Can private prescriptions go electronic?

What does the law say about electronic private prescriptions?

It allows them, on three conditions. The starting point is regulation 217 of the Human Medicines Regulations 2012, which sets the requirements for any prescription for a prescription only medicine. Condition A is that the prescription "is signed in ink by the appropriate practitioner giving it". Condition B is that it is "written in ink or otherwise so as to be indelible". Condition C lists the particulars: the prescriber's address, the date, the kind of prescriber, the patient's name and address, and the patient's age if under 12. Condition D limits dispensing to six months from the date the prescription was signed. Condition E limits repeatable prescriptions that do not state a number of repeats to two supplies, or six for oral contraceptives.

Regulation 219, headed "Electronic prescriptions", then removes the pen. It says a prescription only medicine is also lawfully supplied where "conditions A and B in regulation 217 are not met". In their place the electronic conditions must be met, along with "conditions C to E in regulation 217". Regulation 219(4) lists three electronic conditions. The prescription is "created in electronic form". It is "signed with an advanced electronic signature". And it is "sent to the person by whom it is dispensed" as "an electronic communication (whether or not through one or more intermediaries)". For a Schedule 2 or 3 controlled drug there is a fourth: it must go "via the electronic prescription service". The table sets the two routes side by side.

Nothing in regulation 219 mentions the NHS except for controlled drugs. A private prescriber's electronic prescription for an antibiotic, a statin or a weight-loss injection is lawful on the three conditions alone. The regulations apply across the UK, and regulation 219 refers to both the Misuse of Drugs Regulations 2001 and their Northern Ireland equivalent. Our guide to setting up a private prescription workflow covers the steps either side of the prescription itself.

What counts as an advanced electronic signature?

One that passes four tests. Regulation 219(5) borrows the definition from Article 3(11) of Regulation (EU) No 910/2014, the eIDAS Regulation, which the UK kept after leaving the EU. Article 3(11) points to Article 26, which lists the requirements. The signature must be "uniquely linked to the signatory". It must be "capable of identifying the signatory". It must be "created using electronic signature creation data that the signatory can, with a high level of confidence, use under his sole control". And it must be "linked to the data signed therewith in such a way that any subsequent change in the data is detectable".

The fourth test does most of the work in a pharmacy. A prescription whose signature breaks if a single character is altered cannot be quietly edited to add a strength, a quantity or a repeat. That is the property a pharmacist needs, and it is the one an image of a signature never has. The table applies the tests to what actually arrives.

The same eIDAS tests govern e-signatures on consent forms and contracts, which our guide to electronic signatures for pharmacy consent explains. The difference is that regulation 219 makes the advanced standard mandatory for prescriptions, where consent forms can often rest on a simpler signature.

Which medicines cannot be prescribed electronically in private practice?

Schedule 2 and 3 controlled drugs. Regulation 219(4)(c)(ii) requires an electronic prescription for a drug in Schedule 2 or 3 to the Misuse of Drugs Regulations 2001 to be sent "via the electronic prescription service". Regulation 219(5) defines that service as "the service managed by NHS England". It carries NHS prescriptions between NHS prescribers and NHS contractors, and a private prescriber cannot put a private prescription into it. The effect is that a private prescription for morphine, methylphenidate, lisdexamfetamine, tramadol, pregabalin or gabapentin must be on paper.

The Misuse of Drugs Regulations add the paper rules. Regulation 15 requires a Schedule 2 or 3 prescription to be indelible and dated. It must be "signed by the person issuing it with his usual signature or be prescribed on an electronic prescription form". Regulation 15(4) ties that form to the NHS pharmaceutical services regulations, so again the electronic route is EPS only. For a private prescription, regulation 15(1)(aa) and (ab) require the standard form supplied through NHS England and the "prescriber identification number of the person issuing it". Regulation 15(1)(f) requires the dose, form, strength and total quantity "in both words and figures". Schedule 4 and 5 controlled drugs, including diazepam, zopiclone and testosterone, sit outside regulation 15 and can go electronic under regulation 219 like any other medicine.

This is the point most often got wrong in ADHD and pain services, where the medicines are Schedule 2 and the patients are remote. A clinic that emails a signed PDF for methylphenidate has not issued a valid prescription, however good its signature technology. Our guides to handling private ADHD prescriptions and to electronic controlled drug registers cover the paper and record-keeping consequences.

