Online prescribing has moved from being a relatively niche part of healthcare to an increasingly established route through which patients access treatment.
That change brings clear benefits. Patients can seek treatment discreetly, access clinicians without travelling, and complete parts of a consultation at a time that suits them. For conditions where embarrassment, inconvenience or difficulty accessing traditional services can delay treatment, digital healthcare has the potential to improve access considerably.
But convenience cannot come at the expense of clinical governance.
The same fundamental responsibilities apply whether a prescription is issued following a consultation in a clinic or through a digital service. The prescriber still needs enough reliable information to decide whether treatment is appropriate, contraindications need to be identified, interactions considered, and patients need appropriate counselling and follow-up.
The General Pharmaceutical Council (GPhC) is clear that the same laws apply to pharmacy services whether they are delivered face-to-face, at a distance or online. Its guidance also makes clear that, for higher risk categories such as medicines used for weight management, medicines liable to misuse and those requiring ongoing monitoring, prescribing decisions should not be based on an online questionnaire alone. Where appropriate, information needs to be independently verified through measures such as two-way communication, clinical records or contact with another healthcare professional.
That principle is difficult to argue with.
The more interesting question is how we build digital services that meet those requirements without creating unnecessary barriers to legitimate healthcare.
Regulation should form the foundations of the service
Regulation is sometimes discussed as though it is an obstacle that digital providers need to work around.
I believe that is the wrong starting point.
Requirements around identity, clinical verification, prescribing, record keeping and safeguarding exist because each addresses a potential patient-safety risk.
Rather than asking how a digital provider can minimise those requirements, the better question is how it can design its systems so that complying with them is straightforward for both clinicians and patients.
A good online pathway should make safe behaviour the easiest behaviour.
If identity needs to be verified, the technology should make that process quick and intuitive. If a particular medicine requires additional evidence or monitoring, that should be incorporated naturally into the consultation pathway. If particular answers require further clinical assessment, the system should automatically highlight them to the prescriber rather than relying on somebody remembering to check.
Technology should therefore be used to embed governance, not bypass it.
But more questions do not automatically mean safer prescribing
There is another side to this debate.
It is easy to respond to regulatory scrutiny by continually adding questions, warnings and verification steps to an online consultation.
Eventually, however, there is a danger of confusing the volume of information collected with the quality of the clinical assessment.
A 50-question consultation is not necessarily safer than a 25-question consultation.
Every question should have a purpose. What decision does the answer influence? Does it identify a contraindication? Does it alter the treatment choice? Does it identify somebody who requires further assessment?
If a question makes no meaningful contribution to the prescribing decision or another governance requirement, providers should consider why they are asking it.
This matters because excessive friction has consequences too.
Patients have choices. If regulated healthcare becomes unnecessarily difficult to navigate, some will abandon the process. Most may simply decide not to proceed, but others may seek medicines from less appropriate sources.
That is particularly concerning when prescription medicines can be found through websites, messaging services and social-media accounts operating outside normal healthcare regulation.
The Medicines and Healthcare products Regulatory Agency already provides a mechanism for reporting suspicious online medicine sellers, including sellers identified through social-media accounts, and warns that fake or unauthorised products sold online can have serious health consequences.
We therefore need to be careful not to create a situation where legitimate providers make accessing regulated healthcare disproportionately difficult while an unregulated seller can offer the same apparent treatment following little more than a direct message and a payment.
That does not mean reducing clinical standards. It means designing better systems around them.
Private prescribers are being asked to verify information without always being given the tools to do so
One of the most significant practical issues is access to NHS clinical information.
The Summary Care Record (SCR) contains important information derived from GP records, including current medicines, allergies and previous adverse reactions. NHS England describes access to this information as helping clinicians provide safer care and reduce prescribing errors.
It is precisely the type of information that can be valuable to a clinician prescribing remotely.
Yet access across healthcare remains inconsistent.
Current NHS England guidance lists private pharmacy, private GP providers, private hospitals and privately funded healthcare services among settings where SCR access is either under discussion or subject to proof-of-concept work rather than approved for general rollout.
This creates an uncomfortable position for some private online prescribers.
