Walgreens Prescription Privacy Class Action Claims Pharmacy Affected Customers May Have Claims to Review

Walgreens faces multiple prescription privacy class actions where affected customers may have valid claims for unauthorized data sharing and biometric collection.

Yes, Walgreens customers may have valid claims related to multiple prescription privacy and data-handling lawsuits. The pharmacy chain faces several active and recently settled class actions alleging improper handling of customer prescription information, biometric data, and controlled substance prescriptions.

If you purchased prescriptions from Walgreens—particularly at South Carolina locations—or used the Walgreens website, or were subject to biometric scanning in a Walgreens store, you may be part of an affected class with potential eligibility for compensation. Walgreens has faced scrutiny across multiple fronts: a Fourth Circuit Court of Appeals privacy case involving unauthorized sharing of prescription data through third-party vendors, an Illinois biometric privacy violation lawsuit, investigations revealing tracking pixels that captured prescription-related searches, a $100 million settlement over the Prescription Savings Club program, and a $350 million settlement with the Department of Justice over unlawful opioid prescriptions. Understanding which cases apply to your situation is essential for determining whether you can file a claim.

Table of Contents

What Are the Active Walgreens Prescription and Privacy Class Actions?

walgreens faces multiple distinct lawsuits and settlements involving different categories of customer harm. The most prominent cases involve prescription data privacy, biometric information misuse, and regulatory violations related to opioid dispensing. These are not a single “Walgreens prescription privacy class action” but rather a series of separate legal actions, each with different class definitions, deadlines, and compensation structures. The Fourth Circuit privacy case represents one of the most significant ongoing actions. This lawsuit alleges that Walgreens acquired and shared sensitive prescription information through corporate-sharing software without proper customer consent. Customers who purchased prescriptions from affected Walgreens locations—particularly in South Carolina—claim the company transmitted their prescription records to third parties.

The case has escalated to the appeals court level, indicating substantial legal questions about customer privacy rights and corporate data-sharing practices. Unlike many settled class actions, this case remains unresolved, meaning claims may still be available depending on the court’s final ruling and class certification. Separately, a biometric privacy class action under Illinois law alleges Walgreens collected facial geometry scans from customers without disclosure or written consent. The company allegedly used this biometric data to track and identify shoplifters, then shared the information with third parties. This violation would fall under Illinois’s strict Biometric Information Privacy Act (BIPA), which carries significant statutory damages for unauthorized biometric collection. BIPA claims are notable because they can result in per-violation damages—meaning a customer scanned multiple times could have multiple claims.

How Did Walgreens Share and Mishandle Prescription Data?

Walgreens’ prescription data violations occurred through multiple mechanisms. The most direct involves the use of third-party vendors and data-sharing software that transmitted prescription information without explicit customer authorization. In the Fourth Circuit case, customers who purchased prescriptions at specific Walgreens locations discovered that their prescription records—sensitive health information—were being shared through corporate systems to entities outside the pharmacy. This type of sharing is particularly troubling because prescription data reveals detailed information about a customer’s medical conditions, treatments, and health management. Data tracking through website pixels represents a more subtle but equally problematic violation. Privacy researchers identified tracking pixels embedded on Walgreens’ website that transmitted prescription-related search activity to third-party tech companies.

When a customer searched for a specific medication or health condition on Walgreens.com, that search was tracked and shared with external analytics and marketing firms. This means Walgreens was not only sharing stored prescription data but also actively tracking health-related behavior. Unlike general website tracking, prescription-related searches reveal intimate health information and can be used to target customers with advertising or sold to data brokers. A key limitation in these cases is proving you were specifically affected. For the Fourth Circuit privacy case, you likely need to have been a customer at one of the specific Walgreens locations involved and made a purchase during the class period. For the tracking pixel violations, you need to have visited Walgreens.com and searched for prescription-related information. Walgreens has not disclosed the full scope of either violation publicly, so customers often don’t know if they were impacted until reviewing court documents or settlement notices.

