Why is the GPhC focusing on online pharmacy?
The General Pharmaceutical Council (GPhC) is focusing on online pharmacy because that is where the concerns and the inspection failures are concentrated. Concerns raised with the regulator more than doubled in five years, from 2,989 in 2020/21 to 6,202 in 2024/25, and the regulator's own council papers attribute part of that rise to emerging issues with online pharmacies, weight loss treatments, advertising and inappropriate Electronic Prescription Service nominations. In the second quarter of 2025/26 the GPhC received 2,159 concerns, its highest quarterly figure ever recorded, with 17% relating to online settings.
The inspection data tells the same story more bluntly. Of the 118 inspection reports published for distance selling and online pharmacies between January 2025 and autumn 2025, 37% did not meet all standards. The equivalent figure for community pharmacies over the same period was 12%. An online pharmacy was roughly three times more likely to fail inspection than a bricks-and-mortar one.
None of this means the GPhC is hostile to online pharmacy as a model. Its February 2025 guidance explicitly acknowledges the benefits of distance services. What the data shows is a regulator concluding that a specific set of governance failures cluster in online operations, and reallocating its inspection and enforcement effort accordingly. For anyone running or building an online pharmacy, the useful question is not whether scrutiny is coming. It is here. The question is what, precisely, it lands on.
What does the GPhC's April 2026 weight management review reveal?
The April 2026 review is the clearest public statement of GPhC enforcement priorities yet published, because it is the regulator's own analysis of two years of its inspection and concerns data. The review, Weight management medicines and services: a review of GPhC inspections and concerns, covers January 2024 to December 2025 and every pharmacy owner offering or considering a private service should read it as intelligence, not commentary.
The headline numbers first. The GPhC received 1,307 concerns referencing weight management medicines or services over the two years, rising from 208 in 2024 to 1,099 in 2025, a more than fivefold increase in a single year. Three quarters (76%) came from members of the public, and online pharmacies attracted 49% of concerns against 26% for bricks-and-mortar premises. One in twenty of all pharmacy inspection reports in the period referenced weight management, and across those inspections 106 individual standards were recorded as not met or requiring improvement.
Two contextual points in the review deserve attention. First, the concern volume tracks commercial events: the Mounjaro list price increase announced in August 2025 generated 78% of all pricing-related concerns within just August and September 2025. When a manufacturer moves a price, the regulator's postbag fills within weeks, and pharmacies that handled paid orders badly (holding stock, imposing cancellation fees, offering lower doses instead of refunds) turned a supplier decision into their own regulatory exposure. Second, the review notes that BMI-related concerns rose sharply from February 2025, when the updated distance selling guidance was published. The public now knows what verification pharmacies are supposed to do, and reports them when they do not do it.
Where do pharmacies actually fail inspection?
Pharmacies providing weight management services fail inspection overwhelmingly on three standards: risk management, safe service delivery and record keeping. Of the 106 standards recorded as not met or requiring improvement in the review, 46% related to standard 1.1 (the risks associated with providing pharmacy services are identified and managed), 28% to standard 4.2 (pharmacy services are managed and delivered safely and effectively) and 15% to standard 1.6 (all necessary records for the safe provision of pharmacy services are kept and maintained).
That concentration is the most actionable fact in the entire review. The regulator is not failing pharmacies on obscure technicalities. It is failing them on the fundamentals of clinical governance, and the review spells out what those failures looked like in practice. Risk assessments were absent, partially completed or not reviewed. Pharmacies could not demonstrate that the third-party prescribing services they worked with had their own clinical safeguards. There were no working processes for independently verifying a person's weight and body mass index (BMI). Follow-up arrangements to confirm treatment remained appropriate did not exist. Staff were not following the pharmacy's own standard operating procedures on clinical checks before supply.
The record keeping failures under standard 1.6 are equally specific: consultation records lacked the detail needed to demonstrate that a safe, clinically appropriate decision had been made. In our experience this is the gap that catches otherwise well-run pharmacies. A service can be clinically sound in practice and still fail inspection because the record of an individual supply does not show who verified what, when and against which evidence. Inspectors assess what is documented, and the review confirms that the documentation is where services fall down.
