A surprising number of telehealth founders assume private prescriptions ride the same rails as the NHS — that they will "plug into EPS" and be done. They will not. EPS is an NHS system, private prescribing is a separate legal regime, and confusing the two produces a flow that either does not work or does not comply. This piece untangles the two and sets out what a lawful private electronic prescription actually is.

EPS is an NHS system — what that means for private operators

The Electronic Prescription Service is part of the NHS. It runs on the NHS Spine, uses the patient's NHS number and a nominated pharmacy, relies on the NHS dictionary of medicines and devices, and exists to move NHS prescriptions from prescriber to pharmacy electronically. It is not a general-purpose prescription network you can attach a private service to.

For a private telehealth operator that has one blunt consequence: your prescriptions do not, as a rule, travel through EPS. Private prescribing is a distinct legal and operational path, and your flow has to be designed for that path rather than borrowed from the NHS one.

Historically a private prescription meant paper and a wet-ink signature. What makes a paperless private prescription lawful today is the signature: the Human Medicines Regulations 2012 permit a prescription to be signed with an advanced electronic signature — a signature uniquely linked to and under the sole control of the signatory, capable of detecting later tampering. Meet that standard and an electronic private prescription is as valid as a paper one.

This is the legal keystone of remote prescribing, and it is worth stating precisely to your team and your auditors. "We do electronic prescriptions" is not the point; "our prescriptions carry an advanced electronic signature under the Human Medicines Regulations 2012" is. If a claim here needs certainty for your specific setup, have it confirmed in legal review.

What a token is and where it fits

"Token" is a word borrowed from the NHS world, where it refers to the barcode or printout that represents an EPS prescription. In a private flow the concept is different: the electronic prescription is transmitted directly from the prescriber's system to the dispensing pharmacy, with the advanced electronic signature attached, rather than being carried by the patient as a token.

The distinction matters when you talk to suppliers and pharmacies, because loose use of "token" causes real confusion about which system and which legal basis you are operating under. Be precise about whether you mean an NHS EPS token or a private electronic prescription — they are not the same object.

Controlled drugs change the rules

Controlled drugs sit under additional legislation, and Schedule 2 and 3 CDs carry stricter requirements for how a private prescription is written, transmitted and dispensed — including specific form and record requirements, and constraints on electronic handling. You cannot treat a CD prescription like an ordinary one, and the penalties for getting it wrong are not administrative.

If your service touches controlled drugs, the CD rules drive the design of the prescribing flow, not the other way round. Our guide to controlled drugs and remote prescribing covers the specific obligations, and anything uncertain here should go through legal and clinical governance before launch.

Key takeaway

The single most useful thing a telehealth founder can internalise: EPS is NHS-only, and private prescribing is a separate legal regime. What makes a paperless private prescription lawful is an advanced electronic signature under the Human Medicines Regulations 2012 — not access to EPS.

The dispensing hand-off

A prescription is only useful once a registered pharmacy can dispense against it. The hand-off has to carry everything the pharmacy needs to verify legitimacy: prescriber identity and credentials, the signed prescription, patient details, and an audit trail linking the consultation to the prescription to the dispense. A pharmacy that cannot verify a prescription should not — and a good one will not — dispense it.

This is where your choice of dispensing partner shapes the whole flow. Our guide to finding a UK dispensing pharmacy partner covers what to look for, and identity is a piece of the same puzzle — see how UK telehealth services verify patient identity.

Designing a prescribing flow that survives audit

Whatever tooling you use, the test is whether the flow survives audit. That means an unbroken chain: who consulted the patient, what was assessed, who prescribed, that the prescriber was authorised, that the signature met the advanced-electronic-signature standard, which pharmacy dispensed, and when. Each link recorded, each link verifiable.

Build for that from the start. Retrofitting an audit trail onto a flow that was designed for speed is painful and rarely complete, and it is exactly the kind of gap an inspection surfaces. Our guide to records and retention for UK telehealth covers what to keep and for how long.

Retrofitting an audit trail onto a prescribing flow designed for speed is painful and rarely complete. Build the chain — consultation, prescriber, signature, dispense — to be verifiable from the first patient.

How PExpo handles the prescribing layer

PExpo runs the regulated prescribing and dispensing layer — prescriber governance, compliant electronic prescriptions, registered dispensing and the audit trail that ties it together — so a brand does not have to assemble the legal plumbing itself. The advanced-electronic-signature standard, the CD handling and the dispensing hand-off are built in.

You get a prescribing flow designed to be auditable rather than one improvised for launch. See our integrations for how it connects, or the brand model for the scope.

Get the EPS-versus-private distinction right and the rest of the prescribing flow falls into place: an advanced electronic signature for legality, tighter handling for controlled drugs, a verifiable dispensing hand-off, and an audit trail that holds. See our guides to controlled drugs and remote prescribing and choosing a dispensing partner, or our integrations page.

Frequently asked questions

Can private telehealth prescriptions use the NHS EPS?

As a rule, no. EPS is an NHS system for NHS prescriptions, built around the NHS number and a nominated pharmacy. Private prescriptions follow a separate legal path and are transmitted directly to a dispensing pharmacy rather than through EPS.

What makes an electronic private prescription legal?

An advanced electronic signature under the Human Medicines Regulations 2012 — one uniquely linked to and under the sole control of the prescriber, capable of detecting later changes. That is what allows a paperless private prescription to be as valid as a signed paper one.

Are controlled drugs handled differently?

Yes. Schedule 2 and 3 controlled drugs sit under additional legislation with stricter requirements for how prescriptions are written, transmitted and dispensed. The CD rules should drive the design of the prescribing flow, and anything uncertain should go through legal review.