Retail Media
Pharmacy retail media networks: Walgreens, CVS Media Exchange, Boots and Superdrug, and the health data they cannot use
Published · Last updated
Next scheduled review:
Pharmacy retail media networks, such as Walgreens Advertising Group, CVS Media Exchange and Boots Media Group, sell ads on pharmacy sites, apps, store screens and the wider web using front-store loyalty data. Prescription records stay out. Under HIPAA they are protected health information, and marketing with them requires the patient's authorization.
Contents
Key facts
- The two big US pharmacy chains launched networks months apart. CVS launched CVS Media Exchange in August 2020, and Walgreens followed on 3 December 2020 with 9,000+ stores and 100 million+ loyalty members (Marketing Dive, 3 December 2020).
- CVS cites 90 million+ ExtraCare members. That figure appears in CVS Media Exchange's five-year review (Beet.TV, 16 July 2025).
- Both chains are adding screens. Walgreens planned screens from Looma in 1,200 stores from October 2026. CVS expected about 11,000 digital screens in 2026, plus checkout ads in about 7,000 stores (Modern Retail, 11 September 2026).
- Prescription data is health care data under HIPAA. The rule's definition of health care includes the "sale or dispensing of a drug" under a prescription (45 CFR 160.103, LII).
- Website tracking is a live litigation risk. CVS Health and Criteo agreed to pay a combined $20.5 million to settle class claims over tracking tools on CVS's website and app; the court granted preliminary approval (HIPAA Journal, 24 September 2026).
Definition
Pharmacy retail media network: a drugstore chain's advertising business that sells onsite, offsite and in-store placements to brands, built on loyalty and front-store purchase data and kept apart from the chain's pharmacy and patient records.
The general category is defined on the retail media hub. Every network with a public source is listed in the retail media networks directory.
Pharmacy networks compared
Where a cell reads "n/d", we had no public, dated source at the research cut-off. Member counts are the companies' own figures.
7 of 7 rows
Walgreens Advertising Group (Walgreens, US) | 3 Dec 2020 (Marketing Dive) | myWalgreens; 100M+ members and 9,000+ stores at launch (same source) | Owned digital, in-store, offsite display and video, social, streaming audio, email; order-confirmation ads | Rokt, from December 2025 (Digital Commerce 360, 9 Dec 2025); Looma for screens | Looma screens in 1,200 stores from October 2026 (Modern Retail, 11 Sep 2026) |
CVS Media Exchange (CVS Health, US) | August 2020 (Marketing Dive, 3 Dec 2020) | ExtraCare; 90M+ members (Beet.TV, 16 Jul 2025) | CVS.com, in-store digital, digital end caps, checkout screens, pharmacy waiting-area screens, offsite | Clean room collaboration with Reddit (same source) | Digital end caps in 600+ stores; about 11,000 screens expected in 2026 (Modern Retail, 11 Sep 2026) |
Boots Media Group (Boots, UK) | September 2021, with Threefold (Retail Week, 17 Sep 2021) | Advantage Card; 17M active members, 2,300 stores (same source) | Digital, stores, social and other third-party channels | Criteo and LiveRamp for omnichannel attribution (ExchangeWire, 12 Nov 2024) | Online plus in-store sales showed a 22% higher ROAS than online only (Criteo analysis, company claim, same source) |
Optimo (Superdrug, UK) | October 2023 (Marketing Beat, 27 Oct 2023) | Health & Beautycard; 19M+ active members, about 800 stores (Superdrug) | Onsite display and sponsored products, offsite, about 500 store screens from April 2025 (Retail Gazette, Apr 2025) | n/d | Store screens live from April 2025 |
Chemist Warehouse (Australia) | n/d | n/d | n/d | n/d | No public retail media network announcement found |
Priceline Pharmacy (Wesfarmers Health, Australia) | n/d | Sister Club; 9.5M+ members (B&T, Nov 2025) | Omnichannel | Zitcha, chosen for self-serve (same source) | Zitcha partnership, November 2025 |