A patient may positively identify themselves, give permission for their medical information to be accessed and actively want the prescriber to check their record. Yet patient permission alone does not give a provider technical access to the SCR.
Depending on the service and its NHS infrastructure, the clinician may instead need to rely on information supplied by the patient, request additional evidence, or contact the patient’s GP or another healthcare professional.
All of those routes have a place, but none provides the same immediate access to verified information.
At the same time, regulatory expectations are moving towards greater independent verification of information supplied during online consultations.
These two objectives should ultimately be aligned.
If we expect clinicians to verify information wherever reasonably possible, responsible regulated providers should also have an appropriate, secure and auditable mechanism through which they can access the information necessary to do so, with the patient’s permission and appropriate safeguards.
Work is clearly happening around interoperability. NHS England’s planned Single Patient Record is intended to bring together health information in one secure location, while existing initiatives such as GP Connect continue to improve information sharing between parts of healthcare.
But digital prescribing has expanded quickly, and access to clinical information has not always moved at the same speed.
For patient safety, that gap deserves greater attention.
Clinical judgement still matters
Another risk in digital healthcare is assuming that every clinical decision can eventually be converted into a binary algorithm.
Clinical protocols are valuable. Structured pathways improve consistency and can prevent important information from being overlooked.
But they cannot anticipate every patient.
There will always be situations where information conflicts, circumstances fall just outside a protocol, or the clinician has a legitimate reason to take a different course of action.
The answer should not be to remove clinical judgement.
Instead, deviation should be exceptional, deliberate and documented.
Follow the regulation, professional guidance and your clinical protocols as your default position. If you believe there is a justified reason to depart from the normal process, document why.
That record should demonstrate what the clinician considered, the risks identified, why the alternative course was appropriate and what monitoring or follow-up was required.
Good governance is not about proving that every patient followed exactly the same pathway. It is about being able to demonstrate that every decision was safe, considered and defensible. Ultimately, there will be patients who need treatment but whose circumstances fall outside set pathways and protocols. Where they cannot be treated safely, the right outcome is to direct them to an appropriate care provider rather than simply decline, because a bare refusal may leave legitimate healthcare needs unmet and, in some cases, push them towards unregulated or black market sources.
Audit what actually happens, not simply what the policy says
Policies and standard operating procedures are important, but they only describe what an organisation intends to do.
Governance needs to establish what actually happens in practice.
Online providers should routinely audit prescribing decisions, verification processes, rejected consultations, repeat supplies, prescribing frequency, clinical documentation, complaints, adverse events and instances where clinicians have deviated from normal protocols.
Patterns matter.
If different prescribers are making substantially different decisions from the same information, that may indicate that a protocol needs clarification.
If patients repeatedly abandon a particular stage of a consultation, providers should ask whether that stage is clinically necessary and, if it is, whether it can be redesigned.
If a safety control exists in an SOP but is repeatedly missed in practice, the answer may be to build that control into the technology rather than simply retraining clinicians.
There is also significant value in external scrutiny.
Internal audit will always be necessary, but periodic review by somebody who has not designed or operated the service can expose assumptions that an internal team has stopped noticing.
Independent clinical or governance audit should therefore become an increasingly normal feature of mature digital healthcare organisations.
The objective should be safe access, not maximum friction
The debate about online prescribing can sometimes become overly binary.
On one side is the argument that digital services make medicines too easy to obtain. On the other is the argument that regulation prevents innovation.
Neither position is particularly helpful.
Patients should be able to access appropriate treatment conveniently, but convenience does not remove the need for clinical safeguards.
Equally, regulation should protect patients without creating processes whose complexity is disproportionate to the risk being managed.
Providers have a responsibility to meet the standards expected of them, verify information appropriately, maintain clinical oversight and continually audit their services.
But healthcare infrastructure also needs to evolve.
If the system expects private clinicians to make increasingly informed and independently verified prescribing decisions, those clinicians need appropriate routes to access relevant patient information when the patient has consented to it.
The future of online prescribing should therefore not be about weakening regulation.
It should be about making good regulation easier to comply with.
The best digital healthcare services will not be those that find ways around regulatory requirements. They will be the ones that build those requirements into their systems so effectively that safety and convenience stop being competing objectives.
Author Bio
