A prescription drug rewards program offered at CVS pharmacies requires patients to sign away rights protected under HIPAA, according to a Los Angeles Times report.
CVS' ExtraCare Program offers customers up to $50 in rewards for filling prescriptions at CVS. To enroll, customers are required to authorize CVS to record and "potentially re-disclose" their health information and acknowledge their information is no longer protected by HIPAA, according to the report.
CVS has not disclosed with whom or why customers' health information is shared, according to the report.
Similar prescription drug reward programs at Walgreens and Rite-Aid do not require relinquishing HIPAA rights, according to the report.
More Articles on HIPAA:
Affinity Health to Settle Potential HIPAA Violations With $1.2M
15 Things to Know About the HIPAA Omnibus Final Rule Before Sept. 23
10 Ways to Ensure HIPAA Compliance on Social Media