New York amended its Public Health Law to combat diversion and abuse of Schedule II controlled substances. The law required prescribing physicians and dispensing pharmacists to use official state prescription forms and to report to the state Department of Health certain information about each prescription, including the patient's name, address, and the drug prescribed. The Department maintained this information in a centralized computer database, limited access to a small number of authorized officials for law-enforcement and public-health purposes, and made unauthorized disclosure a crime subject to penalties. Patients and physicians challenged the reporting and centralized storage of patient-identifying information, alleging that it violated a constitutional right to privacy by both deterring patients from seeking needed medical care and risking disclosure of highly personal medical information. A three-judge district court partly agreed and enjoined the name-and-address reporting component. The State appealed directly to the Supreme Court, which reviewed whether the program's collection and retention of patient-identifying data impermissibly infringed constitutionally protected privacy interests.
Does New York's requirement that physicians and pharmacists report to the state the names and addresses of patients receiving prescriptions for certain controlled substances, for storage in a secure centralized database, violate a constitutionally protected right to privacy under the Fourteenth Amendment?
The Due Process Clause protects privacy interests that include (1) an individual's interest in independence in making certain kinds of important personal decisions (decisional autonomy) and (2) an individual's interest in avoiding disclosure of highly personal matters (confidentiality). Government collection of personal information does not violate due process where it serves a legitimate and substantial state interest and is accompanied by adequate safeguards against unwarranted public disclosure and misuse; absent a fundamental right, such regulations are judged under a deferential standard and are upheld if reasonable relative to their purposes.
No. New York's program, which collects and stores patient-identifying information about Schedule II prescriptions with specific security measures and restricted access, does not violate a constitutionally protected right to privacy.
The Court began by recognizing two distinct privacy interests: the interest in making certain important decisions independently, and the interest in avoiding disclosure of personal matters. The New York statute did not burden decisional autonomy; it neither prohibited nor regulated the prescription of medically necessary drugs. Patients retained the ability to obtain lawful medical treatment. Turning to confidentiality, the Court acknowledged that the Constitution protects an interest in avoiding disclosure of personal information. But it emphasized that the mere existence of government recordkeeping does not create a per se constitutional violation. The program served an important and legitimate state interest in preventing abuse and diversion of dangerous drugs, facilitating law-enforcement oversight, and protecting public health. The reporting requirement was limited in scope to Schedule II substances, and the information was not made public. Critically, the statutory scheme and implementing practices included multiple safeguards: access to the database was confined to a small number of authorized officials; the information's use was limited to specified purposes; and unauthorized disclosure was criminally punishable. The Court rejected speculative fears of breaches or misuse, noting the lack of evidence of actual harm or significant deterrence of medical care. It analogized the program to long-accepted public-health reporting (e.g., communicable-disease registries) and other routine governmental data collections that are necessary for effective regulation. Given these safeguards and the strong state interest, the limited intrusion did not rise to a constitutional violation. The Court also dismissed related claims that the program irrationally discriminated or unduly burdened the physician–patient relationship, finding the regulatory means reasonable in light of the state's objectives. In sum, while recognizing an interest in informational privacy, the Court held that New York's carefully structured system did not impermissibly infringe constitutional rights.
Whalen is a cornerstone in informational privacy jurisprudence. It articulates the two-strand privacy framework that courts and scholars still use and establishes that government collection of personal data can be constitutional when justified by legitimate objectives and protected by meaningful safeguards. The decision has influenced later cases, including NASA v. Nelson, where the Court again acknowledged—without definitively defining—the constitutional interest in informational privacy while upholding secure government data practices. For law students, Whalen provides a model of balancing private confidentiality interests against administrative efficacy and public-health needs, and it anticipates modern controversies over electronic health records, prescription monitoring programs, and broader data governance.
Whalen v. Roe affirms that the Constitution accommodates both individual privacy and the state's need to regulate for public safety and health. By upholding New York's controlled-substance reporting system, the Court recognized an interest in informational privacy but confirmed that well-structured, secure data collection programs can pass constitutional muster.