Medical Prescription & Electronic Signature 2026

Introduction: the digital prescription, a medical revolution governed by law

By 2026, electronic medical prescription is no longer an experimental option: it has become an operational reality for thousands of practitioners, clinics and hospital facilities in France. Driven by the widespread adoption of the Shared Medical Record (DMP), the growth of certified medical management software and increasing traceability requirements, the question of the legality of electronic signature on a medical prescription arises with particular urgency. This article reviews the applicable regulatory framework, required signature levels, legal risks to anticipate and best practices for deploying a compliant solution in medical practice or healthcare facility.

---

1. Legal framework for electronic medical prescriptions in France

1.1 The legal basis of the digital prescription

The medical prescription is a legal act in its own right. It engages the civil and criminal liability of the prescribing doctor, and its validity conditions the dispensing of the medicine by the pharmacist as well as reimbursement by the Health Insurance system. Long confined to paper support, the prescription can now be digitalised by relying on several fundamental texts:

• Article L. 1111-14 of the Public Health Code (CSP), introduced by the Ma Santé 2022 law, which recognises the use of the DMP as the support for shared electronic prescription.

• Article R. 5125-48 of the CSP, which requires that every prescription includes mandatory information (identity of the prescriber, date, name of the medicine, dosage, signature). Qualified electronic signature meets this requirement when associated with a certificate recognised by the ANS (French Health Digital Agency).

• Decree n° 2021-1048 of 4 August 2021 relating to electronic prescription, which clarifies the conditions under which a digitalised prescription can be dispensed and reimbursed.

• The Reference for Electronic Identification of Health Actors (RIAS), published by the ANS, which defines the levels of assurance required for authentication of health professionals in digital exchanges.

1.2 The central role of the DMP and the digital health space

Since the nationwide deployment of the Digital Health Space (ENS) and My Health Space, every patient benefits from a DMP automatically fed with information. Digitally signed electronic prescriptions can be integrated there, guaranteeing their accessibility for the patient, the pharmacist and other caregivers involved in the care pathway. This interoperability relies on secure exchange standards (HL7 FHIR, CDA R2) and on the certification of prescription software by the High Authority for Health (HAS) and the ANS.

1.3 Electronic prescriptions and reimbursement: the conditions of the Health Insurance system

The Health Insurance system (National Social Security Fund for Employees — CNAM) conditions the coverage of medicines prescribed electronically on several criteria: the use of certified LGO software (Prescription Management Software), electronic signature by the doctor with a high level of assurance (in accordance with the eIDAS regulation), and traceability of transmission. Non-compliance with these conditions exposes the professional to reimbursement refusals and CPAM inspection procedures.

---

2. Levels of electronic signature applicable to medical prescriptions

2.1 The three eIDAS levels and their applicability in healthcare

The eIDAS regulation no. 910/2014 and its evolution towards eIDAS 2.0 (progressively in force since 2024) distinguishes three levels of electronic signature: simple, advanced and qualified. In the context of medical prescriptions, the applicable level depends on the type of document and its use:

| Type of prescription | Recommended level | Justification | |---|---|---| | Prescription for non-controlled medicines | Advanced (AdES) | Strong authentication of prescriber, document integrity | | Prescription for controlled medicines | Qualified (QES) | Enhanced regulatory requirement, high criminal risk | | Work stoppage prescription (sick note) | Advanced to qualified | Depending on transmission platform (Ameli Pro) | | Hospitalisation report with prescriptions | Advanced | DMP traceability, legal archiving |

For secured prescriptions (controlled medicines, medicines with restricted prescription), only qualified electronic signature (QES), based on a certificate issued by a Qualified Trust Service Provider (QTSP) approved by the ANSSI, offers complete legal equivalence to handwritten signature under Article 1367 of the Civil Code.

2.2 The doctor's certificate and the CPx card

In France, the digital identity of health professionals is based on the CPx card (Healthcare Professional Card), issued by the ANS. This card contains a qualified electronic certificate enabling signature and strong authentication in healthcare information systems. The progressive deployment of the e-CPS (mobile version of the CPx) facilitates remote signature, particularly for telemedicine and prescriptions issued during video consultation.

Our comprehensive guide to electronic signature details the differences between these levels and their contractual implications.

2.3 Time-stamping and archiving: complementary obligations

A valid electronic medical prescription must not only be signed, but also time-stamped in a qualified manner (according to the ETSI EN 319 422 standard) and archived under conditions guaranteeing integrity and confidentiality for the entire legal retention period. For medical prescriptions, this period is at least 20 years (Article R. 1112-7 of the CSP for healthcare facilities). A certified digital safe-deposit box solution is therefore essential to comply with these requirements.

