Outrage over CVS plan requiring health info from employees

Is new policy legal?