirements for unfair or deceptive practices; the intersection of retail health data with digital advertising tracking technologies creates compliance exposure that may require evaluation under evolving state health privacy frameworks. Walgreens' dual role as a retail pharmacy and digital advertiser creates layered regulatory obligations across health privacy, consumer protection, and emerging state biometric and health data statutes.

Institutional Analysis

Institutional analysis available with Professional

Regulatory exposure by statute, material risk assessment, vendor due diligence action items, and enforcement precedent. Available on Professional.

Start Professional free trial
High — 3 provisions
Medium — 5 provisions

Monitoring

Walgreens has updated this document before.

Watcher includes same-day alerts, structured change summaries, and monitoring for up to 10 platforms.

Start Watcher free trial Or create a free account →

Professional Governance Intelligence

Need provision-level monitoring and regulatory mapping?

Professional includes governance timelines, compliance memos, audit-ready analysis, and full provision tracking.

Start Professional free trial

Cross-platform context

See how other platforms handle Health and Pharmacy Data Collection and similar clauses.

Compare across platforms →

Mapped Governance Frameworks

CCPA/CPRA
California, USA
View official text ↗
Connecticut Data Privacy Act Amendments
US-CT
View official text ↗
CAN-SPAM
United States Federal
View official text ↗
FTC Act Section 5
United States Federal
View official text ↗
GDPR
European Union
View official text ↗
Indiana Consumer Data Protection Act
US-IN
View official text ↗
Kentucky Consumer Data Protection Act
US-KY
View official text ↗
Universal Opt-Out Mechanism Expansion 2026
US
View official text ↗
Archival ProvenanceSource & Archival Record
Last Captured May 5, 2026 06:24 UTC
Capture Method Automated scheduled archival capture
Document ID CA-D-000607
Version ID CA-V-001275
SHA-256 949ac3538ee600f434c9b5e60d418eba00ccd0e4e039fc234a099a100abded10
✓ Snapshot stored ✓ Text extracted ✓ Change verified ✓ Hash verified

Governance Monitoring

Monitor governance changes across the platforms you rely on.

Structured alerts for policy changes, governance events, and provision updates across 318+ platforms.

Create free account Compare plans