It is worth noting what did not feature. Only one report in the entire dataset cited a target or incentive concern, and premises issues were marginal. The regulator's attention is on systems, not shopfronts.
What enforcement action has the GPhC taken against online pharmacies?
The GPhC has taken enforcement action against at least 73 distinct online pharmacies, issuing 66 conditions notices and 14 improvement notices, according to analysis of regulator data published by The Pharmaceutical Journal in April 2025. At that point there were 189 open fitness to practise cases relating to online pharmacies, representing 16% of the regulator's entire open caseload, and nine registrants across six pharmacies were subject to interim orders. On weight management specifically, the GPhC confirmed in early 2026 that it had acted against 18 pharmacies for failing to follow its guidance on weight management prescribing.
The enforcement ladder matters because each rung carries different consequences. An improvement notice requires specified changes by a deadline. A conditions notice restricts what the pharmacy may do, and breaching it is itself a serious matter (the April 2026 review lists acting in breach of GPhC enforcement action among the misconduct concerns it received). Beyond that sit interim suspension of premises and disqualification proceedings against owners, and the GPhC is formalising this end of the ladder: council papers from December 2025 confirm a dedicated policy on disqualification and interim premises suspension is due to be published in summer 2026.
Enforcement against the premises and fitness to practise action against the people are separate tracks that run together. The February 2025 guidance made superintendent pharmacists jointly responsible with pharmacy owners for meeting it, a structural change from the previous owner-only responsibility. Fitness to practise committees have suspended pharmacists for questionnaire-only supply of weight loss medicines and for transactional, high-volume prescribing of high-risk medicines, and published determinations show that working through a third-party prescribing platform does not dilute an individual registrant's accountability. If you are a superintendent, the governance file is personal.
The six concern themes and what each tells you
The review categorises its 1,307 concerns into six themes, and each maps directly to a control a pharmacy either has or does not have.
| Theme | Share of concerns | Example from the GPhC review | The control that prevents it |
|---|---|---|---|
| Prescribing practice | 27% | Questionnaires displaying contraindication lists, enabling people to game answers; automatic titration without clinical review; supply recorded against a deceased person | Independent BMI and history verification, individual clinical review of every supply, consultation records that show the decision |
| Customer service | 25% | Unreachable pharmacies, ignored refund requests, paid orders held after the September 2025 price rise | Staffed clinical and complaints channels, published contact routes, refund handling that does not require a bank chargeback |
| Advertising | 17% | Named prescription-only medicines with discount codes; paid TikTok influencer promotion; forum posts on bypassing eligibility checks | Marketing sign-off against the CAP/MHRA/GPhC enforcement notice before anything publishes |
| Product and cold chain | 14% | Warm products on arrival, melted cool packs, parcels left in bins or vans, confusion over 30-day stability | Delivery risk assessment, validated packaging, tracked temperature-sensitive despatch, documented deviation process |
| Unlawful supply and misconduct | 6% | Diversion to beauticians, parcel motel routing to the Republic of Ireland, sites imitating registered pharmacies | Export legality checks, supply chain controls, register verification of every partner |
| Dispensing errors | 4% | Wrong strength causing hospital admission, another patient's medicine delivered, no dispensing label | Standard dispensing governance applied to the private service, not just the NHS one |
Percentages are drawn from the review's thematic analysis; product and cold chain share is derived from the 184 product concerns reported.
Two themes deserve a closer look. The prescribing findings show the regulator reading service design, not just outcomes: a questionnaire that shows applicants the disqualifying answers is treated as a governance failure in itself, because it engineers false declarations. And the product theme is a warning to anyone who thinks compliance ends at the dispensary door. The GPhC received more concerns about deliveries and cold chain than about dispensing errors, and its recommended actions devote an entire section to despatch, packaging, tracking and courier terms. Your delivery partner's performance is your inspection finding.
Advertising is now a three-regulator problem
Advertising prescription-only medicines to the public is unlawful, and it is now policed jointly by three bodies with pooled intelligence. In September 2025 the Committee of Advertising Practice (CAP), the Medicines and Healthcare products Regulatory Agency (MHRA) and the GPhC issued a joint enforcement notice on prescription-only weight management medicines, covering online and social media advertising, email and direct marketing, posters, leaflets and brochures. The Advertising Standards Authority's AI-based monitoring system actively scans for breaches, so non-compliant pages are found by machine, not complaint.
