Is Your Protected Health Information (PHI) In The Garbage?

We always hear about the need to protect your personal information (i.e., social security number, credit card numbers) from people. You can be paranoid about it (which may be appropriate) or simply smart about it. In general, you probably don’t have people rummaging through your garbage each week (unless you’re Bill Gates or someone like that).

I guess it is an older story (from 2006), but I was surprised to hear about pharmacies throwing out trash that includes prescription and patient information into unsecured dumpsters. Hopefully, it has been addressed by now, but here is a link to the story.

13 Investigates found legally-protected patient information on prescription labels, patient information sheets, pill bottles, prescription forms and customer refill lists in dumpsters in and around Boston, Chicago, Cleveland, Dallas, Denver, Detroit, Louisville, Miami, New Haven (Conn.), Philadelphia, and Phoenix.

As a corporate person, one of the things I found interesting was the responses. Regardless of the idiosyncrasies of the law, the CVS answer clearly seems more appropriate than the Walgreen‘s answer. I can imagine any patient wanting to think that their information is just being dumped.

“We are not safeguarding customer privacy as we are required to do,” said CVS corporate privacy officer Kristine Egan. “It’s sad and intolerable … and we need to do better. We will do better.”

A Walgreens spokesman said his company has not broken the law by placing patients’ personal information in unsecured dumpsters. Walgreens corporate communications manager Michael Polzin told 13 Investigates that federal law “doesn’t prohibit disposing of information in dumpsters.”