dmr Advertising (DocMorris, Germany) | September 2023, with Criteo (PPC Land, 15 Jul 2026) | Online pharmacy shoppers | Sponsored product ads, native brand ads | Criteo | Sits in a Digital Services segment that grew 80% to CHF 13.9M in Q2 2026 (same source) |
Walgreens Advertising Group (Walgreens, US)
- Launched
3 Dec 2020 (Marketing Dive)
- Loyalty data and scale
myWalgreens; 100M+ members and 9,000+ stores at launch (same source)
- Formats
Owned digital, in-store, offsite display and video, social, streaming audio, email; order-confirmation ads
- Partners
Rokt, from December 2025 (Digital Commerce 360, 9 Dec 2025); Looma for screens
CVS Media Exchange (CVS Health, US)
- Launched
August 2020 (Marketing Dive, 3 Dec 2020)
- Loyalty data and scale
ExtraCare; 90M+ members (Beet.TV, 16 Jul 2025)
- Formats
CVS.com, in-store digital, digital end caps, checkout screens, pharmacy waiting-area screens, offsite
- Partners
Clean room collaboration with Reddit (same source)
Boots Media Group (Boots, UK)
- Launched
September 2021, with Threefold (Retail Week, 17 Sep 2021)
- Loyalty data and scale
Advantage Card; 17M active members, 2,300 stores (same source)
- Formats
Digital, stores, social and other third-party channels
- Partners
Criteo and LiveRamp for omnichannel attribution (ExchangeWire, 12 Nov 2024)
Optimo (Superdrug, UK)
- Launched
October 2023 (Marketing Beat, 27 Oct 2023)
- Loyalty data and scale
Health & Beautycard; 19M+ active members, about 800 stores (Superdrug)
- Formats
Onsite display and sponsored products, offsite, about 500 store screens from April 2025 (Retail Gazette, Apr 2025)
- Partners
n/d
Chemist Warehouse (Australia)
- Launched
n/d
- Loyalty data and scale
n/d
- Formats
n/d
- Partners
n/d
Priceline Pharmacy (Wesfarmers Health, Australia)
- Launched
n/d
- Loyalty data and scale
Sister Club; 9.5M+ members (B&T, Nov 2025)
- Formats
Omnichannel
- Partners
Zitcha, chosen for self-serve (same source)
dmr Advertising (DocMorris, Germany)
- Launched
September 2023, with Criteo (PPC Land, 15 Jul 2026)
- Loyalty data and scale
Online pharmacy shoppers
- Formats
Sponsored product ads, native brand ads
- Partners
Criteo
Table by AdSovereign, CC BY 4.0.
Walgreens retail media network: Walgreens Advertising Group
Walgreens built its network around myWalgreens, the loyalty program it relaunched a month earlier (Marketing Dive, 3 December 2020). At launch it sold third-party display, video, social, streaming audio and email alongside its own digital and store assets. In December 2025 it added Rokt to place offers on the order confirmation page, which also opened the network to brands that Walgreens does not stock (Digital Commerce 360, 9 December 2025).
Stores are the newest push. After a dispute with Cooler Screens over its digital fridge doors, Walgreens chose Looma for screens in 1,200 stores from October 2026. Each store gets two large screens, one near the front and one in the pharmacy waiting area, plus digital end caps (Modern Retail, 11 September 2026). Walgreens has been a private company since its sale to Sycamore Partners was completed in 2025 (Digital Commerce 360, 9 December 2025).
CVS Media Exchange
CVS Media Exchange (CMX) sells across CVS.com, in-store digital media and offsite channels, using data from more than 90 million ExtraCare members (Beet.TV, 16 July 2025). In 2025 it began working with Reddit through a clean room. CMX says it was the first health and wellness network to comply with IAB standards (company claim, same source).
In-store, CVS moved early. It had digital end caps in more than 600 stores by February 2026 and expected about 11,000 screens by the end of the year (Modern Retail, 11 September 2026). CVS describes the content as informational rather than promotional. Its pharmacy waiting-area screens target the time patients spend waiting, which is a placement choice, not a use of their records.
