Medical Prescription & Electronic Signature 2026

Introduction: the digital prescription, a medical revolution regulated by law

By 2026, electronic medical prescriptions are no longer experimental: they have become an operational reality for thousands of practitioners, clinics and hospital facilities in France. Driven by the generalisation of the Shared Medical Record (DMP), the growth of certified medical management software and increasing traceability requirements, the question of the legality of electronic signatures on medical prescriptions is increasingly pressing. This article reviews the applicable regulatory framework, required signature levels, legal risks to anticipate and best practices for deploying a compliant solution in a medical practice or healthcare facility.

---

1. Legal framework for electronic medical prescriptions in France

1.1 The legal foundation of digital prescriptions

A medical prescription is a legal act in its own right. It engages the civil and criminal liability of the prescribing physician, and its validity determines the pharmacist's dispensing of the medication as well as reimbursement by Health Insurance. Long confined to paper, prescriptions can now be dematerialised by relying on several fundamental texts:

• Article L. 1111-14 of the Public Health Code (CSP), introduced by the Ma Santé 2022 law, which recognises the use of the DMP as a support for shared electronic prescriptions.

• Article R. 5125-48 of the CSP, which requires that all prescriptions include mandatory information (prescriber identity, date, medication name, dosage, signature). A qualified electronic signature meets this requirement when associated with a certificate recognised by the ANS (Health Digital Agency).

• Decree No. 2021-1048 of 4 August 2021 relating to electronic prescriptions, which specifies the conditions under which a dematerialised prescription can be dispensed and reimbursed.

• The Electronic Identification Referential of Healthcare Actors (RIAS), published by the ANS, which defines the assurance levels required for the authentication of healthcare professionals in digital exchanges.

1.2 The central role of the DMP and digital health space

Since the nationwide rollout of the Digital Health Space (ENS) and Mon espace santé, every patient benefits from a DMP fed automatically. Digitally signed electronic prescriptions can be integrated into it, guaranteeing accessibility for the patient, pharmacist and other caregivers involved in the care pathway. This interoperability relies on secure exchange standards (HL7 FHIR, CDA R2) and on the certification of prescription software by the High Authority for Health (HAS) and the ANS.

1.3 Electronic prescriptions and reimbursement: Health Insurance conditions

Health Insurance (National Health Insurance Fund — CNAM) conditions the coverage of medications prescribed electronically on several criteria: the use of certified LGO software (Prescription Management Software), electronic signature of the physician with a high assurance level (in accordance with the eIDAS regulation), and traceability of transmission. Non-compliance with these conditions exposes the professional to reimbursement refusals and CPAM audit procedures.

---

2. Electronic signature levels applicable to medical prescriptions

2.1 The three eIDAS levels and their applicability in healthcare

Regulation eIDAS No. 910/2014 and its evolution towards eIDAS 2.0 (progressively in force from 2024) distinguish three levels of electronic signature: simple, advanced and qualified. In medical prescriptions, the applicable level depends on the document type and use:

| Prescription Type | Recommended Level | Justification | |---|---|---| | Non-controlled medication prescription | Advanced (AdES) | Strong authentication of prescriber, document integrity | | Controlled substance prescription | Qualified (QES) | Enhanced regulatory requirement, high penal risk | | Work stoppage prescription (sick note) | Advanced to qualified | Depending on transmission platform (Ameli Pro) | | Hospitalisation report with prescriptions | Advanced | DMP traceability, legal archiving |

For secured prescriptions (controlled substances, restricted prescription medications), only qualified electronic signature (QES), based on a certificate issued by a Trust Service Provider (PSCO) qualified by ANSSI, offers full legal equivalence to handwritten signature under Article 1367 of the Civil Code.

2.2 The physician certificate and the CPx card

In France, the digital identity of healthcare professionals is based on the CPx card (Healthcare Professional Card), issued by the ANS. This card contains a qualified electronic certificate enabling signature and strong authentication in healthcare information systems. The progressive rollout of e-CPS (mobile version of the CPx) facilitates remote signature, particularly for telemedicine and prescriptions issued in video consultations.

Our page details the differences between these levels and their contractual implications.

