Is CVS rewards program complying with California law?

By Googooian's reckoning, this language doesn't make clear that customers' information is moving from a part of the company covered by HIPAA to a part of the company lacking HIPAA protections.

Nor does it spell out the "specific uses" of the information, he said.

For example, what does it take to administer the program, and who does the administering?

It's also questionable whether the waiver adequately informs people that their names and contact information may be shared with "outside companies as contractors or agents of CVS/pharmacy to help deliver promotional information and offers," as permitted under the privacy policy of CVS' ExtraCare program.

CVS says customers' medical information is safe.

"We are committed to protecting the privacy of our customers, and we do not share any of their personal information, which remains protected under consumer privacy laws," DeAngelis said.

That didn't carry much weight for Googooian. Without HIPAA, he noted, customers only have CVS' word that the company isn't sharing their information with others.

"The only reason you would ask people to waive their rights is if you want to open the door to giving their drug information away," he said. "Otherwise, there's no reason."

Lynda Gledhill, a spokeswoman for California Atty. Gen. Kamala D. Harris, declined to comment on the issue, saying only that "the attorney general's office is very interested in privacy issues."

David Lazarus' column runs Tuesdays and Fridays. He also can be seen daily on KTLA-TV Channel 5 and followed on Twitter @Davidlaz. Send your tips or feedback to david.lazarus@latimes.com.

Featured Stories

CTnow is using Facebook comments on stories. To comment on ctnow.com articles, sign into Facebook and enter your comment in the field below. Comments will appear in your Facebook News Feed unless you choose otherwise. To report spam or abuse, click the X next to the comment. For guidelines on commenting, click here.

CONSUMER COLUMNISTS

Kevin Hunt - The Electronic Jungle

Kevin Hunt: Technology for the amateur spy - July 21, 2014 - Spy technology has become so widespread and smartphone-ready that sleuthing, like golf, can be played by almost anyone.

Gail MarksJarvis

Money market rules designed to increase awareness - July 30, 2014 - SEC action involving the $2.6 trillion money market industry reminds people that money market funds are a different breed than savings...

David Lazarus

Trying to talk with IRS can be taxing - July 28, 2014 - No one expects the federal government to be a model of efficiency. But with a projected deficit of nearly $600 billion this year, you'd...

Korky Vann

Hot Or Cold, Lobster Rolls Are Worth The Drive - July 13, 2014 - At least once a summer, (more often, if I'm lucky), I have to have a lobster roll — preferably consumed at a picnic table with a...

Advertisement

...