Boots retail media network and Superdrug
Boots Media Group launched in September 2021 with Threefold, built on 17 million active Advantage Card members (Retail Week, 17 September 2021). In November 2024 Boots became the launch partner for a Criteo and LiveRamp offer that joins online and in-store sales for attribution (ExchangeWire, 12 November 2024). Boots was part of Walgreens Boots Alliance, which Sycamore Partners took private in 2025 (Digital Commerce 360, 9 December 2025).
Superdrug launched its network, Optimo, in October 2023 (Marketing Beat, 27 October 2023). It sells onsite display and sponsored products plus offsite media, and added about 500 store screens from April 2025 (Retail Gazette, April 2025).
Chemist Warehouse and Australian pharmacy media
We found no public announcement of a Chemist Warehouse retail media network by the research cut-off. Australia's nearest comparison is Priceline Pharmacy, part of Wesfarmers Health. In November 2025 it chose Zitcha for its network, citing self-serve tools, with more than 9.5 million Sister Club members (B&T, November 2025). Australian health-privacy rules are outside this page's scope.
What health data is excluded, and why
Pharmacies hold two kinds of data. One is what any shop holds: loyalty IDs and baskets of shampoo, snacks and cold remedies. The other is pharmacy data: prescriptions, refills, vaccinations and clinic visits. The rules treat them very differently.
8 of 8 rows
Prescription and dispensing records | "Health care" includes the "sale or dispensing of a drug" under a prescription, so these records are health information held by a covered provider | Kept out of ad targeting and measurement | |
Use of that data for marketing | A covered entity "must obtain an authorization" before using or disclosing protected health information for marketing; exceptions are face-to-face talks and promotional gifts of nominal value | Networks do not build audiences from it | |
Refill reminders | Not "marketing" if any payment the pharmacy receives is "reasonably related" to its cost of sending the message | Run by the pharmacy, not sold as media | |
Selling patient data | A sale of protected health information needs an authorization that states the pharmacy will be paid | Not done | |
Purchase of prescribed medication, in Washington | Listed as "consumer health data", whoever holds it | Excluded | |
Health inferences from ordinary purchases, in Washington | Data "derived or extrapolated from nonhealth information", including by algorithms, is consumer health data when used to identify a health condition | Sensitive segments reviewed or dropped | |
Selling consumer health data, in Washington | Requires a separate signed authorization that expires after one year | Data is not sold; segments stay inside the network | |
Health data in the UK | Processing of "data concerning health" is prohibited unless an Article 9(2) condition applies; the term covers data that reveals health status | Networks build on loyalty data and treat health inferences with care |
Prescription and dispensing records
- What the rule says
"Health care" includes the "sale or dispensing of a drug" under a prescription, so these records are health information held by a covered provider
- Citation
- Common practice (not a legal requirement)
Kept out of ad targeting and measurement
Use of that data for marketing
- What the rule says
A covered entity "must obtain an authorization" before using or disclosing protected health information for marketing; exceptions are face-to-face talks and promotional gifts of nominal value
- Citation
- Common practice (not a legal requirement)
Networks do not build audiences from it
Refill reminders
- What the rule says
Not "marketing" if any payment the pharmacy receives is "reasonably related" to its cost of sending the message
- Citation
- Common practice (not a legal requirement)
Run by the pharmacy, not sold as media
Selling patient data
- What the rule says
A sale of protected health information needs an authorization that states the pharmacy will be paid
- Citation
- Common practice (not a legal requirement)
Not done
Purchase of prescribed medication, in Washington
- What the rule says
Listed as "consumer health data", whoever holds it
- Citation
- Common practice (not a legal requirement)
Excluded
Health inferences from ordinary purchases, in Washington
- What the rule says
Data "derived or extrapolated from nonhealth information", including by algorithms, is consumer health data when used to identify a health condition
- Citation
- Common practice (not a legal requirement)
Sensitive segments reviewed or dropped
Selling consumer health data, in Washington
- What the rule says
Requires a separate signed authorization that expires after one year
- Citation
- Common practice (not a legal requirement)
Data is not sold; segments stay inside the network
Health data in the UK
- What the rule says
Processing of "data concerning health" is prohibited unless an Article 9(2) condition applies; the term covers data that reveals health status
- Citation
- Common practice (not a legal requirement)
Networks build on loyalty data and treat health inferences with care
Table by AdSovereign, CC BY 4.0.