The three bodies restated the position in June 2026, adding a warning against promoting pipeline medicines that do not yet hold a licence, including waiting lists for them, and newly licensed oral GLP-1 products. The April 2026 review shows what enforcement teams are seeing: pharmacy websites naming prescription-only medicines (POMs) alongside discount codes, paid influencer promotion and even engagement in online forums to promote pharmacies with weak verification. The compliant model has not changed: advertise the service and the condition pathway, never the medicine. What has changed is the probability of being caught, and the fact that an advertising breach now reaches your pharmacy regulator as well as the ASA.
What do GPhC inspectors ask for in 2026?
Inspectors ask for record-level evidence, not policies. The review's actions for improvement read as a literal inspection agenda, and the pattern across all of them is the shift from "show me your SOP" to "show me this patient". Expect to produce, for individual supplies:
- The documented risk assessment for the service and the date it was last reviewed
- The due diligence file on any third-party prescribing service, including confirmation of UK registration and adherence to UK prescribing guidance
- The consultation record showing how BMI and medical history were independently verified for that person
- The clinical rationale for each repeat supply and any dose change
- Records of refusals, with reasons
- Audit records showing prescribing is monitored by a suitably qualified person
- The delivery risk assessment covering packaging, tracking and cold chain
The third-party prescriber file deserves emphasis because it recurs across the review, the February 2025 guidance and the regulator's 2025 letters to registrants about pharmacies working with prescribing services based outside the UK without risk assessment. If your pharmacy dispenses against a platform's prescriptions, you are expected to hold evidence that the platform's clinical governance is real, current and compatible with UK guidance, and to be able to produce it on the day.
"The GPhC's position is settled: you can outsource prescribing, you cannot outsource assurance."
What this means if you run or are building an online pharmacy
The practical conclusion is that the April 2026 review is a build specification, and pharmacies that treat it that way will pass the inspections that others fail. Every failure pattern in the data is preventable with infrastructure: risk assessments with review dates, consultation records structured to capture verification evidence, prescriber due diligence files, supply-level audit trails, delivery risk assessments and marketing sign-off. None of it requires heroics. All of it requires systems that generate the evidence as a by-product of doing the work, because retrofitting records after an inspection notice arrives convinces nobody.
The direction of travel is more scrutiny, not less. The Department of Health and Social Care launched a UK-wide call for evidence on private prescribing in August 2025, distance selling pharmacies lost the ability to deliver face-to-face services from their premises from October 2025, and the GPhC's disqualification policy lands in summer 2026. The regulators are also converging: GPhC, MHRA and ASA on advertising, GPhC and the General Medical Council on prescriber accountability, and the GPhC sharing its review findings with government and other regulators as standard. A pharmacy built to satisfy one regulator's paperwork will find the same file examined by three.
Key takeaways
- Concerns to the GPhC more than doubled in five years to 6,202 in 2024/25, and 17% of the record 2,159 concerns in Q2 2025/26 related to online settings.
- Online pharmacies failed inspection at roughly three times the rate of community pharmacies in 2025, with 37% of published online inspection reports not meeting all standards.
- The GPhC's April 2026 review recorded 1,307 weight management concerns over two years, rising fivefold from 208 in 2024 to 1,099 in 2025.
- Inspection failures concentrate on three standards: risk management (46% of failed standards), safe service delivery (28%) and record keeping (15%).
- The GPhC has taken enforcement action against at least 73 online pharmacies and confirmed action against 18 specifically for weight management prescribing failures.
- Superintendent pharmacists have been jointly responsible with owners for meeting the distance selling guidance since February 2025.
- Advertising POMs is policed jointly by CAP, the MHRA and the GPhC under the September 2025 enforcement notice, with AI-based monitoring finding breaches without complaints.
FAQs
Evidence should be a by-product.
Most failures in the GPhC's review are records problems before they are clinical ones. Dataforge PMR generates the evidence as the service runs: structured clinical assessments, consultation records, prescriber workflow logs and supply-level audit trails designed around the February 2025 distance selling guidance. See it against your own workflow in 30 minutes.
Book a demo