If Walgreens is sold, merges with another company, or goes through bankruptcy, your personal information including health and pharmacy data may be transferred to a new owner as a business asset.
This analysis describes what Walgreens's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
A corporate transaction could result in your sensitive health and pharmacy data being controlled by a different company with different privacy practices, and the policy does not commit to providing advance notice or consent for such transfers.
In a merger, acquisition, or bankruptcy scenario, your personal data including health and prescription records could be transferred to a new entity whose privacy practices may differ materially from Walgreens' current policy.
How other platforms handle this
In connection with any reorganization, restructuring, merger or sale, or other transfer of assets, we will transfer information, including personal information, provided that the receiving party agrees to respect your personal information in a manner that is consistent with our Privacy Policy.
If Canva is involved in a merger, acquisition, or sale of all or a portion of its assets, your information may be transferred as part of that transaction. We will notify you via email or a prominent notice on our website prior to your information becoming subject to a different privacy policy.
We may access, preserve, and share information with regulators, law enforcement, or others if we believe it is reasonably necessary to: detect, prevent, and address fraud and other illegal activity; protect ourselves, you, and others, including as part of investigations; and prevent death or imminen...
Monitoring
Walgreens has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"In the event of a merger, acquisition, bankruptcy, or other sale of all or a portion of our assets, personal information may be among the assets transferred or disclosed to potential buyers and their advisors.— Excerpt from Walgreens's Walgreens Privacy Policy
REGULATORY LANDSCAPE: CCPA and CPRA impose obligations on successor entities that acquire personal information as part of a business transfer; the successor must honor the privacy rights of consumers whose data was acquired. HIPAA requires that covered entity status and Business Associate Agreements are maintained through corporate transactions involving protected health information. FTC has historically required companies to honor privacy commitments made at time of data collection even through corporate transactions. GOVERNANCE EXPOSURE: Medium. The provision is standard industry language but creates consumer exposure in the context of health and pharmacy data given the sensitivity of the information categories involved. The lack of a commitment to provide user notice or consent prior to transfer is notable for health data categories. JURISDICTION FLAGS: CCPA and CPRA impose obligations on acquiring entities in California. HIPAA applies nationally to protected health information in corporate transactions. State AG offices have authority to require notice of material changes in data practices following acquisitions. CONTRACT AND VENDOR IMPLICATIONS: Due diligence in any Walgreens acquisition or merger transaction should include comprehensive assessment of privacy commitments and regulatory obligations associated with the data assets being transferred. Acquiring entities should assess HIPAA compliance obligations for pharmacy and health data. Indemnification provisions in transaction documents should address privacy liability. COMPLIANCE CONSIDERATIONS: Compliance teams evaluating transactions involving Walgreens data assets should assess whether privacy commitments made to consumers are transferable, whether HIPAA Business Associate Agreements require novation, whether CCPA obligations transfer to the acquiring entity, and whether user notice obligations arise under applicable law or FTC guidance prior to or following the transaction.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.
ConductAtlas detected a major restructuring of Meta’s privacy policy that removed detailed consumer rights disclosures and relocated them to separate documents.
Your genetic data may be transferred to a new owner as a business asset. Here is what the Terms of Service actually say and what you can do right now.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
A corporate transaction could result in your sensitive health and pharmacy data being controlled by a different company with different privacy practices, and the policy does not commit to providing advance notice or consent for such transfers.
In a merger, acquisition, or bankruptcy scenario, your personal data including health and prescription records could be transferred to a new entity whose privacy practices may differ materially from Walgreens' current policy.
ConductAtlas has identified this type of provision across 6 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Walgreens.