Prozac Manufacturer Reveals Patient Information

July 4, 2001 12:00 am

Media Contact
125 Broad Street
18th Floor
New York, NY 10004
United States

WASHINGTON– Eli Lilly, the maker of Prozac, inadvertently revealed the e-mail addresses of patients with depression, bulimia or obsessive-compulsive disorder, company officials said yesterday, according to The Washington Post.

The Post reported that a June 27 e-mail message listed the addresses of more than 600 people who had signed up for an Internet service provided by Lilly to routinely send them reminders about taking the company’s Prozac medicine or attending to other matters.

Over the past two years, such messages were addressed only to individuals.

Last week’s message, announcing the end of the program, was sent to every participant and included all of their e-mail addresses because of a computer programming error, Lilly spokeswoman Laura Miller said.

Miller said the company has taken steps to prevent a recurrence, including a temporary halt to sending e-mail to patients. “We apologize for this error,” she said.

Miller said Lilly considers patient privacy a priority: “We take it very seriously.”

Privacy specialists said the lapse demonstrates the difficulties of protecting sensitive information collected and shared by computers on the Internet.

“This shows the danger of the massive amounts of data that are being collected” without adequate safeguards, said Evan Hendricks, publisher of Privacy Times. “Most organizations have not put enough work into ensuring sensitive data is handled properly.”

The American Civil Liberties Union yesterday asked the Federal Trade Commission to investigate whether Lilly violated its privacy policy or any trade laws that govern the use of customer information.

ACLU Associate Director Barry Steinhardt and Internet policy analyst Christopher Chiu said in a letter to the FTC that “we believe that Eli Lilly’s actions constitute unfair trade practices.”

“These events set a dangerous precedent,” the letter said. “Eli Lilly had a duty of care and a duty under the Federal Trade laws to protect the confidentiality of the medical consumers who used [its] product.” Several patients also have complained to the company that they expected the e-mails to be confidential.

One patient, a 30-year-old graduate business student in New York, said he found the messaging system at www., a Lilly marketing site on the World Wide Web, when he was looking for more information about depression.

Until last week’s disclosure, he said, he liked receiving the notes and trusted Lilly to protect the fact he was being treated for mental illness.

“I was just made to believe this would be private,” said the student, who asked not to be named.

In the June 27 message, Lilly said it was discontinuing the reminder service, adding that the company hoped “this does not cause any inconvenience to those of you who were using this feature.”

“We heard from market research the . . . program wasn’t as effective as we had thought,” Miller said.

By completing this form, I agree to receive occasional emails per the terms of the ACLU’s privacy policy.

The Latest in National Security

ACLU's Vision

The American Civil Liberties Union is a nonprofit organization whose mission is to defend and preserve the individual rights and liberties guaranteed to every person in this country by the Constitution and laws of the United States of America.

Learn More About National Security

National Security issue image

The ACLU’s National Security Project is dedicated to ensuring that U.S. national security policies and practices are consistent with the Constitution, civil liberties, and human rights.