Provision record
Walgreens · Walgreens Privacy Policy · View original document ↗

HIPAA Carve-Out for Pharmacy Account Data

Medium severity High confidence Explicit document language Unique · 0 of 352 platforms
Stay ahead of the changes
Track Walgreens and get the diff the day its terms change.
Share 𝕏 Share in Share 🔒 PDF
Document Record

What it is

The policy states that information submitted through a pharmacy account login, including prescription order data, is governed by HIPAA's Notice of Privacy Practices rather than this privacy policy, creating a distinct legal framework for pharmacy interactions separate from general retail data practices.

This analysis describes what Walgreens's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

This provision establishes a structural data governance boundary between HIPAA-covered pharmacy data and general retail personal information, which determines which consumer rights framework and which notice and consent mechanisms apply depending on the nature of the customer interaction.

Consumer impact (what this means for users)

Under this provision, customers who submit prescription information through their pharmacy account operate under the Walgreens Notice of Privacy Practices governed by HIPAA rather than this privacy policy, which means the rights and protections described in this document do not apply to that data. Customers with questions about which policy applies to their data are directed to contact Walgreens customer service.

Cross-platform context

See how other platforms handle HIPAA Carve-Out for Pharmacy Account Data and similar clauses.

Compare across platforms →
▸ View Original Clause Language DOCUMENT RECORD
"
In some circumstances, Walgreens' use of your information will be subject to the requirements of the Health Insurance Portability and Accountability Act (commonly known as 'HIPAA'). For example, if you log in to your pharmacy account and submit information regarding a prescription order, that information is subject to HIPAA's requirements. In those circumstances, the Walgreens Notice of Privacy Practices and not this Privacy Policy will apply.

Excerpt from Walgreens's Privacy Policy

ConductAtlas Analysis

Institutional analysis (regulatory & governance intelligence)

1.

Insight

Unlock the full institutional analysis

Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.

Applicable agencies

  • Department Of Health & Human Services, Office For Civil Rights (hhs Ocr)
    Enforces HIPAA Privacy and Security Rules, which protect health information held by healthcare providers, health plans, and their business associates.
    Who can file: Anyone whose HIPAA rights may have been violated by a covered entity (healthcare provider, health plan, or healthcare clearinghouse)
    What you need: Name of the entity, description of the violation, date of the incident, and your contact information. Must file within 180 days of the violation.
    What to expect: HHS OCR investigates and may require the entity to take corrective action. Does not provide individual compensation. Serious violations can result in civil monetary penalties.
    File a complaint →

Provision details

Document information
Document
Walgreens Privacy Policy
Entity
Walgreens
Document last updated
May 5, 2026
Tracking information
First tracked
July 9, 2026
Last verified
July 9, 2026
Record ID
CA-P-015997
Document ID
CA-D-00607
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
0f6950919c3da86eab3e4508cb5f4a2245adf341abd12140770ea06252d7325e
Analysis generated
July 9, 2026 09:20 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Walgreens
Document: Walgreens Privacy Policy
Record ID: CA-P-015997
Captured: 2026-07-09 09:20:15 UTC
SHA-256: 0f6950919c3da86e…
URL: https://conductatlas.com/platform/walgreens/walgreens-privacy-policy/provision/CA-P-015997/hipaa-carve-out-for-pharmacy-account-data/
Accessed: Sept. 21, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Medium
Categories

Other risks in this policy

Get the research letter

Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.

Frequently Asked Questions

What does Walgreens's HIPAA Carve-Out for Pharmacy Account Data clause do?

This provision establishes a structural data governance boundary between HIPAA-covered pharmacy data and general retail personal information, which determines which consumer rights framework and which notice and consent mechanisms apply depending on the nature of the customer interaction.

How does this clause affect you?

Under this provision, customers who submit prescription information through their pharmacy account operate under the Walgreens Notice of Privacy Practices governed by HIPAA rather than this privacy policy, which means the rights and protections described in this document do not apply to that data. Customers with questions about which policy applies to their data are directed to contact Walgreens customer …

Is ConductAtlas affiliated with Walgreens?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Walgreens.