Retail Media

    Pharmacy retail media networks: Walgreens, CVS Media Exchange, Boots and Superdrug, and the health data they cannot use

    Published · Last updated
    Next scheduled review:

    Pharmacy retail media networks, such as Walgreens Advertising Group, CVS Media Exchange and Boots Media Group, sell ads on pharmacy sites, apps, store screens and the wider web using front-store loyalty data. Prescription records stay out. Under HIPAA they are protected health information, and marketing with them requires the patient's authorization.

    Contents

    Key facts

    • The two big US pharmacy chains launched networks months apart. CVS launched CVS Media Exchange in August 2020, and Walgreens followed on 3 December 2020 with 9,000+ stores and 100 million+ loyalty members (Marketing Dive, 3 December 2020).
    • CVS cites 90 million+ ExtraCare members. That figure appears in CVS Media Exchange's five-year review (Beet.TV, 16 July 2025).
    • Both chains are adding screens. Walgreens planned screens from Looma in 1,200 stores from October 2026. CVS expected about 11,000 digital screens in 2026, plus checkout ads in about 7,000 stores (Modern Retail, 11 September 2026).
    • Prescription data is health care data under HIPAA. The rule's definition of health care includes the "sale or dispensing of a drug" under a prescription (45 CFR 160.103, LII).
    • Website tracking is a live litigation risk. CVS Health and Criteo agreed to pay a combined $20.5 million to settle class claims over tracking tools on CVS's website and app; the court granted preliminary approval (HIPAA Journal, 24 September 2026).
    Jump to the table

    Definition

    Pharmacy retail media network: a drugstore chain's advertising business that sells onsite, offsite and in-store placements to brands, built on loyalty and front-store purchase data and kept apart from the chain's pharmacy and patient records.

    The general category is defined on the retail media hub. Every network with a public source is listed in the retail media networks directory.

    Pharmacy networks compared

    Where a cell reads "n/d", we had no public, dated source at the research cut-off. Member counts are the companies' own figures.

    7 of 7 rows

    Columns (6)

    3 Dec 2020 (Marketing Dive)

    myWalgreens; 100M+ members and 9,000+ stores at launch (same source)

    Owned digital, in-store, offsite display and video, social, streaming audio, email; order-confirmation ads

    Rokt, from December 2025 (Digital Commerce 360, 9 Dec 2025); Looma for screens

    Looma screens in 1,200 stores from October 2026 (Modern Retail, 11 Sep 2026)

    CVS Media Exchange (CVS Health, US)

    ExtraCare; 90M+ members (Beet.TV, 16 Jul 2025)

    CVS.com, in-store digital, digital end caps, checkout screens, pharmacy waiting-area screens, offsite

    Clean room collaboration with Reddit (same source)

    Digital end caps in 600+ stores; about 11,000 screens expected in 2026 (Modern Retail, 11 Sep 2026)

    Boots Media Group (Boots, UK)

    September 2021, with Threefold (Retail Week, 17 Sep 2021)

    Advantage Card; 17M active members, 2,300 stores (same source)

    Digital, stores, social and other third-party channels

    Criteo and LiveRamp for omnichannel attribution (ExchangeWire, 12 Nov 2024)

    Online plus in-store sales showed a 22% higher ROAS than online only (Criteo analysis, company claim, same source)

    Optimo (Superdrug, UK)

    Health & Beautycard; 19M+ active members, about 800 stores (Superdrug)

    Onsite display and sponsored products, offsite, about 500 store screens from April 2025 (Retail Gazette, Apr 2025)

    n/d

    Store screens live from April 2025

    Chemist Warehouse (Australia)

    n/d

    n/d

    n/d

    n/d

    No public retail media network announcement found

    Priceline Pharmacy (Wesfarmers Health, Australia)

    n/d

    Sister Club; 9.5M+ members (B&T, Nov 2025)

    Omnichannel

    Zitcha, chosen for self-serve (same source)

    Zitcha partnership, November 2025

    dmr Advertising (DocMorris, Germany)

    September 2023, with Criteo (PPC Land, 15 Jul 2026)

    Online pharmacy shoppers

    Sponsored product ads, native brand ads

    Criteo

    Sits in a Digital Services segment that grew 80% to CHF 13.9M in Q2 2026 (same source)

    Walgreens Advertising Group (Walgreens, US)

    Launched

    3 Dec 2020 (Marketing Dive)

    Loyalty data and scale

    myWalgreens; 100M+ members and 9,000+ stores at launch (same source)