Front-store purchases are the grey zone. HIPAA's health care definition names dispensing under a prescription (45 CFR 160.103). It does not say plainly how a loyalty record of an over-the-counter purchase is treated, and we found no HHS statement on the point. State law is clearer about intent. Washington's act reaches inferences drawn from everyday purchases, and other states are tracked in the state health privacy laws tracker.
Website tags are the other risk. The CVS and Criteo settlement concerned tracking tools on CVS's site and app, which plaintiffs alleged sent sensitive data to ad and analytics firms (HIPAA Journal, 24 September 2026). The settlement had preliminary approval; the claims were allegations. How pixels on health pages create exposure is explained in the pixel problem in healthcare marketing.
The full HIPAA analysis is in HIPAA-compliant programmatic advertising, and the marketing rule itself in HIPAA marketing rule explained. Washington's law has its own page: My Health My Data Act for advertisers.
What pharmacy networks can still sell
The limits leave a large business. Pharmacy networks sell what any retailer sells, plus a few placements that only a pharmacy has.
- Front-store audiences. Segments built from beauty, personal care, grocery and household baskets on the loyalty card.
- Contextual placements. Screens in the pharmacy waiting area reach people by place and time, without using their records. Walgreens and CVS both plan them (Modern Retail, 11 September 2026).
- Offsite media. Front-store segments activated through partners, often via a clean room so the brand never sees the records.
- Closed-loop reporting. Sales results by SKU from loyalty purchases, as with Boots' online and in-store attribution.
Example. A cough syrup brand wants to reach shoppers ahead of winter. It can target loyalty members who bought cold remedies last season, if the network's policy and state law allow that segment. It can buy waiting-area screens at the pharmacy counter. It cannot target people because they filled a prescription, and the pharmacy cannot sell it a list of patients. Comparable rules for grocers, which carry fewer health signals, are in grocery retail media networks.
How pharmacy networks report results
Pharmacy networks measure like other retailers, with one constraint: the sales they attribute come from loyalty purchases at the front of the store. Boots joins online and in-store sales through Criteo and LiveRamp. Criteo reported a 22% higher return on ad spend once store sales were counted, based on the top 50 brands in late 2024 (company claim, ExchangeWire, 12 November 2024). Walgreens says it chose Looma partly because the screens are judged on full-funnel metrics rather than on how often an ad played (Modern Retail, 11 September 2026).
What to ask a pharmacy network before you buy
- Which data feeds the audiences? Ask for a written list of sources, and confirm that pharmacy and patient records are not among them.
- How are sensitive segments reviewed? Ask who approves segments that could suggest a health condition, and how state laws such as Washington's are applied.
- Which tags run on health pages? Ask whether ad or analytics tags fire on prescription, clinic or vaccination pages of the site and app.
- How are store screens measured? Ask for the impression formula, the footfall source and whether waiting-area screens are sold contextually.
- What does the brand receive? Reports and aggregates should be the default; ask how any clean room limits row-level output.
FAQ
What is the Walgreens retail media network?
What is CVS Media Exchange?
Does Boots have a retail media network?
Does Chemist Warehouse have a retail media network?
Can pharmacy networks use prescription data for ads?
Is front-store loyalty data health data?
How this works on owned infrastructure
The question this page raised is how a pharmacy keeps front-store data usable for ads while prescription and patient records never reach an ad system. Separation is easiest to show when the audience builder, clean room and bidder run inside the pharmacy's own perimeter, next to the loyalty data and walled off from the dispensing systems. AdSovereign is an enterprise RTB stack (DSP, SSP, exchange, DMP and clean room) designed to run on infrastructure the operator controls, with data flows the operator's privacy team can inspect and restrict. It is designed to support HIPAA and state health-data programmes, not to replace legal review. The security page describes the controls, and the architecture page shows the deployment.
