Online pharmacies in the UK are under more regulatory scrutiny now than at any point in the last decade. Since January 2025, the General Pharmaceutical Council (GPhC) has inspected over a hundred distance-selling pharmacies and found that 37% did not meet all required standards. For context, only 12% of physical community pharmacies failed their inspections over the same period. That gap tells you something about where the risks sit in this business.
Disclosure: Some links on this page are affiliate links. If you make a purchase through them, Britwealth may earn a commission at no extra cost to you. We only include products and services that are relevant to the topic.
This article is general information only and does not constitute professional advice. For your specific situation, consult a qualified professional.
Those figures matter because the regulatory ground is shifting fast. From 23 June 2025, NHS England stopped accepting new applications for Distance Selling Pharmacy (DSP) contracts. The Department of Health and Social Care also launched a UK-wide call for evidence on private prescribing in August 2025, which will shape how online pharmacies operate going forward. If you are thinking about starting a business in a regulated sector like pharmacy, the window for certain models is closing, and the compliance bar is rising. Here’s what you actually need to know.
If you are new to this space, the first term you need to understand is Distance Selling Pharmacy.
What I tend to notice is that people assume an online pharmacy is a lighter regulatory lift than a physical one. The inspection data suggests the opposite is true. Building a compliant business in a regulated market means understanding that the digital model brings its own layer of obligations that physical pharmacies do not face.
What happens when compliance falls short
The most immediate consequence of failing GPhC standards is a statutory inspection report that is published online. That report stays visible and can affect your reputation, your ability to secure NHS contracts, and your relationship with suppliers. Between January and October 2025, the GPhC published 118 inspection reports for distance-selling pharmacies. 44 of those pharmacies did not meet all standards. That is a 37% failure rate.
Beyond the reputational hit, there are financial consequences. If the GPhC finds that your pharmacy poses a risk to patient safety, it can impose conditions on your registration, suspend it, or remove it entirely. Without registration, you cannot legally operate. You also lose the ability to dispense NHS prescriptions, which for most pharmacy businesses is the primary revenue stream.
There is also a less visible cost: working capital tied up in compliance gaps. If your clinical governance framework is incomplete, your standard operating procedures are not signed off, or your identity verification process is weak, you may need to pause operations, rework systems, and pay for re-inspection. The opportunity cost of a delayed launch can easily run into tens of thousands of pounds. For a business that may already be carrying £80,000 to £250,000 in fit-out costs, that is a significant risk.
Where online pharmacy businesses get it wrong
Prescribing outside scope of competence
It is surprisingly common for online pharmacies to define their formulary after launch rather than before. The GPhC requires that you only prescribe medicines that fall within the clinical competence of your prescribers. If you are working with pharmacist independent prescribers, they must have completed a GPhC-accredited programme — typically 6–12 months part-time — and have at least two years of post-registration experience. Over 16,000 pharmacist independent prescribers were registered in Great Britain as of 2024, but not all of them are competent to prescribe every category of medicine. If your platform offers weight-management drugs or antimicrobials without a proper clinical assessment, you are exposing yourself to enforcement action.
Weak identity verification processes
The GPhC requires online pharmacies to have robust identity checks appropriate to the medicine being supplied. For high-risk medicines — those liable to misuse, antimicrobials, or medicines requiring ongoing monitoring — a simple form submission is not enough. You need two-way communication between the patient and prescriber, and you may need to access clinical records or contact the patient’s GP. The GPhC guidance on providing services online is explicit: prescribers must independently verify information provided by the patient, not rely on questionnaires alone. The mistake here is treating identity verification as a checkbox rather than a clinical process.
Inadequate clinical governance framework
A clinical governance framework is mandatory, and it must be proportionate to the services you offer. That means having standard operating procedures for every stage of the patient journey, a clinical audit programme, an incident reporting system, a patient feedback mechanism, a safeguarding policy, and a data protection impact assessment. What I tend to notice is that businesses put together a folder of SOPs and call it governance. The GPhC inspects whether those procedures are actually followed, not just whether they exist. If you cannot demonstrate that your team is using the SOPs in practice, the inspection will flag it. If you need help structuring your compliance documentation, a business law service can help review contracts and regulatory frameworks before you submit them.
Working with non-UK prescribers without proper risk assessment
The GPhC has issued multiple warnings in 2025 about pharmacies working with online prescribing services based outside the UK. The regulator sent letters to pharmacists and pharmacy owners in April and August 2025 specifically about this issue. If you use non-UK prescribers, you must have a robust risk assessment in place, ensure the prescribers are registered in their country and lawfully able to issue prescriptions to UK patients, and carry sufficient indemnity insurance. The risk is that a non-UK prescriber may not be subject to the same clinical governance standards, and you as the pharmacy owner are ultimately responsible for patient safety.
How to register and set up an online pharmacy in the UK
Choose your business structure and register with HMRC
You do not need to be a pharmacist to own a pharmacy in Great Britain, but a registered pharmacist must oversee dispensing operations. Most new online pharmacy businesses operate as limited companies for liability protection. You must register with Companies House (if you choose a limited company) and with HMRC for tax purposes. You also need to register with the Information Commissioner’s Office (ICO) for data protection, since you will be handling patient health data.
