We understand the special sensitivities associated with your Consumer Health Data. The following terms constitute AARP’s Consumer Health Data Privacy Policy and supplement the other terms of AARP’s Privacy Policy. Except where the terms of this Consumer Health Data Privacy Policy differ, the other terms of AARP’s Privacy Policy apply to Consumer Health Data Privacy to the same extent they apply to other types of Personal Information.
By providing us with your Consumer Health Data or by using our websites or apps, you consent to our collection, use, and sharing of such Consumer Health Data as described in this Consumer Health Data Privacy Policy.
For purposes of this Consumer Health Data Privacy Policy, “Consumer Health Data” means a subset of Personal Information that: (1) is linked or reasonably linkable to a consumer; (2) identifies the consumer’s past, present, or future physical or mental health status; and (3) meets the definition of “consumer health data” under the Washington State My Health My Data Act, the Nevada Consumer Health Data Privacy Law, or any other applicable law that specifically regulates the collection, use, and sharing of consumer health data (collectively, “Health Privacy Laws”).
Categories of Consumer Health Data We May Collect, Use, and Share
Because Health Privacy Laws may define “Consumer Health Data” very broadly, many of the categories of Personal Information we may collect, use, and share could also be considered Consumer Health Data.
Specific categories of Consumer Health Data we may collect, use, and share include:
- Health conditions, treatment, diseases, or diagnoses, including reproductive or sexual health care and gender-affirming care.
- Social, psychological, behavioral, and medical interventions.
- Surgeries or health-related procedures.
- Use or purchase of medication.
- Bodily functions, vital signs, symptoms, or measurements of information regarding a consumer’s physical or mental health status.
- Biometric data.
- Genetic data.
- Precise location information that could reasonably indicate a consumer’s attempt to acquire or receive health care services or supplies.
- Data that identifies a consumer seeking health care services.
- Health data derived or extrapolated from non-health information (such as proxy, derivative, inferred, or emergent data derived through an algorithm, machine learning, or any other means).
- Other categories of Consumer Health Data with your consent.
We also may collect information that does not reveal your specific identity or does not relate to an identifiable consumer, including browser and device information, app usage data, Internet Protocol address, information collected through cookies, pixel tags, and other technologies. We do not use such information to infer health status. Nevertheless, if we are required by an applicable Health Privacy Law to treat such information as Consumer Health Data, then we may collect, use, and share it for the purposes for which we collect, use, and share Consumer Health Data as described in this Consumer Health Data Privacy Policy
We may collect Consumer Health Data from you, including:
- Information you provide to us directly.
- Information obtained during your interactions with us, including with our website or apps.
- Inferences we make based on that information.
We may collect Consumer Health Data from Providers, including:
- Information you supplied to Providers, who then share the information with us.
- Information obtained during your interactions with a Provider, who then shares the information with us.
- Inferences Providers make about you and share with us.
Other Parties With Which We May Share Consumer Health Data
We may share Consumer Health Data with:
- Subsidiaries and affiliates of AARP, including AARP Foundation and AARP Services, Inc.
- Providers, including: (1) Providers that provide information to help us serve Members relevant ads and understand the ads’ effectiveness; and (2) if you are a member, Member Benefit Providers that provide benefits and services to you as part of your membership.
- Law enforcement or other government agencies or third parties when we believe doing so is required by law or valid legal processes.
- Other third parties with your consent, or as necessary to provide you with the products or services that you request.
The Purposes of Our Collection, Use, and Sharing of Consumer Health Data
We collect, use, and share Consumer Health Data as necessary to provide you with the products or services you request. This may include collection, use, and sharing of Consumer Health Data:
- To help ensure security and integrity to the extent the use of the consumer’s Consumer Health Data is reasonably necessary and proportionate for these purposes.
- For short-term, transient use. This includes, but is not limited to, non-personalized advertising shown as part of a consumer’s current interaction with a business, provided that the consumer’s Consumer Health Data is not disclosed to another third party and is not used to build a profile about the consumer or otherwise alter the consumer’s experience outside the current interaction with the business.
- To perform services on behalf of a business, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying consumer information, processing payments, providing financing, providing analytic services, providing storage, or providing similar services on behalf of the business.
- To provide advertising and marketing services, except for cross-context behavioral advertising, to the consumer provided that, for the purpose of advertising and marketing, a Provider shall not combine the Consumer Health Data of opted-out consumers that the Provider receives from, or on behalf of, the business with Consumer Health Data that the Provider receives from, or on behalf of, another person or persons or collects from its own interaction with consumers services to the consumer, but not through tracking individual behavior across different websites or apps. When providing these services, the Provider will not combine the consumer's health information with data collected from other sources or from the Provider's own interactions with the consumer.
- To undertake internal research for technological development and demonstration purposes.
- To undertake activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by a business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business.
- To undertake activities to advance commercial or economic interests, such as by inducing another person to buy, rent, lease, join, subscribe to, provide, or exchange products, goods, property, information, or services, or enabling or effecting, directly or indirectly, a commercial transaction.
Additionally, we may collect, use, and share Consumer Health Data:
- For targeted advertising, as described in the “Advertising Technologies – Tailored Ads Based on Your Online Activity” section of AARP’s Privacy Policy.
- When we believe doing so is required by law or valid legal process.
- For additional purposes with your consent.
Your Rights
Please refer to the “Your Rights as a Consumer” section of AARP’s Privacy Policy for a description of your rights regarding your Consumer Health Data and how to exercise those rights.
As required by applicable Health Privacy Laws, we will not sell your Consumer Health Data except with your express authorization or consent.
Updates to Consumer Health Data Privacy Policy
We may change or update this Consumer Health Data Privacy Policy from time to time. When we do, we will post the revised version on this page with a new “Last Updated” date.
Effective Date
This Consumer Health Data Privacy Policy is effective as of March 31, 2024.