Master Supreme Court upheld New York's centralized collection of patient-identifying data for certain controlled-substance prescriptions against a constitutional privacy challenge. with this comprehensive case brief.
Whalen v. Roe is a foundational case in the constitutional law of privacy, particularly the subset often called informational privacy. Decided in 1977, the Supreme Court addressed whether a state may collect and store the names and addresses of patients receiving prescriptions for tightly regulated controlled substances without violating the Due Process Clause of the Fourteenth Amendment. The Court upheld New York's program, rejecting a facial privacy challenge but, in doing so, articulated a now-classic distinction between two strands of privacy: decisional autonomy and confidentiality of personal information.
For law students, Whalen is significant not only for its holding but also for its analytical framework. It recognizes that the Constitution protects an interest in avoiding disclosure of highly personal matters, yet it balances that interest against legitimate state objectives and the presence of concrete safeguards. The case continues to inform debates over government data collection, health information confidentiality, and the constitutional contours of informational privacy in an age of expansive databases and electronic records.
Whalen v. Roe, 429 U.S. 589 (1977)
New York amended its Public Health Law to combat diversion and abuse of Schedule II controlled substances. The law required prescribing physicians and dispensing pharmacists to use official state prescription forms and to report to the state Department of Health certain information about each prescription, including the patient's name, address, and the drug prescribed. The Department maintained this information in a centralized computer database, limited access to a small number of authorized officials for law-enforcement and public-health purposes, and made unauthorized disclosure a crime subject to penalties. Patients and physicians challenged the reporting and centralized storage of patient-identifying information, alleging that it violated a constitutional right to privacy by both deterring patients from seeking needed medical care and risking disclosure of highly personal medical information. A three-judge district court partly agreed and enjoined the name-and-address reporting component. The State appealed directly to the Supreme Court, which reviewed whether the program's collection and retention of patient-identifying data impermissibly infringed constitutionally protected privacy interests.
Does New York's requirement that physicians and pharmacists report to the state the names and addresses of patients receiving prescriptions for certain controlled substances, for storage in a secure centralized database, violate a constitutionally protected right to privacy under the Fourteenth Amendment?
The Due Process Clause protects privacy interests that include (1) an individual's interest in independence in making certain kinds of important personal decisions (decisional autonomy) and (2) an individual's interest in avoiding disclosure of highly personal matters (confidentiality). Government collection of personal information does not violate due process where it serves a legitimate and substantial state interest and is accompanied by adequate safeguards against unwarranted public disclosure and misuse; absent a fundamental right, such regulations are judged under a deferential standard and are upheld if reasonable relative to their purposes.
No. New York's program, which collects and stores patient-identifying information about Schedule II prescriptions with specific security measures and restricted access, does not violate a constitutionally protected right to privacy.
The Court began by recognizing two distinct privacy interests: the interest in making certain important decisions independently, and the interest in avoiding disclosure of personal matters. The New York statute did not burden decisional autonomy; it neither prohibited nor regulated the prescription of medically necessary drugs. Patients retained the ability to obtain lawful medical treatment. Turning to confidentiality, the Court acknowledged that the Constitution protects an interest in avoiding disclosure of personal information. But it emphasized that the mere existence of government recordkeeping does not create a per se constitutional violation. The program served an important and legitimate state interest in preventing abuse and diversion of dangerous drugs, facilitating law-enforcement oversight, and protecting public health. The reporting requirement was limited in scope to Schedule II substances, and the information was not made public. Critically, the statutory scheme and implementing practices included multiple safeguards: access to the database was confined to a small number of authorized officials; the information's use was limited to specified purposes; and unauthorized disclosure was criminally punishable. The Court rejected speculative fears of breaches or misuse, noting the lack of evidence of actual harm or significant deterrence of medical care. It analogized the program to long-accepted public-health reporting (e.g., communicable-disease registries) and other routine governmental data collections that are necessary for effective regulation. Given these safeguards and the strong state interest, the limited intrusion did not rise to a constitutional violation. The Court also dismissed related claims that the program irrationally discriminated or unduly burdened the physician–patient relationship, finding the regulatory means reasonable in light of the state's objectives. In sum, while recognizing an interest in informational privacy, the Court held that New York's carefully structured system did not impermissibly infringe constitutional rights.
Whalen is a cornerstone in informational privacy jurisprudence. It articulates the two-strand privacy framework that courts and scholars still use and establishes that government collection of personal data can be constitutional when justified by legitimate objectives and protected by meaningful safeguards. The decision has influenced later cases, including NASA v. Nelson, where the Court again acknowledged—without definitively defining—the constitutional interest in informational privacy while upholding secure government data practices. For law students, Whalen provides a model of balancing private confidentiality interests against administrative efficacy and public-health needs, and it anticipates modern controversies over electronic health records, prescription monitoring programs, and broader data governance.
The Court identified (1) decisional privacy—an individual's interest in making certain important personal decisions (such as medical or family choices) free from undue government interference—and (2) informational privacy—an individual's interest in avoiding disclosure of highly personal matters. Whalen focuses on the latter and holds that limited, safeguarded government data collection can be permissible.
The Court acknowledged a constitutional interest in avoiding disclosure of personal information but did not define a broad, free-standing right to informational privacy with fixed contours. Instead, it balanced the interest against the state's objectives and the statute's safeguards, upholding the program. Subsequent cases, like NASA v. Nelson, have assumed without definitively deciding the right's precise scope.
Because the statute did not burden a fundamental right or target a suspect class, the Court effectively applied a deferential, rational-basis-type review informed by a balancing of interests. It asked whether the program reasonably advanced legitimate state goals and whether safeguards adequately mitigated the risk of unwarranted disclosure.
Safeguards were pivotal. The Court emphasized limited access to the data, criminal penalties for unauthorized disclosure, and the nonpublic nature of the database. These protections narrowed the intrusion on privacy and helped justify the statute as a reasonable regulatory measure rather than an unconstitutional invasion of confidentiality.
No. The Court found no persuasive evidence that the program significantly deterred patients from obtaining needed care or undermined medical practice. It likened the reporting to established public-health recordkeeping and noted that the statute neither prohibited medical treatment nor publicized patient identities.
Whalen supplies the constitutional template for PDMPs: states may collect identifiable prescription data for legitimate public-health and law-enforcement purposes if they implement robust security, restrict access and use, and penalize misuse. Challenges to modern PDMPs often rise or fall on whether they include safeguards comparable to or stronger than those in Whalen.
Whalen v. Roe affirms that the Constitution accommodates both individual privacy and the state's need to regulate for public safety and health. By upholding New York's controlled-substance reporting system, the Court recognized an interest in informational privacy but confirmed that well-structured, secure data collection programs can pass constitutional muster.
For contemporary law practice, Whalen remains highly relevant. It guides courts and policymakers in assessing government data programs, especially in healthcare and law enforcement, and it equips advocates with a balancing framework: identify the privacy interest, test the strength of the state's objectives, and scrutinize the presence and efficacy of safeguards against disclosure and misuse.
Need to cite this case?
Generate a perfectly formatted Bluebook citation in seconds.
Use our Bluebook Citation Generator →