According to a congressional investigation, major pharmacy chains in the US are sharing sensitive medical records with law enforcement without a warrant and without consulting legal professionals. This has raised concerns about medical privacy, especially in states that are increasingly criminalizing reproductive health care. Even if people seek healthcare in states with more lenient laws, their medical records can still be accessed by pharmacists in large chains like CVS. Lawmakers have written a letter to the Department of Health and Human Services, urging them to revise the health privacy law to require warrants for sharing medical records. The pharmacies involved, including CVS and Walgreens, have defended their actions by citing HIPAA regulations, which allow them to provide medical records if required by law. However, the lawmakers argue that the HHS has the power to strengthen regulations and require a warrant. They also call on pharmacies to follow the example of tech companies, which require a warrant to obtain customer emails and publish annual transparency reports. Only CVS has expressed willingness to publish such a report. The lawmakers emphasize the importance of protecting medical privacy and ensuring that patients are aware of how their records are being accessed.
https://arstechnica.com/science/2023/12/cvs-rite-aid-walgreens-hand-out-medical-records-to-cops-without-warrants/