Meeting the new guidance for online pharmacies – your questions answered

We know that pharmacy owners and professionals have a number of questions about the new guidance.

Find out the answers to some of the most frequently asked questions below:

How do pharmacies make sure that a person only receives medicines that are clinically appropriate?

What are online pharmacies expected to do to check someone's identity?

Can people still choose their medicine before a consultation online? 

Will a person be able to get multiple orders to the same address? 

Can online pharmacies work with prescribing services based outside the UK?

Can online pharmacies send medicines to people in other countries? 

Will you take enforcement action against pharmacies not following the guidance? 

What advice should people who are concerned about accessing their prescription medicines online receive?


How do pharmacies make sure that a person only receives medicines that are clinically appropriate?

Our guidance puts in place extra safeguards to help make sure that the person only receive medicines that are clinically appropriate for them. This includes medicines liable to abuse, overuse or misuse, or when there is a risk of addiction and ongoing monitoring is important.

These safeguards include making sure the prescriber proactively shares all relevant information about the prescription with the person’s regular prescriber after seeking the person’s consent.

In the case of medicines liable to abuse, overuse or misuse, or where risk of addiction and ongoing monitoring is important, the pharmacy owner would confirm before supplying against the prescription that the prescriber has contacted the person's regular prescriber who has confirmed that the prescription is appropriate, and that monitoring is in place.

In cases where the person does not have a regular prescriber such as a GP, or if there is no consent to share information the prescriber must decide whether or not to prescribe. They will need to think about the person's best intrests and make a risk-based assessment about whether they can prescribe safely, taking into account whether the person would be at risk of death or serious harm if they are also getting medicines from other sources. The prescriber must make a clear record setting out their justification for prescribing, or not prescribing. 


What are online pharmacies expected to do to check someone's identity?

We expect all online pharmacies to have systems in place to carry out an identity check appropriate for the medicine being supplied. 

During a risk assessment the pharmacy owner would gather evidence about the risks for each individual service, medicine and medical device that they provide at a distance, including on the internet, before providing that service. Through this careful and thorough look at the individual medicine, they should determine what level of identity checking will be appropriate.

We do not specify a particular technical solution for checking a person's identity. Instead online pharmacy owners should have a robust process in place to carry out checks appropriate to the medication they are supplying.

There are a number of different ways to check a person's identity. This can include using an external credit reference database, or a specific identity-checking service using photo ID verification.

If pharmacy owners work with an online prescribing service or prescriber, they should also have evidence assure themselves that the prescriber has robust processes to check the identity of the person, to make sure the medicines prescribed go to the right person. 

For example, the pharmacy owner may check that the online prescribing service or prescriber is keeping to the Identity Verification and Authentication Standard for Digital Health and Care Services, which provides a consistent approach to identity checking across online digital health and care services. 


Can a person still choose their medicine before a consultation online? 

We know from our own regulatory tools and from external sources that this is a key risk for patients.

As set out in our guidance, we expect pharmacy owners to make sure that their website and the websites of companies they work with are arranged so that a person cannot choose a prescription-only medicine (POM) before there has been an appropriate consultation with a prescriber.  

Our guidance reflects what is set out by the MHRA’s Blue Guide on the advertising and promotion of medicines. However, it also sets an additional requirement for online pharmacies to carry out an appropriate consultation before a POM  can be chosen. It also stipulates that online pharmacies should make clear that the decisions about treatment are for both the prescriber and the person to consider together during the consultation, in line with the MHRA’s guidance. 

We have published a joint statement with the MHRA on our approach to our respective roles in regulating the advertising and supply of medicines from online pharmacies.


Will a person be able to get multiple orders to the same address? 

We are clear in the guidance that owners must make sure that there are robust processes in place within the online pharmacy to:

  • carry out identity checks on people obtaining medicines, appropriate for medicines being supplied
  • identify requests for medicines that are inappropriate, including multiple orders to the same address, a person using multiple accounts to make orders or orders using the same payment details. 

Can online pharmacies work with prescribing services based outside the UK?

In the guidance we say that working with prescribers who are not appropriately registered with the relevant UK professional regulator, and with prescribing services not based in the UK, could create significant extra risks for patients and the public.

If pharmacy owners do decide to work with prescribers or prescribing services operating outside the UK, they need to make sure that:

  • they successfully manage the extra risks and that the prescriber is working within national prescribing guidelines for the UK.
  • the prescriber is registered in their home country where the prescription is issued and can lawfully issue prescriptions online to people in the UK
  • they have sufficent indemnity in place to cover their service that uses prescribers or prescribing services based outside the UK, and pharmacy staff supplying medicines against prescriptions issued by these prescribers or prescribing services
  • the prescriber is working within national prescribing guidelines for the UK 

Our inspectors will be looking in detail at how the pharmacy is managing potential risks during inspections and we will take action where necessary. 


Can online pharmacies send medicines to people in other countries? 

Pharmacy owners are expected to follow the guidance at all times, including when supplying to people outside the UK.

We say in the guidance that if pharmacies sell or supply medicines to people in other countries they must keep to any other laws that apply. Countries have different restrictions and some do not allow the online supply of medicines at all.

It is the owner’s responsibility to make sure the medicine they supply has the marketing authorisation needed for it in the country of destination. 


Will you take enforcement action against pharmacies not following the guidance?

We are very clear that not following this guidance, or not taking the appropriate steps to achieve a desired outcome under our standards, could mean that the pharmacy fails to meet one or more of the standards for registered pharmacies. 
This could result in our taking enforcement action.


What advice should people who are concerned about accessing their prescription medicines online receive?

Our guidance explains the requirements pharmacy owners must meet in order to make sure medicines are managed and delivered safely and effectively. This includes having appropriate safeguards in place for certain categories of medicines to make sure they are clinically appropriate before being supplied.

Our guidance requires pharmacy owners to ensure the person seeking care has provided the contact details of their regular prescriber such as a GP, and their consent to contact them about the prescription. 

For medicines which are liable to abuse, overuse or misuse, or when there is a risk of addiction and ongoing monitoring is important, pharmacy owners need to confirm before supplying against the prescription that the prescriber has contacted the person's regular prescriber who has confirmed that appropriate monitoring is in place.

If there are circumstances where the person does not have a regular prescriber such as a GP, or if there is no consent to share information,  the prescriber must then decide whether or not to prescribe. They will need to think about the person's best interests and make a risk-based assesment about whether they can prescribe safely, taking into accountwhether the person would be at risk of death or serious harm if they are getting medicines from other sources.

The prescriber must make a clear record setting out their justification for prescribing or nor prescribing.

We may take enforcement action against pharmacies not following this guidance -see the inspection section of the website for more information on our overall approach to support and encourage pharmacy owners to meet the standards for registered pharmacies, including enforcement action.