Commentary Addressing Risks and Opportunities Through the Lifecycle of Data, Technology, Advertising and Innovation

Data Counsel

Home | Data Counsel

As we briefly discussed <a href="https://www.dataprivacymonitor.com/medical-privacy/supreme-court-finds-vermont-data-mining-law-unconstitutional/">here</a>,&nbsp;on June 23, 2011, the U.S. Supreme Court in <a href="http://www.supremecourt.gov/opinions/10pdf/10-779.pdf">Sorrell v. IMS</a> held that a Vermont statute restricting the sale, disclosure and use of pharmacy records containing the prescribing practices of doctors for marketing purposes by pharmaceutical companies violated the First Amendment&rsquo;s protection of commercial advertising speech.&nbsp; From a commercial advertising perspective, the decision sends a message that a government cannot restrict truthful, non-misleading advertising to prevent consumers from making a decision that the government disagrees with.&nbsp; From a privacy standpoint, because the Court treated the creation or dissemination of data as speech, it will be difficult to enact laws restricting the disclosure of personal information without violating the First Amendment.&nbsp;&nbsp;
The Vermont law was aimed at curtailing the use of &ldquo;detailing&rdquo; by pharmaceutical companies to promote their drugs to doctors.&nbsp; Data mining companies purchase prescriber-identifying information collected by pharmacies when they process prescriptions, which they aggregate and analyze (typically with patient data de-identified and encrypted) and then use to produce reports on the prescribing behavior of individual doctors.&nbsp; Pharmaceutical sales representatives use the reports to more effectively convince doctors to prescribe higher-profit brand-name drugs.&nbsp;
To combat detailing, the Vermont law: (1) prohibited pharmacies and health insurers from selling prescriber-identifying information or allowing it to be used for marketing without the prescriber&rsquo;s consent; and (2) barred pharmaceutical manufacturers and marketers from using prescriber-identifying information for marketing without the prescriber&rsquo;s consent.&nbsp; The restrictions were subject to a broad list of exceptions, including allowing such data to be used for research, patient education on treatment topics, law enforcement, and other purposes provided by law.&nbsp;
Applying heightened scrutiny, the Court found that the Vermont law impermissibly enacted content- and speaker-based restrictions on the sale, disclosure, and use of prescriber-identifying information.&nbsp; Because the law only restricted one type of speech (marketing) by one type of speaker (pharmaceutical companies), the law violated the First Amendment.&nbsp; The Court noted that there is a strong argument that prescriber-identifying information is speech for First Amendment purposes, not conduct.&nbsp; In so doing, the argument that information used to develop a commercial message was simply a commodity with no greater First Amendment protection than beef jerky was rejected.&nbsp;&nbsp; Rather, the Court stated that: &ldquo;Facts, after all, are the beginning point for much of the speech that is essential to advance human knowledge and to conduct human affairs.&rdquo;&nbsp; Although it recognized that technology has created &ldquo;serious and unresolved issues with respect to personal privacy,&rdquo; the Court stated that content-based discrimination cannot be used to advance the government&rsquo;s opinion in the privacy debate.&nbsp;
Although it applied heightened scrutiny, the Court found that the law would still fail under a lesser standard because Vermont did not show that the law was designed to directly advance a government interest.&nbsp; Vermont did not argue that the law was designed to prevent false or misleading speech, and Vermont essentially conceded that the law did not advance confidentiality interests.&nbsp; If Vermont&rsquo;s interest was truly the privacy of patient information, the Court stated that it could have done so by only allowing disclosure of prescriber-identifying information in a few narrow and well-justified circumstances, citing HIPAA as an example.&nbsp; The Court added that: &ldquo;Privacy is a concept too integral to the person and a right too essential to freedom to allow its manipulation to support just those ideas the government prefers.&rdquo;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
Vermont and supporters of its law attempted to frame it as a law protecting the privacy of sensitive medical data, and <a href="http://leahy.senate.gov/press/press_releases/release/?id=4A16CE1B-1710-44B7-9B6D-AC723AD6BDCE">critics</a> of the decision have argued that the Supreme Court chose to protect corporate interests instead of individual privacy rights.&nbsp; But the law at issue in Sorrell v. IMS was not really designed to protect individual medical records&mdash;it was designed to promote the use of generic drugs to lessen Vermont&rsquo;s health care costs.&nbsp; The privacy implication of this decision is the recognition of the collection and dissemination of data as commercial speech protected by the First Amendment.&nbsp; As the versions of Do Not Track legislation, designed to address the privacy concerns associated with behavioral advertising, and electronic health record laws are discussed at the federal and state levels, lawmakers will have to walk a tightrope to create a law that achieves the desired purpose without unduly restricting speech.&nbsp;
If a government attempts to follow the road map articulated by the Court of only allowing disclosure of certain information in a few narrow and well-justified circumstances, a government would risk stifling technology and innovation.&nbsp; Banning most or even all disclosures of personal information is not realistic because of the value associated with the data, especially &ldquo;big data.&rdquo;&nbsp; For example, in the healthcare industry, a <a href="http://www.mckinsey.com/mgi/publications/big_data/pdfs/MGI_big_data_full_report.pdf">research study</a> released in May 2011 by McKinsey Global Institute (and discussed <a href="https://www.dataprivacymonitor.com/miscellaneous/harnessing-big-data-to-create-value/">here</a>)&nbsp;predicted that in ten years there will be an opportunity to capture $300 billion annually in new value, &ldquo;with two-thirds of that in the form of reductions to national health care expenditure.&rdquo;&nbsp; In the public sector, the McKinsey study projected that use of geolocation data will create $100 billion in revenue to service providers over the next ten years and as much as $700 billion in annual value to customers.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;

Restrictions on Commercial Advertising Speech in Vermont Data Mining Law Violate First Amendment