Walgreens Privacy and Prescription Settlements by Amount and TypePrescription Savings Club100$MOpioid Prescriptions Settlement350$MBIPA Biometric (est. range per customer)2.5$MSource: Court filings, DOJ press releases, settlement administrator websites

The Fourth Circuit Court of Appeals Privacy Case

The Fourth Circuit privacy case represents Walgreens’ most contested prescription privacy lawsuit. This case advanced to the appeals court specifically because of unresolved legal questions about customer privacy expectations and reasonable consent. Walgreens argued that sharing prescription data through corporate software was part of normal business operations and did not require individual customer approval. The plaintiffs’ lawyers countered that prescription information is uniquely sensitive health data, and customers could not reasonably expect Walgreens to share this information with third-party vendors without explicit notification. What makes this case significant is its potential precedent-setting impact.

The Fourth Circuit’s ruling could establish new standards for how pharmacies must handle customer prescription data and when third-party sharing requires consent. If the court rules in favor of customers, Walgreens could be liable for damages covering all affected class members during the lawsuit period. If the court rules in favor of Walgreens, it would affirm that pharmacies have broader discretion to share prescription data for business purposes without individual customer consent. The case has already survived initial dismissal motions, indicating the court found the customers’ privacy claims had sufficient legal merit to proceed. However, ongoing appeals mean this case may not be fully resolved for months or years. Unlike settled class actions where deadlines are set and known, active litigation cases create uncertainty about when compensation might actually be available and what the final settlement or judgment amount will be.

How to Determine If You Qualify for a Prescription Privacy Claim

Eligibility depends on which specific Walgreens lawsuit you’re examining. For the Fourth Circuit privacy case, you generally need to have been a customer at a Walgreens location included in the class definition during the specified class period and made at least one prescription purchase. The court documents or settlement website (if the case eventually settles) will specify which states and pharmacy locations are included. Many customers don’t realize they’re part of a class action until they receive a court notice or see information online. For the BIPA biometric privacy case, eligibility is broader but requires you to have visited a Walgreens store that used facial recognition or biometric scanning technology.

The biometric case applies to anyone who was scanned by the company’s anti-shoplifting technology, regardless of whether they made a purchase. This is significant because it means customers who were simply in the store and subject to biometric collection could have BIPA claims, even if they were not prescription customers. The Prescription Savings Club settlement ($100 million) covered a specific subset of customers who enrolled in that rewards program between January 2007 and November 2024. If you used the Prescription Savings Club and were charged what the lawsuit alleged were inflated prices, you may be able to submit a claim directly to that settlement administrator. Similarly, the opioid settlement ($350 million) covers customers who purchased controlled substances from Walgreens during the opioid epidemic period, though this is primarily a corporate settlement rather than a direct customer compensation program.

Claim Deadlines and Filing Limitations

Deadlines for class action claims vary dramatically depending on which case you’re pursuing. For settled class actions like the Prescription Savings Club case, there is typically a fixed claims deadline—often 60-90 days from when claims administration begins. If you miss this deadline, you forfeit your right to compensation from that settlement. The settlement administrator maintains a website where you can check the deadline and submit claims. For the opioid settlement, the structure is different; it involves a national settlement fund rather than direct claims, but there are still deadlines for submission. For active litigation cases like the Fourth Circuit privacy case, no claims deadline exists yet because the case has not been fully resolved.

Once the court reaches a final judgment or settlement, a notice will be issued and a claims period will begin. At that point, customers who fit the class definition will need to submit claims within the specified timeframe. The challenge is that customers often don’t realize they’re eligible until after the deadline has passed. An important limitation to understand: if you have already received compensation from a prior Walgreens privacy or prescription settlement, you may be barred from claiming again in a subsequent case depending on the language of the prior settlement. Some settlements include “bar orders” that prevent double recovery across multiple related cases. This is designed to prevent customers from being compensated twice for the same harm, but it means you need to research whether a prior claim you filed affects your eligibility for current cases.