Is there a private version of EPS?

No. The Electronic Prescription Service is a single national system for NHS prescriptions in England, and regulation 219 names it as NHS England's service. Nothing equivalent exists for private prescribing, and no statutory scheme requires one. Private prescriptions therefore travel by whatever electronic route the prescriber and the pharmacy choose, and the pharmacy carries the verification that a national system would otherwise do centrally.

In practice the market has filled part of the gap. Commercial prescribing platforms now issue private prescriptions signed with an advanced electronic signature and send them to a pharmacy the patient or prescriber selects. A good platform gives the pharmacy a way to confirm the signature, marks the prescription as dispensed so it cannot be presented twice, and keeps an audit trail. An emailed PDF offers none of that. The law treats both as an "electronic communication", so the difference is operational risk, not legality. Judge a platform on the four eIDAS tests and on whether it prevents double dispensing.

Can you dispense a PDF or a scanned prescription?

A PDF, sometimes; a scan, no. Start with the scan. A paper prescription meets regulation 217 because it is signed in ink on an indelible document. A scan or a photograph of it is a copy. It carries neither an ink signature nor an advanced electronic signature, so it satisfies neither regulation 217 nor regulation 219. The original must reach the pharmacy before the supply is made. Emergency supply rules are a separate exception with their own conditions and are not a workaround for routine private dispensing.

A PDF can be a lawful electronic prescription if the file itself meets regulation 219. That means it was created electronically, it carries an advanced electronic signature and it was sent to the pharmacy as an electronic communication. Regulation 219(4)(c)(i) allows the communication to pass "through one or more intermediaries", so a prescription that reaches you through a platform or a clinic's system is fine. A patient forwarding a file is the harder case. The regulation does not exclude it, but you then have no way of knowing whether the same file went to three other pharmacies. Treat a patient-forwarded PDF as needing a call to the prescriber before supply, and record that call.

One PDF is never valid: a private prescription for a Schedule 2 or 3 controlled drug. No signature technology cures the requirement to send it via EPS, and the Misuse of Drugs Regulations require the paper form and the prescriber identification number. A pharmacy that dispenses against one has supplied a controlled drug without a valid prescription.

How do you verify an electronic private prescription?

In the same order every time, and write down what you did. The GPhC's February 2025 guidance for pharmacies providing services at a distance sets the expectation. Pharmacies should audit their "systems and processes for receiving prescriptions, including electronic prescription services". They should also keep records of the key points behind every decision to supply. The checklist below turns regulations 217 and 219 into a dispensing procedure.

What records must you keep?

The same as for a paper private prescription, held electronically. Regulation 253 of the Human Medicines Regulations covers every sale or supply of a prescription only medicine from a retail pharmacy business. The pharmacy must make "an entry in a written or computerised record" for each one. Health prescriptions and oral contraceptives are excepted, and so are supplies recorded in the controlled drugs register. Regulation 253(5)(b) then requires the pharmacy to preserve the prescription itself for two years. The period runs from the date of supply, or from the final supply for a repeatable prescription.

For an electronic prescription that means keeping the signed file, not a printout. A printout loses the signature's tamper evidence and is, in effect, a copy. Store the original file against the patient record with the POM register entry, and make sure a change of PMR does not strand it. Our guide to what records an online pharmacy must keep sets out the retention periods for everything else in the chain.

What is still missing?

A private route for controlled drugs, and any central check against double dispensing. Both would need legislation, not software. An electronic private prescription for a Schedule 2 or 3 drug is blocked by regulation 219(4)(c)(ii) and by regulation 15 of the Misuse of Drugs Regulations. As at 4 March 2026 neither provision has been amended to open a private electronic route, and any change would come as a statutory instrument amending both sets of regulations. Until then, ADHD, pain and palliative private prescribing stays on paper.

The double-dispensing gap is a market problem. EPS solves it for NHS prescriptions by holding one copy of each prescription on a national system. Private electronic prescriptions have no such anchor, so the same signed file can be sent to several pharmacies unless the issuing platform tracks it. Choose platforms that do, and treat prescriptions from any other source as unverified until the prescriber confirms them. The legal position is settled. The operational discipline is where pharmacies differ.

Key takeaways

FAQs