2.3 Time-stamping and archiving: complementary obligations

A valid electronic medical prescription must not only be signed, but also time-stamped in a qualified manner (in accordance with ETSI EN 319 422 standard) and archived under conditions guaranteeing integrity and confidentiality for the entire legal retention period. For medical prescriptions, this period is a minimum of 20 years (Article R. 1112-7 of the CSP for healthcare facilities). A certified digital safe deposit box solution is therefore essential to comply with these requirements.

---

3. Telemedicine, remote prescribing and specific challenges

3.1 Prescription in telehealth consultation: framework and limitations

Since Decree No. 2018-788 of 13 September 2018 relating to telemedicine activities, medical prescriptions can be issued following a telehealth consultation. However, significant restrictions remain: the prescription of restricted prescription medications (medications reserved for hospital use, requiring initial hospital prescription) remains subject to specific rules, and the prescription of controlled substances in telehealth is strictly regulated, sometimes prohibited.

Patient identity verification before any telehealth consultation is mandatory and conditions the legal validity of the electronic prescription issued. Digital identity solutions such as France Connect+ enable compliance with this requirement.

3.2 Interoperability of healthcare signature platforms

Integrating an electronic signature solution into a healthcare digital environment requires compatibility with ANS referentials, particularly the General Security Referential (RGS) and the Healthcare Information Systems Interoperability Framework (CI-SIS). Medical software publishers (Doctolib, Maiia, Synapse Médecine, etc.) must integrate compliant signature APIs to enable a seamless experience for the prescriber.

Certyneo offers documented REST API connectors, compatible with the main LGOs on the market, allowing the signature workflow to be inserted directly into the practitioner's usual prescription interface. For more information on our sectoral approach, consult our healthcare page.

3.3 GDPR and health data: enhanced obligations

Data contained in a medical prescription are health data, a special category of personal data under Article 9 of the GDPR (Regulation No. 2016/679). Their processing is subject to enhanced obligations: explicit legal basis (consent or necessity for care), processing register, systematic impact assessment (DPIA), mandatory hosting with a Certified Health Data Hosting Provider (HDS certification issued by ANS in accordance with Article L. 1111-8 of the CSP).

Resorting to an electronic signature solution that does not host prescription data on HDS infrastructures exposes the healthcare facility to CNIL penalties reaching 4% of global turnover or €20 million.

---

4. Deploying electronic signature in medical practices or facilities: key steps

4.1 Prior audit and choice of signature level

Before any deployment, an audit of the document mapping is required: what types of prescriptions are issued? Which medications? How frequently are controlled substances prescribed? This analysis determines the signature level to deploy and necessary certificates. A general practice will have different needs from a hospital oncology department.

Our page allows you to estimate precisely the savings achievable by going fully digital.

4.2 Team training and change management

The success of a health digitisation project depends 60% on human adoption, according to feedback from pilot facilities in the HOP'EN programme (Open Digital Hospital for Patients). Training physicians in e-CPS use, raising awareness of cybersecurity issues (phishing, medical identity theft) and implementing fallback procedures (in case of system unavailability) are essential prerequisites.

4.3 Technical integration and HDS certification

Integrating a solution like Certyneo into a hospital information system (SIH) or town-based medical software requires several technical steps: OAuth 2.0 or SAML authentication, signature workflow configuration according to document type, activation of probative archiving module and verification of HDS compliance of the hosting chain. Certyneo is hosted on HDS-certified infrastructures, guaranteeing that each electronically signed prescription is stored and processed in compliance with French legal obligations.

Consult our page to understand how new European requirements impact digital prescription processes.

---

5. Overview of measurable benefits of signed electronic prescriptions

5.1 Reduction in medication errors

According to a study published in Patient Safety in Surgery (2023), electronic prescribing with integrated decision support reduces medication errors by 55% to 83% depending on the facility, compared to handwritten prescriptions. Electronic signature plays a key role in this process by systematically associating the certified identity of the prescriber with the document, making any subsequent falsification impossible.

