California group sues Albertson's over privacy concerns
A dozen of the country's largest drug companies are named in the suit
Computerworld - The Privacy Rights Clearinghouse (PRC), a San Diego-based privacy advocacy group, has filed a lawsuit against supermarket chain Albertson's Inc. and its pharmacy units, SavOn, Osco and Jewel-Osco.
The lawsuit, filed in California Superior Court in San Diego County, alleges that Albertson's violated the privacy rights of its pharmacy customers by illegally using their confidential information to conduct targeted marketing campaigns on behalf of large drug companies.
A spokeswoman for Boise, Idaho-based Albertson's called the allegations "false and totally without merit."
"We highly respect the privacy of our pharmacy customers and do not sell, nor have we ever sold, their private information," she said in an e-mailed statement. She said the company will "vigorously" defend itself against the allegations.
The lawsuit against Albertson's, announced yesterday, was originally filed in May. The announcement corresponds with the completion of service naming all the companies that participated with Albertson's in the marketing campaign, said Jeffrey Krinsk, a lawyer at San Diego-based Finkelstein & Krinsk, the law firm representing the PRC.
Among those named as "co-conspirators" and "abettors" in the case are more than a dozen of the country's largest drug companies.
The case is an "egregious example" of sensitive, personal information being used for profitable purposes by a company without the knowledge or consent of the individuals concerned, said Beth Givens, director of the PRC, at a news conference.
Albertson's was involved in a "deceptive practice that violates California law," she said.
At issue is Albertson's alleged practice of sending targeted marketing messages from drug companies to its pharmacy customers using confidential information gathered during the prescription-filling process.
According to the lawsuit, Albertson's extracts and stores the confidential information in a separate database. The information is used to launch targeted campaigns urging customers to "renew their prescriptions, switch to a successor drug manufactured by the same drug company or switch to an alternative medication," the suit alleges.
The marketing messages were disguised to appear as though they were originating from Albertson's, when in fact they were mostly written and approved by drug companies, the lawsuit says. Albertson's received from the drug companies up to $4.50 for every marketing letter and up to $15 per marketing phone call, according to the suit.
Albertson's' practice is in violation of California's Confidential Medical Information Act because the company didn't inform customers or get their permission to use the confidential information to deliver such marketing messages, Krinsk said. The lawsuit was filed to stop the practice, and it seeks restitution of any money the company may havemade by using confidential information in this manner, Krinsk said.
Read more about Privacy in Computerworld's Privacy Topic Center.



- Excel 2010 Cheat Sheet
- Register for this Computerworld Insider Cheat Sheet and gain access to hundreds of premium content articles, guides, product reviews and more.
- Overcome Top 7 Admin Challenges of Active Directory
- As Active Directory's role in the enterprise has drastically increased, so has the need to secure the data. Gain insight on creating repeatable,...
- Insiders Can Ruin Your Company. Take Action.
- Did you know that 80 percent of threats to an organization come from the inside? The threat from insiders is often overlooked in...
- Top Solutions and Tools to Prevent Devastating Malware
- Custom malware frequently goes undetected. According to Forrester Research, the best way to reduce risk of breach is to deploy file integrity monitoring...
- Streamline Compliance and Increase ROI
- Streamline, simplify, and automate compliance related activities; especially those that impact multiple business units. This white paper from NetIQ, outlines solutions that will...
- X-Ray of the PCI Process-4 Proactive Steps
- This white paper from Forrester Research Inc., helps break PCI into understandable components. Security and risk professionals will gain knowledge and insight into... All Privacy White Papers
- A Road Map for Best Practice Social Media Acceptable Use Policy
- Organizations around the world are racing to leverage the power of social media for business. Sites like Facebook are used for marketing, human...
- Data Protection and Disaster Recovery with iSCSI and VMware
- Get this on demand webcast now
- Optimizing Networks for the Cloud
- Join guest speaker, Rohit Mehra, IDC Director of Enterprise Communications Infrastructure, to explore current trends, discuss best practices for optimizing Data Center and...
- Apps QuickStart Series Part 2: Designing and Deploying SQL Server on VMware vSphere
- Download this webcast to learn about the design considerations for virtualizing SQL workloads, performance and scalability information and high-availability options, as well as...
- Apps QuickStart Series Part 1: Designing and Deploying Exchange 2010 on VMware vSphere
- Download this webcast to learn the virtual hardware design considerations for Exchange 2010, deployment using the building block approach, options for high-availability and... All Privacy Webcasts