---

3. Telemedicine, remote prescription and specific challenges

3.1 Prescription in teleconsultation: framework and limitations

Since Decree n° 2018-788 of 13 September 2018 relating to telemedicine activities, medical prescription can be issued following a teleconsultation. However, significant restrictions remain: the prescription of medicines with restricted prescription (medicines reserved for hospital use, subject to initial hospital prescription) remains subject to specific rules, and the prescription of controlled medicines in teleconsultation is strictly regulated or even prohibited in certain cases.

Verification of the patient's identity before any teleconsultation is mandatory and conditions the legal validity of the electronic prescription issued. Solutions such as France Connect+ allow this requirement to be met.

3.2 Interoperability of electronic signature platforms in healthcare

Integration of an electronic signature solution into a digital healthcare environment requires compatibility with ANS references, particularly the General Security Reference (RGS) and the Healthcare Information Systems Interoperability Framework (CI-SIS). Medical software editors (Doctolib, Maiia, Synapse Médecine, etc.) must integrate compliant signature APIs to enable a seamless experience for the prescriber.

Certyneo offers documented REST API connectors, compatible with the main LGO software on the market, allowing you to insert the signature workflow directly into the prescriber's usual prescription interface. For more information about our sector-based approach, consult our dedicated page on electronic signature in healthcare.

3.3 GDPR and health data: enhanced obligations

Data contained in a medical prescription are health data, a special category of personal data under Article 9 of the GDPR (Regulation No. 2016/679). Their processing is subject to enhanced obligations: explicit legal basis (consent or necessity of care), processing register, systematic impact assessment (DPIA), mandatory hosting with a Certified Health Data Hoster HDS (certification issued by the ANS in accordance with Article L. 1111-8 of the CSP).

Recourse to an electronic signature solution that does not host prescription data on HDS-certified infrastructure exposes the healthcare facility to CNIL fines of up to 4% of global turnover or €20 million.

---

4. Deploying electronic signature in medical practice or healthcare facility: key steps

4.1 Prior audit and choice of signature level

Before any deployment, a document mapping audit is necessary: what types of prescriptions are issued? Which medicines? What is the frequency of controlled medicine prescription? This analysis determines the signature level to be deployed and the required certificates. A general practice will have different requirements from a hospital oncology department.

Our electronic signature ROI calculator allows you to estimate precisely the savings achievable by switching to full digitalisation.

4.2 Team training and change management

The success of a digitalisation project in healthcare depends 60% on human adoption, according to feedback from pilot facilities within the HOP'EN programme (Open Digital Hospital for Patients). Training doctors in the use of e-CPS, raising awareness of cybersecurity issues (phishing, medical identity theft) and implementing fallback procedures (in case of system unavailability) are essential prerequisites.

4.3 Technical integration and HDS certification

Integration of a solution like Certyneo into a hospital information system (SIH) or medical software for private practice requires several technical steps: OAuth 2.0 or SAML authentication, configuration of signature workflows according to document type, activation of the probative archiving module and verification of HDS compliance of the hosting chain. Certyneo is hosted on HDS-certified infrastructure, guaranteeing that each electronically signed prescription is stored and processed in compliance with French legal obligations.

Consult our guide on eIDAS 2.0 regulation to understand how new European requirements impact digital prescription processes.

---

5. Overview of measurable benefits of signed electronic prescription

5.1 Reduction of medication errors

According to a study published in Patient Safety in Surgery (2023), electronic prescription with integrated decision support reduces medication errors by 55% to 83% depending on the facility, compared to handwritten prescription. Electronic signature plays a key role in this process by systematically associating the certified identity of the prescriber with the document, making any subsequent falsification impossible.

5.2 Operational and economic gains

Complete digitalisation of the prescription cycle — from drafting to archiving, through pharmaceutical dispensing — enables significant gains:

• Reduction of 70 to 85% in administrative processing time per prescription

• Saving of €0.80 to €1.20 per prescription on paper, printing and physical archiving costs

• Reduction of 40% of lost or illegible prescriptions, main causes of non-dispensing and disputes with pharmacists

• 30% acceleration of reimbursements by Health Insurance thanks to direct digitalised transmission

5.3 Regulatory compliance and legal protection for the practitioner

Qualified electronic signature gives the prescription maximum probative force in the event of dispute. It establishes with certainty the date, time and identity of the signatory, making any contestation of the prescription's authenticity impossible. For practitioners facing medico-legal disputes, this probative advantage is considerable.

---

Conclusion: switch to electronic medical prescription with Certyneo

Digitally signed electronic medical prescription is today technically mature, legally regulated and economically beneficial. By 2026, healthcare professionals who have not yet digitalised their prescriptions risk not only operational delays but also increasing regulatory risks, particularly regarding GDPR compliance and health data hosting requirements.