Sources
- Marketing Dive, "Walgreens debuts retail media network, with revamped loyalty program front and center" (3 December 2020). https://www.marketingdive.com/news/walgreens-debuts-retail-media-network-with-revamped-loyalty-program-front/591550/
- Digital Commerce 360, "Walgreens adopts Rokt for retail media network tech expansion" (9 December 2025). https://www.digitalcommerce360.com/2025/12/09/walgreens-adopts-rokt-for-retail-media-network-expansion/
- Modern Retail, "Walgreens tries again with digital screens after digital coolers flop" (11 September 2026). https://www.modernretail.co/marketing/walgreens-says-its-focused-on-higher-peforming-ad-placements-as-it-tries-again-with-digital-screens/
- Beet.TV, "From Retail Media to Reddit, CVS Media Exchange Celebrates Five Years" (16 July 2025). https://www.beet.tv/2025/07/from-retail-media-to-reddit-cvs-media-exchange-celebrates-five-years.html
- HIPAA Journal, "CVS Health; Criteo Agree to Pay Combined $20.5 Million to Resolve Website Tracking Litigation" (24 September 2026). https://www.hipaajournal.com/cvs-health-criteo-american-wellness-corp-data-breach-settlements/
- Retail Week, "Boots launches marketing agency to supercharge brand partners' campaigns" (17 September 2021). https://retail-week.com/health-and-beauty/boots-launches-marketing-agency-to-supercharge-brand-partners-campaigns/7040611.article
- ExchangeWire, "LiveRamp & Criteo Collaborate to Propel First-Party Data Capabilities for Omnichannel Retail Media, with Boots as Launch Partner" (12 November 2024). https://www.exchangewire.com/blog/2024/11/12/liveramp-criteo-collaborate-to-propel-first-party-data-capabilities-for-omnichannel-retail-media-with-boots-as-launch-partner/
- Marketing Beat, Superdrug retail media network launch (27 October 2023). https://www.marketing-beat.co.uk/2023/10/27/superdrug-retail-media-network/
- Superdrug, "Optimo" retail media page (accessed 17 October 2026 for wave 1). https://www.superdrug.com/test/optimo
- Retail Gazette, Superdrug digital screens (April 2025). https://www.retailgazette.co.uk/blog/2025/04/superdrugdigital-screens/
More sources (9)
- B&T, "Priceline Pharmacy Bolsters Retail Media Network By Teaming Up With Zitcha" (November 2025). https://www.bandt.com.au/priceline-pharmacy-bolsters-retail-media-network-by-teaming-up-with-zitcha/
- PPC Land, "DocMorris retail media unit grows inside a segment up 80% in Q2" (15 July 2026). https://ppc.land/docmorris-retail-media-unit-grows-inside-a-segment-up-80-in-q2/
- 45 CFR 160.103, Definitions (Health care; Protected health information). Legal Information Institute, accessed 9 November 2026. https://www.law.cornell.edu/cfr/text/45/160.103
- 45 CFR 164.501, Definitions (Marketing). Legal Information Institute, accessed 9 November 2026. https://www.law.cornell.edu/cfr/text/45/164.501
- 45 CFR 164.508, Uses and disclosures for which an authorization is required. Legal Information Institute, accessed 9 November 2026. https://www.law.cornell.edu/cfr/text/45/164.508
- RCW 19.373.010, Definitions (My Health My Data Act). Washington State Legislature, accessed 9 November 2026. https://app.leg.wa.gov/RCW/default.aspx?cite=19.373.010
- RCW 19.373.070, Valid authorization to sell. Washington State Legislature, accessed 9 November 2026. https://app.leg.wa.gov/RCW/default.aspx?cite=19.373.070
- UK GDPR, Article 9, Processing of special categories of personal data. legislation.gov.uk, accessed 9 November 2026. https://www.legislation.gov.uk/eur/2016/679/article/9
- UK GDPR, Article 4, Definitions. legislation.gov.uk, accessed 9 November 2026. https://www.legislation.gov.uk/eur/2016/679/article/4
Changelog
- 9 November 2026: first edition, seven networks and the health-data limits table.