Biometric Privacy Violations and the BIPA Case

The BIPA (Biometric Information Privacy Act) class action represents a distinct harm from the prescription data privacy cases. Illinois law prohibits companies from collecting, storing, or using biometric information—including facial geometry scans, fingerprints, and iris scans—without written consent and disclosure. Walgreens allegedly violated this law by capturing facial biometric data from customers in stores without notifying them that biometric collection was occurring or obtaining written permission. What differentiates BIPA claims from other privacy violations is the statutory damages structure. BIPA allows for $1,000 to $5,000 per violation per customer, not just per incident.

This means if a customer was scanned biometrically multiple times at Walgreens locations, each scan could constitute a separate violation and generate separate damages. This makes BIPA cases potentially high-value compared to data breach settlements that typically award $25-$100 per affected person. However, BIPA damages are capped, and the final award per customer depends on how the settlement or judgment allocates the total fund across the full class. The biometric case also carries broader implications because Walgreens was using this data to identify and track suspected shoplifters. Beyond privacy, the lawsuit raises concerns about wrongful prosecution—customers who were misidentified by facial recognition could have faced security detainment, accusations, or surveillance based on unreliable biometric matching. This adds a dimension of potential harm beyond just data privacy.

The Prescription Savings Club Settlement and Opioid Enforcement Action

The Walgreens Prescription Savings Club settlement ($100 million, settled in 2024) resolved allegations that the company overcharged customers who enrolled in this rewards program. The lawsuit claimed Walgreens inflated prices for customers using the Prescription Savings Club compared to the prices available without the program. Customers who purchased prescriptions using this program between January 2007 and November 2024 could be eligible for claims. The settlement administrator processes claims directly, and eligible customers can submit documentation of their Prescription Savings Club purchases to receive compensation. The Department of Justice settlement ($350 million) regarding unlawful opioid prescriptions is a regulatory enforcement action rather than a traditional customer class action.

The DOJ alleged that Walgreens knowingly filled millions of invalid opioid and controlled substance prescriptions. This settlement was between the government and Walgreens, not a direct customer compensation program, though it reflects serious violations in prescription dispensing practices. Customers harmed by receiving Walgreens’ medications related to these violations cannot file direct claims under this settlement; instead, the funds are directed to opioid abatement programs and state restitution efforts. These settlements demonstrate that Walgreens’ prescription-related violations span multiple categories: overcharging through programs, sharing data without consent, improper dispensing of controlled substances, and biometric collection. Each represents a separate harm and separate legal claim, requiring customers to research which cases apply to their specific situation and purchases.

Frequently Asked Questions

Can I file a claim for multiple Walgreens lawsuits at the same time?

Yes, you can file claims for different cases (e.g., the Prescription Savings Club settlement and the Fourth Circuit privacy case) as long as the harms are distinct. However, some settlements include bar orders preventing double recovery for the same harm, so review the language carefully.

How much compensation can I expect from a Walgreens prescription privacy claim?

Amounts vary significantly. The Prescription Savings Club settlement compensates based on documented purchases. BIPA biometric claims could range from $1,000 to $5,000 per violation. Final per-customer amounts depend on the total class size and settlement allocation.

Is there an active deadline to file a Walgreens prescription privacy claim right now?

Deadlines depend on the specific case. The Prescription Savings Club has a fixed claims deadline (check the settlement website at savingsclubsettlement.com). The Fourth Circuit privacy case has no deadline yet because litigation is ongoing. Check official sources to confirm current deadlines.

Did Walgreens admit to wrongdoing in these settlements?

Most settlements include “neither admit nor deny” language, meaning Walgreens does not formally admit fault but agrees to pay to resolve claims. This is standard in class action settlements and does not mean the allegations are unproven.

How do I know if I’m part of the affected class?

Court documents or settlement websites specify which stores, states, and time periods are included. If you made prescription purchases at Walgreens during the class period or visited a store with biometric scanning, you may qualify. Visit the specific settlement administrator’s website for your case.

What documents do I need to submit a claim?

Documentation requirements vary by case. For Prescription Savings Club, you need proof of purchase (receipts, credit card statements). For biometric cases, being a customer at the affected location may be sufficient. Check the settlement website for specific requirements. —


You Might Also Like