Proposed Consent Agreement In the Matter of Rite Aid Corporation, a corporation, FTC File No. 072-3121
On 7/27/2010 I filled at prescription at the Rite Aid pharmacy in Winchester, NH. The last time I did that clerk insisted I provide my birthdate at the pick-up window with several people close by. I was uncomfortable with that - birth date is a key data element needed for identity theft. However, I did provide it, month, day and year. This time when the request was made, I handed the female employee my drivers license and stated that my birthdate is confidential information and that she must not compromise it. She said sarcastically, "We do not use the year, so there is no risk". I said "I also consider month and day as confidential, please recognize that". Big grin, she loudly stated to all within earshot, "so your birthdate day is "X" and the month is "Y', right? The day was wrong and I said, "that information is incorrect", at which point she loudly reannounced", with enthusiasm," the day and month in their system, at least 2 if not 4 times. At a previous visit, I observed that they require people making alcohol purchases to verbally provide month, day and year of their birthdate, which they then enter into the POS terminal. While I understand the purpose for this - they are asking people to compromise personal information in front of stranges and electronically capturing credit card numbers, names and birthdates - a rich collection of data which when combined on their POS system is a significant risk to the consumer.