    Formats

    Owned digital, in-store, offsite display and video, social, streaming audio, email; order-confirmation ads

    Partners

    Rokt, from December 2025 (Digital Commerce 360, 9 Dec 2025); Looma for screens

    CVS Media Exchange (CVS Health, US)

    Launched

    August 2020 (Marketing Dive, 3 Dec 2020)

    Loyalty data and scale

    ExtraCare; 90M+ members (Beet.TV, 16 Jul 2025)

    Formats

    CVS.com, in-store digital, digital end caps, checkout screens, pharmacy waiting-area screens, offsite

    Partners

    Clean room collaboration with Reddit (same source)

    Boots Media Group (Boots, UK)

    Launched

    September 2021, with Threefold (Retail Week, 17 Sep 2021)

    Loyalty data and scale

    Advantage Card; 17M active members, 2,300 stores (same source)

    Formats

    Digital, stores, social and other third-party channels

    Partners

    Criteo and LiveRamp for omnichannel attribution (ExchangeWire, 12 Nov 2024)

    Optimo (Superdrug, UK)

    Launched

    October 2023 (Marketing Beat, 27 Oct 2023)

    Loyalty data and scale

    Health & Beautycard; 19M+ active members, about 800 stores (Superdrug)

    Formats

    Onsite display and sponsored products, offsite, about 500 store screens from April 2025 (Retail Gazette, Apr 2025)

    Partners

    n/d

    Chemist Warehouse (Australia)

    Launched

    n/d

    Loyalty data and scale

    n/d

    Formats

    n/d

    Partners

    n/d

    Priceline Pharmacy (Wesfarmers Health, Australia)

    Launched

    n/d

    Loyalty data and scale

    Sister Club; 9.5M+ members (B&T, Nov 2025)

    Formats

    Omnichannel

    Partners

    Zitcha, chosen for self-serve (same source)

    dmr Advertising (DocMorris, Germany)

    Launched

    September 2023, with Criteo (PPC Land, 15 Jul 2026)

    Loyalty data and scale

    Online pharmacy shoppers

    Formats

    Sponsored product ads, native brand ads

    Partners

    Criteo

    Download JSON

    Table by AdSovereign, CC BY 4.0.

    Walgreens retail media network: Walgreens Advertising Group

    Walgreens built its network around myWalgreens, the loyalty program it relaunched a month earlier (Marketing Dive, 3 December 2020). At launch it sold third-party display, video, social, streaming audio and email alongside its own digital and store assets. In December 2025 it added Rokt to place offers on the order confirmation page, which also opened the network to brands that Walgreens does not stock (Digital Commerce 360, 9 December 2025).

    Stores are the newest push. After a dispute with Cooler Screens over its digital fridge doors, Walgreens chose Looma for screens in 1,200 stores from October 2026. Each store gets two large screens, one near the front and one in the pharmacy waiting area, plus digital end caps (Modern Retail, 11 September 2026). Walgreens has been a private company since its sale to Sycamore Partners was completed in 2025 (Digital Commerce 360, 9 December 2025).

    CVS Media Exchange

    CVS Media Exchange (CMX) sells across CVS.com, in-store digital media and offsite channels, using data from more than 90 million ExtraCare members (Beet.TV, 16 July 2025). In 2025 it began working with Reddit through a clean room. CMX says it was the first health and wellness network to comply with IAB standards (company claim, same source).

    In-store, CVS moved early. It had digital end caps in more than 600 stores by February 2026 and expected about 11,000 screens by the end of the year (Modern Retail, 11 September 2026). CVS describes the content as informational rather than promotional. Its pharmacy waiting-area screens target the time patients spend waiting, which is a placement choice, not a use of their records.

    Boots retail media network and Superdrug

    Boots Media Group launched in September 2021 with Threefold, built on 17 million active Advantage Card members (Retail Week, 17 September 2021). In November 2024 Boots became the launch partner for a Criteo and LiveRamp offer that joins online and in-store sales for attribution (ExchangeWire, 12 November 2024). Boots was part of Walgreens Boots Alliance, which Sycamore Partners took private in 2025 (Digital Commerce 360, 9 December 2025).

    Superdrug launched its network, Optimo, in October 2023 (Marketing Beat, 27 October 2023). It sells onsite display and sponsored products plus offsite media, and added about 500 store screens from April 2025 (Retail Gazette, April 2025).