Certyneo supports medical practices, clinics and hospital groups in implementing compliant, integrated and HDS-certified electronic signature workflows. Our solution covers all eIDAS levels, integrates with the main medical software on the market and features a probative archiving module dedicated to the healthcare sector.

Discover our healthcare sector offers on the electronic signature in healthcare page or estimate your savings with our ROI calculator. Our experts are available for a personalised audit of your prescription process.

Legal and regulatory framework applicable to electronic medical prescription

The legal validity of an electronic medical prescription rests on an articulation of national and European texts that must be mastered precisely.

Civil law and probative value: Article 1366 of the Civil Code provides that "electronic writing has the same probative force as writing on paper support, provided that the person from whom it emanates can be duly identified and that it is established and kept under conditions of a nature to guarantee its integrity". Article 1367 clarifies that electronic signature, when qualified under the eIDAS regulation, benefits from an irrebuttable presumption of reliability.

eIDAS Regulation (no. 910/2014): This European regulation defines three levels of electronic signature (simple, advanced, qualified) and establishes the framework for mutual recognition of signatures within the European Union. For medical prescriptions, the qualified level (QES) is required for prescriptions with particular requirements (controlled medicines, medicines reserved for hospital use). The evolution towards eIDAS 2.0, progressively entering into force since 2024, strengthens requirements on digital identity wallets and paves the way for the generalisation of digital identity of healthcare professionals at European level.

Public Health Code: Article L. 1111-8 of the CSP requires health data to be hosted with an HDS-certified provider by the ANS. This obligation applies without exception to electronic signature solutions processing prescriptions. Non-compliance exposes the facility to criminal penalties (Article L. 1115-1 of the CSP: up to 3 years imprisonment and €45,000 fine) and CNIL administrative sanctions.

GDPR (Regulation no. 2016/679): Prescription data constitute health data within the meaning of Article 9 of the GDPR. Their processing requires an explicit legal basis, systematic DPIA and the designation of a DPO for healthcare facilities. Retention periods vary depending on document type (minimum 20 years for patient records in facilities under Article R. 1112-7 of the CSP).

ETSI technical standards: ETSI EN 319 132 standard (XAdES), ETSI EN 319 122 (CAdES) and ETSI EN 319 142 (PAdES) define the formats for advanced and qualified electronic signature. Qualified time-stamping is governed by ETSI EN 319 422 standard. These standards guarantee the long-term preservation of the probative value of signatures (long-term archive LTA format).

Legal risks: Use of a non-qualified simple signature on a prescription for medicines with restricted prescription constitutes a formal irregularity likely to engage the doctor's disciplinary responsibility before the Medical Order, to justify a reimbursement refusal by CPAM and, in the event of patient harm, to aggravate the civil liability of the prescriber.

Concrete use cases: electronic prescription in action

Case 1: General practice — Medical Group of Two Rivers (Strasbourg)

The Medical Group of Two Rivers, bringing together 8 general practitioners in a multiprofessional health centre, processed on average 1,200 paper prescriptions per month. Recurring problems included illegible prescriptions, undetected dosage errors and costly physical archiving.

After integration of Certyneo with their Doctolib Pro LGO and deployment of e-CPS for each doctor, the practice noted in 6 months: 78% reduction in administrative time related to prescriptions (from 4.5 min to 1 min per prescription on average), complete elimination of pharmacy returns for illegibility (approximately 35 prescriptions/month), and saving of €1,140/year on printing and physical archiving costs. HDS compliance and automatic archiving in each patient's DMP also allowed them to prepare serenely for a CPAM inspection.

Case 2: Private clinic — Clinic Saint-Éloi (Lyon, 180 beds)

Clinic Saint-Éloi faced specific regulatory challenges: controlled medicine prescriptions for its palliative care department, work stoppage prescriptions for hospitalised patients, and secure archiving for 20 years. The previous solution did not meet qualified signature requirements or HDS obligations.

After migration to Certyneo (via our migration offer from their previous provider — consult our migration offer) and configuration of distinct workflows according to prescription type, the clinic achieved: full compliance with ANSSI and ANS requirements for controlled medicine prescriptions, 65% reduction of disputes with partner pharmacies, and 42% reduction in processing times for Health Insurance reimbursement files. The DPIA carried out with Certyneo's support brought the processing into GDPR compliance in less than 3 weeks.

Case 3: Pharmacy network — Pharmavie Group (35 chemists, PACA region)

Although on the receiving side (and not issuing) of prescriptions, the Pharmavie network integrated the Certyneo electronic signature verification module into its dispensing system. Objective: automatically authenticate electronic prescriptions received via the My Health Space platform and detect falsified prescriptions.

Results in 12 months: detection of 23 attempted prescription forgeries (vs 4 detected manually the previous year), saving of 2.5 minutes per electronic prescription in the verification process, and full compliance with the National Pharmacy Order's requirements for dispensing traceability.