When a representative of a pharmaceutical company calls on a physician in the office, he or she will generally know how many prescriptions that physician writes per month for the drugs that the rep is promoting. How can this be? Welcome to the world of IMS and PBMs. A recent story in the WSJ and a blog followup below provides the answers (see: What Does IMS Health Do, Anyway?).
IMS Health is nearing a deal to sell itself for nearly $4 billion, the WSJ reports. That raises a simple question: What does IMS Health do, anyway? Drug companies pay IMS for information about the prescribing habits of individual doctors. This, of course, is very valuable stuff for the drug company sales reps who make calls at doctors’ offices. IMS buys the raw prescription data — which doesn’t identify patients — from pharmacies. Maine, New Hampshire and Vermont have all passed laws banning the sale of information that identifies individual doctors’ prescribing habits, with proponents arguing that the business interferes with the doctor-patient relationship. IMS and other companies in the business have challenged those laws, arguing that they violate the first amendment. The courts have gone back and forth on the issue. Last year, a federal appeals court upheld the New Hampshire law, overturning a lower court’s ruling. The Supreme Court refused to hear the case. Through the AMA, individual doctors can choose to restrict companies’ access to their prescribing data. IMS’s business isn’t limited to selling prescription information about individual doctors. The company also does consulting work and big-picture analyses of trends in the drug business, among other things.
I have posted a previous note in which I make the case that much of what the public perceives as the confidentiality of medical information is largely a myth (see: Despite HIPAA, the Privacy of Our Health Records Is Largely a Myth, On the Privacy of Health Information: The Horse Is Already Out of the Barn). One of the biggest cracks in the confidentiality wall consists of the pharmaceutical benefit managers (PBMs). IMS Health is a little cagey about the source of its information. Here is a cut-and-paste from its web site listed under market measurement. Note that they "assess" billions of transactions but they don't indicate where they obtain their data.
We don’t just track information at IMS; we evaluate it, test it, understand it. We take a vast array of healthcare data and facts and transform them into actionable intelligence. By assessing billions of transactions involving more than a million products from 3,000+ pharmaceutical manufacturers, we remain the go-to company for clients seeking to make faster, smarter decisions.
The pharmaceutical companies don't have prescription-level information -- it must originate from doctor offices, retail pharmacies, hospital pharmacies, and PBMs. Even if companies like IMS block the names of patients from the drug profile data that they sell, much can be learned from it on the basis of other parameters. Here a quote from Mr. HIStalk from one of the notes referenced above dealing, in this case, with clinical data peddling by HIT vendors (see: Despite HIPAA, the Privacy of Our Health Records Is Largely a Myth). Think joinable fields and loyalty card databases.
I think that [HIT vendors selling hospital clients' ‘de-identified’ clinical data] conveniently [hide] behind the concept of “anonymization” as an absolute; a simple technique of magically rendering highly sensitive personal data untraceable. Sounds good to a lay person, right? It even sounds technically reasonable as long as you’re thinking of someone having only one data element (just your birth date) instead of multiples (your birth date and ZIP code) and one database (a prescription file) instead of multiples containing joinable fields (prescriptions plus driver’s license records plus a grocery store loyalty card database). It’s like security in general: rarely absolute, secure only if there’s not enough incentive for someone to go to the trouble to crack the code.