    Chemist Warehouse and Australian pharmacy media

    We found no public announcement of a Chemist Warehouse retail media network by the research cut-off. Australia's nearest comparison is Priceline Pharmacy, part of Wesfarmers Health. In November 2025 it chose Zitcha for its network, citing self-serve tools, with more than 9.5 million Sister Club members (B&T, November 2025). Australian health-privacy rules are outside this page's scope.

    What health data is excluded, and why

    Pharmacies hold two kinds of data. One is what any shop holds: loyalty IDs and baskets of shampoo, snacks and cold remedies. The other is pharmacy data: prescriptions, refills, vaccinations and clinic visits. The rules treat them very differently.

    8 of 8 rows

    Columns (4)

    Prescription and dispensing records

    "Health care" includes the "sale or dispensing of a drug" under a prescription, so these records are health information held by a covered provider

    Kept out of ad targeting and measurement

    Use of that data for marketing

    A covered entity "must obtain an authorization" before using or disclosing protected health information for marketing; exceptions are face-to-face talks and promotional gifts of nominal value

    Networks do not build audiences from it

    Refill reminders

    Not "marketing" if any payment the pharmacy receives is "reasonably related" to its cost of sending the message

    Run by the pharmacy, not sold as media

    Selling patient data

    A sale of protected health information needs an authorization that states the pharmacy will be paid

    Not done

    Purchase of prescribed medication, in Washington

    Listed as "consumer health data", whoever holds it

    Excluded

    Health inferences from ordinary purchases, in Washington

    Data "derived or extrapolated from nonhealth information", including by algorithms, is consumer health data when used to identify a health condition

    Sensitive segments reviewed or dropped

    Selling consumer health data, in Washington

    Requires a separate signed authorization that expires after one year

    Data is not sold; segments stay inside the network

    Health data in the UK

    Processing of "data concerning health" is prohibited unless an Article 9(2) condition applies; the term covers data that reveals health status

    Networks build on loyalty data and treat health inferences with care

    Prescription and dispensing records

    What the rule says

    "Health care" includes the "sale or dispensing of a drug" under a prescription, so these records are health information held by a covered provider

    Common practice (not a legal requirement)

    Kept out of ad targeting and measurement

    Use of that data for marketing

    What the rule says

    A covered entity "must obtain an authorization" before using or disclosing protected health information for marketing; exceptions are face-to-face talks and promotional gifts of nominal value

    Common practice (not a legal requirement)

    Networks do not build audiences from it

    Refill reminders

    What the rule says

    Not "marketing" if any payment the pharmacy receives is "reasonably related" to its cost of sending the message

    Common practice (not a legal requirement)

    Run by the pharmacy, not sold as media

    Selling patient data

    What the rule says

    A sale of protected health information needs an authorization that states the pharmacy will be paid

    Common practice (not a legal requirement)

    Not done

    Purchase of prescribed medication, in Washington

    What the rule says

    Listed as "consumer health data", whoever holds it

    Common practice (not a legal requirement)

    Excluded

    Health inferences from ordinary purchases, in Washington

    What the rule says

    Data "derived or extrapolated from nonhealth information", including by algorithms, is consumer health data when used to identify a health condition

    Common practice (not a legal requirement)

    Sensitive segments reviewed or dropped

    Selling consumer health data, in Washington

    What the rule says

    Requires a separate signed authorization that expires after one year

    Common practice (not a legal requirement)

    Data is not sold; segments stay inside the network

    Health data in the UK

    What the rule says

    Processing of "data concerning health" is prohibited unless an Article 9(2) condition applies; the term covers data that reveals health status

    Common practice (not a legal requirement)

    Networks build on loyalty data and treat health inferences with care

    Download JSON

    Table by AdSovereign, CC BY 4.0.

    Front-store purchases are the grey zone. HIPAA's health care definition names dispensing under a prescription (45 CFR 160.103). It does not say plainly how a loyalty record of an over-the-counter purchase is treated, and we found no HHS statement on the point. State law is clearer about intent. Washington's act reaches inferences drawn from everyday purchases, and other states are tracked in the state health privacy laws tracker.

    Website tags are the other risk. The CVS and Criteo settlement concerned tracking tools on CVS's site and app, which plaintiffs alleged sent sensitive data to ad and analytics firms (HIPAA Journal, 24 September 2026). The settlement had preliminary approval; the claims were allegations. How pixels on health pages create exposure is explained in the pixel problem in healthcare marketing.

