Walmart collects health information including prescription data and medical conditions through its pharmacy and health services, and may use this data to improve its health offerings where permitted by law.
If you use Walmart's pharmacy or health services, your prescription history and health conditions are collected and may be used for purposes beyond filling your prescriptions, potentially including improving Walmart's health product offerings — this is particularly sensitive data that deserves careful review of your consent choices.
Cross-platform context
See how other platforms handle Health and Pharmacy Data Collection and similar clauses.
Compare across platforms →Health data is among the most sensitive categories of personal information, and Walmart's pharmacy and health clinic operations create significant data collection scope — the use of this data beyond direct care delivery may implicate state health privacy laws and the Washington My Health Data Act.
(1) REGULATORY FRAMEWORK: HIPAA Privacy Rule (45 CFR Part 164) applies to Walmart's pharmacy operations as a covered entity, with HHS Office for Civil Rights (OCR) enforcement authority and civil monetary penalties up to $1.9M per violation category per year. Washington My Health Data Act (SB 1155, effective March 31, 2024) applies to consumer health data collected by entities not covered by HIPAA and requires separate authorization for collection and sharing of health data. CCPA/CPRA classifies health and medical information as sensitive personal information (Cal. Civ. Code §1798.140(ae)) requiring opt-in consent for certain uses. FTC Health Breach Notification Rule (16 CFR Part 318) applies to personal health records outside HIPAA coverage. (2)
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.