OCR recently dismissed a complaint that Walgreens’ “Well Experience” model violates the HIPAA Privacy and Security Rules, according to a letter from OCR. 
In November 2013, HIPAA Update  reported that a Change to Win (CtW) Retail Initiatives  study revealed that Walgreens’ “Well Experience” posed a risk to patient privacy and medication security. In an effort to make pharmacists more accessible, the “Well Experience” model places them at a desk in front of the pharmacy counter.
Through its investigation, OCR concluded that Walgreens did not lack overall safeguards to prevent impermissible disclosures of PHI. However, OCR provided Walgreens with technical assistance to ensure future compliance with the HIPAA Privacy Rule. OCR also recommended additional training for employees at certain Walgreens locations, according to the letter.