    The full HIPAA analysis is in HIPAA-compliant programmatic advertising, and the marketing rule itself in HIPAA marketing rule explained. Washington's law has its own page: My Health My Data Act for advertisers.

    What pharmacy networks can still sell

    The limits leave a large business. Pharmacy networks sell what any retailer sells, plus a few placements that only a pharmacy has.

    1. Front-store audiences. Segments built from beauty, personal care, grocery and household baskets on the loyalty card.
    2. Contextual placements. Screens in the pharmacy waiting area reach people by place and time, without using their records. Walgreens and CVS both plan them (Modern Retail, 11 September 2026).
    3. Offsite media. Front-store segments activated through partners, often via a clean room so the brand never sees the records.
    4. Closed-loop reporting. Sales results by SKU from loyalty purchases, as with Boots' online and in-store attribution.

    Example. A cough syrup brand wants to reach shoppers ahead of winter. It can target loyalty members who bought cold remedies last season, if the network's policy and state law allow that segment. It can buy waiting-area screens at the pharmacy counter. It cannot target people because they filled a prescription, and the pharmacy cannot sell it a list of patients. Comparable rules for grocers, which carry fewer health signals, are in grocery retail media networks.

    How pharmacy networks report results

    Pharmacy networks measure like other retailers, with one constraint: the sales they attribute come from loyalty purchases at the front of the store. Boots joins online and in-store sales through Criteo and LiveRamp. Criteo reported a 22% higher return on ad spend once store sales were counted, based on the top 50 brands in late 2024 (company claim, ExchangeWire, 12 November 2024). Walgreens says it chose Looma partly because the screens are judged on full-funnel metrics rather than on how often an ad played (Modern Retail, 11 September 2026).

    What to ask a pharmacy network before you buy

    1. Which data feeds the audiences? Ask for a written list of sources, and confirm that pharmacy and patient records are not among them.
    2. How are sensitive segments reviewed? Ask who approves segments that could suggest a health condition, and how state laws such as Washington's are applied.
    3. Which tags run on health pages? Ask whether ad or analytics tags fire on prescription, clinic or vaccination pages of the site and app.
    4. How are store screens measured? Ask for the impression formula, the footfall source and whether waiting-area screens are sold contextually.
    5. What does the brand receive? Reports and aggregates should be the default; ask how any clean room limits row-level output.

    FAQ

    What is the Walgreens retail media network?
    It is Walgreens Advertising Group, launched on 3 December 2020 with a store base of 9,000+ and a loyalty program of 100 million+ members (Marketing Dive, 3 December 2020). It sells owned digital, in-store and offsite media, and from October 2026 adds Looma screens in 1,200 stores. See the Walgreens Advertising Group profile.
    What is CVS Media Exchange?
    CVS Media Exchange (CMX) is CVS Health's retail media network, launched in August 2020. It uses data from 90 million+ ExtraCare members across CVS.com, store screens and offsite media (Beet.TV, 16 July 2025). See the CVS Media Exchange profile.
    Does Boots have a retail media network?
    Yes. Boots Media Group launched in September 2021 on 17 million active Advantage Card members (Retail Week, 17 September 2021). Since November 2024 it has used Criteo and LiveRamp to attribute online and in-store sales. See the Boots Media Group profile.
    Does Chemist Warehouse have a retail media network?
    We found no public announcement of one by 9 November 2026 in the Australian trade press we checked. Its rival Priceline Pharmacy runs a network with Zitcha (B&T, November 2025). This answer will change if Chemist Warehouse announces one.
    Can pharmacy networks use prescription data for ads?
    Not without the patient's written authorization. HIPAA requires an authorization for any use or disclosure of protected health information for marketing, with narrow exceptions (45 CFR 164.508(a)(3)). Refill reminders are not marketing if any payment covers only the cost of sending them (45 CFR 164.501).
    Is front-store loyalty data health data?
    It can be under some state laws. Washington's My Health My Data Act covers data that identifies a consumer's health status, including inferences drawn from non-health purchases (RCW 19.373.010). Under HIPAA the status of over-the-counter purchase data is not settled by the rule text, which is why networks review sensitive segments.

    How this works on owned infrastructure

    The question this page raised is how a pharmacy keeps front-store data usable for ads while prescription and patient records never reach an ad system. Separation is easiest to show when the audience builder, clean room and bidder run inside the pharmacy's own perimeter, next to the loyalty data and walled off from the dispensing systems. AdSovereign is an enterprise RTB stack (DSP, SSP, exchange, DMP and clean room) designed to run on infrastructure the operator controls, with data flows the operator's privacy team can inspect and restrict. It is designed to support HIPAA and state health-data programmes, not to replace legal review. The security page describes the controls, and the architecture page shows the deployment.