Register your premises with the GPhC
Even if your pharmacy is entirely online, you need a registered physical address. It does not need to be a high-street location — an office or workspace is acceptable — but it must meet safety, security, IT, and storage standards. The GPhC premises registration fee for 2024/25 is £261, with the same amount due annually as a retention fee. Processing takes 30 to 60 working days, and complex cases take longer. You cannot legally operate until registration is approved, so factor this timeline into your launch plan.
Appoint a Responsible Pharmacist and Superintendent
A Responsible Pharmacist must be in charge at all times the pharmacy is open for operations. If your business is a body corporate (a limited company), you must also appoint a Superintendent Pharmacist who has overall responsibility for the pharmacy’s compliance. In a single-site operation, the Responsible Pharmacist and Superintendent can be the same person. Both must be GPhC-registered and hold current practising certificates without restricting conditions. This is a non-negotiable requirement before you can open.
Choose your service model and digital platform
The main models are dispensing only, prescribing plus dispensing, prescribing only, and hybrid (physical pharmacy combined with online consultations). The prescribing-only model has the lowest capital requirement because you do not need a dispensary, stock holding, or delivery infrastructure. Your choice of digital platform needs to handle patient registration, identity verification, clinical consultation workflows, prescription generation, and secure clinical records. Some platforms charge per prescription, while others, like RxSure, offer flat-rate pricing at £199/month.
→ Scroll right to see all columns
| Service Model | Capital Requirement | Key Requirements | GPhC Complexity |
|---|---|---|---|
| Prescribing only | Lowest — no dispensary or stock | Independent prescriber qualification, digital platform | Moderate |
| Prescribing + dispensing | High — dispensary, stock, delivery | Dispensary fit-out, responsible pharmacist, stock control | High |
| Dispensing only | Medium — dispensary and stock | NHS contract (DSP or physical), premises, RP | High |
| Hybrid (physical + online) | Highest — premises + online platform | Physical premises, DSP or NHS contract, dual compliance | Very high |
Set up clinical governance and go-live checklist
Before you see your first patient, you need a complete set of standard operating procedures covering the entire patient journey, a clinical audit programme, an incident reporting system, a patient feedback mechanism, a safeguarding policy, and a data protection impact assessment. Your website must display your GPhC registration number, the registered pharmacy name and address, the EU common logo linking to the GPhC register, the superintendent and responsible pharmacist names, contact details with staffed hours, a complaints procedure, and a cookie consent mechanism. A business VPN can help secure remote access to patient data and clinical systems as part of your data protection setup.
Understand the DSP ban and future regulatory changes
This is the emerging-phase angle that changes the planning horizon. From 23 June 2025, NHS England stopped accepting new applications for Distance Selling Pharmacy contracts. If you are planning an online pharmacy that dispenses NHS prescriptions, you now need to either buy an existing DSP contract or operate entirely on a private basis. The DHSC also launched a UK-wide call for evidence on private prescribing on 12 August 2025, which closes on 4 November 2025. That call covers prescriptions written by EEA and Switzerland-registered prescribers, private prescriptions by UK prescribers, and medicines accessed via Patient Group Directions outside the NHS. The results of that consultation will likely lead to further regulation.
Frequently asked questions
Can I start an online pharmacy without being a pharmacist? ▾
Is the NHS DSP contract freeze permanent? ▾
What is the difference between a Responsible Pharmacist and a Superintendent Pharmacist? ▾
Do I need premises registration if my pharmacy is entirely online? ▾
How long does GPhC premises registration take? ▾
What happens if my pharmacy fails a GPhC inspection? ▾
The regulatory window is narrowing — plan accordingly
The most consequential change in this sector is not a single rule but the direction of travel. The GPhC is inspecting online pharmacies more frequently, publishing results publicly, and applying standards that are stricter than those for physical pharmacies. The NHS DSP contract freeze and the DHSC call for evidence on private prescribing both point toward tighter regulation, not looser. If you are serious about starting an online pharmacy, the window to do so on favourable terms is narrowing, and the cost of getting compliance wrong is higher than it has ever been. That does not mean the opportunity is gone — it means the businesses that succeed will be the ones that treat regulation as a design constraint from day one, not an afterthought.
Remember: this article is general information only. For advice on your specific situation, speak to a qualified professional.
If this was useful, you might also want to read a beginner’s guide to starting a health food store in the UK.
Sources and Further Reading
UK’s untapped markets — 5 business niches ripe for disruption — Explores regulated service sectors where compliance creates a barrier to entry and opportunity for well-prepared founders.
Brexit-proof business ideas for UK entrepreneurs — Looks at domestic-focused businesses that are less exposed to international regulatory shifts, relevant context for pharmacy planning.
General Pharmaceutical Council (2025). Providing pharmacy services online. 🔗
RxSure (2025). How to start an online pharmacy in the UK. 🔗
Pharmacies.org (2026). How to open a pharmacy in the UK — complete guide. 🔗
CMS Law (2025). Continued government and regulatory scrutiny of online pharmacies. 🔗