    Sources

    1. Marketing Dive, "Walgreens debuts retail media network, with revamped loyalty program front and center" (3 December 2020). https://www.marketingdive.com/news/walgreens-debuts-retail-media-network-with-revamped-loyalty-program-front/591550/
    2. Digital Commerce 360, "Walgreens adopts Rokt for retail media network tech expansion" (9 December 2025). https://www.digitalcommerce360.com/2025/12/09/walgreens-adopts-rokt-for-retail-media-network-expansion/
    3. Modern Retail, "Walgreens tries again with digital screens after digital coolers flop" (11 September 2026). https://www.modernretail.co/marketing/walgreens-says-its-focused-on-higher-peforming-ad-placements-as-it-tries-again-with-digital-screens/
    4. Beet.TV, "From Retail Media to Reddit, CVS Media Exchange Celebrates Five Years" (16 July 2025). https://www.beet.tv/2025/07/from-retail-media-to-reddit-cvs-media-exchange-celebrates-five-years.html
    5. HIPAA Journal, "CVS Health; Criteo Agree to Pay Combined $20.5 Million to Resolve Website Tracking Litigation" (24 September 2026). https://www.hipaajournal.com/cvs-health-criteo-american-wellness-corp-data-breach-settlements/
    6. Retail Week, "Boots launches marketing agency to supercharge brand partners' campaigns" (17 September 2021). https://retail-week.com/health-and-beauty/boots-launches-marketing-agency-to-supercharge-brand-partners-campaigns/7040611.article
    7. ExchangeWire, "LiveRamp & Criteo Collaborate to Propel First-Party Data Capabilities for Omnichannel Retail Media, with Boots as Launch Partner" (12 November 2024). https://www.exchangewire.com/blog/2024/11/12/liveramp-criteo-collaborate-to-propel-first-party-data-capabilities-for-omnichannel-retail-media-with-boots-as-launch-partner/
    8. Marketing Beat, Superdrug retail media network launch (27 October 2023). https://www.marketing-beat.co.uk/2023/10/27/superdrug-retail-media-network/
    9. Superdrug, "Optimo" retail media page (accessed 17 October 2026 for wave 1). https://www.superdrug.com/test/optimo
    10. Retail Gazette, Superdrug digital screens (April 2025). https://www.retailgazette.co.uk/blog/2025/04/superdrugdigital-screens/
    More sources (9)
    1. B&T, "Priceline Pharmacy Bolsters Retail Media Network By Teaming Up With Zitcha" (November 2025). https://www.bandt.com.au/priceline-pharmacy-bolsters-retail-media-network-by-teaming-up-with-zitcha/
    2. PPC Land, "DocMorris retail media unit grows inside a segment up 80% in Q2" (15 July 2026). https://ppc.land/docmorris-retail-media-unit-grows-inside-a-segment-up-80-in-q2/
    3. 45 CFR 160.103, Definitions (Health care; Protected health information). Legal Information Institute, accessed 9 November 2026. https://www.law.cornell.edu/cfr/text/45/160.103
    4. 45 CFR 164.501, Definitions (Marketing). Legal Information Institute, accessed 9 November 2026. https://www.law.cornell.edu/cfr/text/45/164.501
    5. 45 CFR 164.508, Uses and disclosures for which an authorization is required. Legal Information Institute, accessed 9 November 2026. https://www.law.cornell.edu/cfr/text/45/164.508
    6. RCW 19.373.010, Definitions (My Health My Data Act). Washington State Legislature, accessed 9 November 2026. https://app.leg.wa.gov/RCW/default.aspx?cite=19.373.010
    7. RCW 19.373.070, Valid authorization to sell. Washington State Legislature, accessed 9 November 2026. https://app.leg.wa.gov/RCW/default.aspx?cite=19.373.070
    8. UK GDPR, Article 9, Processing of special categories of personal data. legislation.gov.uk, accessed 9 November 2026. https://www.legislation.gov.uk/eur/2016/679/article/9
    9. UK GDPR, Article 4, Definitions. legislation.gov.uk, accessed 9 November 2026. https://www.legislation.gov.uk/eur/2016/679/article/4
    Changelog
    • 9 November 2026: first edition, seven networks and the health-data limits table.