5.2 Operational and economic gains

Complete dematerialisation of the prescription circuit — from drafting to archiving, including pharmaceutical dispensing — enables significant gains:

• 70% to 85% reduction in administrative processing time per prescription

• Savings of €0.80 to €1.20 per prescription on paper, printing and physical archiving costs

• 40% reduction in lost or illegible prescriptions, primary causes of non-dispensing and disputes with pharmacists

• 30% acceleration in Health Insurance reimbursement thanks to direct dematerialised transmission

5.3 Regulatory compliance and legal protection of the practitioner

Qualified electronic signature provides the prescription with maximum evidential value in case of dispute. It establishes with certainty the date, time and identity of the signer, making any contestation of prescription authenticity impossible. For practitioners facing medico-legal disputes, this evidential advantage is considerable.

---

Conclusion: move to electronic medical prescriptions with Certyneo

Numerically signed electronic medical prescriptions are now technically mature, legally regulated and economically beneficial. By 2026, healthcare professionals who have not yet dematerialised their prescriptions not only risk operational lag, but also increasingly regulatory risks, particularly regarding GDPR compliance and healthcare data hosting.

Certyneo supports medical practices, clinics and hospital groups in implementing compliant, integrated electronic signature workflows hosted on HDS-certified infrastructure. Our solution covers all eIDAS levels, integrates with the main medical software on the market and features a probative archiving module dedicated to the healthcare sector.

Discover our healthcare-specific offers on our healthcare page or estimate your savings with our calculator. Our experts are available for a personalised audit of your prescription circuit.

Legal and regulatory framework applicable to electronic medical prescriptions

The legal validity of an electronic medical prescription rests on an articulation of national and European texts that must be mastered precisely.

Civil law and evidentiary value: Article 1366 of the Civil Code provides that "electronic writing has the same evidential force as writing on paper, provided that the person from whom it emanates can be duly identified and it is established and preserved under conditions such as to guarantee its integrity". Article 1367 specifies that electronic signature, when qualified under eIDAS, benefits from an irrefutable presumption of reliability.

eIDAS Regulation (No. 910/2014): This European regulation defines the three levels of electronic signature (simple, advanced, qualified) and establishes the framework for mutual recognition of signatures within the European Union. For medical prescriptions, the qualified level (QES) is required for prescriptions with special requirements (controlled substances, medications reserved for hospital use). The evolution towards eIDAS 2.0, progressively entering force from 2024, strengthens requirements on digital identity wallets and opens the way to the generalisation of digital identity for healthcare professionals at European level.

Public Health Code: Article L. 1111-8 of the CSP requires health data hosting with a provider certified HDS by the ANS. This obligation applies without exception to electronic signature solutions handling prescriptions. Non-compliance exposes the facility to criminal penalties (Article L. 1115-1 of the CSP: up to 3 years imprisonment and €45,000 fine) and CNIL administrative sanctions.

GDPR (Regulation No. 2016/679): Prescription data constitute health data under Article 9 of the GDPR. Their processing requires an explicit legal basis, systematic DPIA and the designation of a DPO for healthcare facilities. Retention periods vary according to document type (20 years minimum for patient records in facilities under Article R. 1112-7 of the CSP).

ETSI technical standards: ETSI EN 319 132 (XAdES), ETSI EN 319 122 (CAdES) and ETSI EN 319 142 (PAdES) standards define advanced and qualified electronic signature formats. Qualified time-stamping is governed by ETSI EN 319 422 standard. These standards guarantee the longevity of the evidential value of signatures over time (long term format LTA).

Legal risks: Using unqualified simple signature on a restricted prescription medication constitutes a formal irregularity likely to engage the physician's disciplinary liability before the Medical Council, justify reimbursement refusal by CPAM and, in case of patient harm, aggravate the prescriber's civil liability.

Concrete use cases: electronic prescribing in action

Case 1: General practice — Groupe Médical des Deux Rives (Strasbourg)

Groupe Médical des Deux Rives, grouping 8 general practitioners in a multidisciplinary health centre, processed an average of 1,200 paper prescriptions monthly. Recurring problems included illegible prescriptions, undetected dosage errors and costly physical archiving.

After integrating Certyneo with their Doctolib Pro LGO and rolling out e-CPS for each physician, the practice observed in 6 months: 78% reduction in administrative time related to prescriptions (from 4.5 min to 1 min per prescription on average), total elimination of pharmacy returns for illegibility (approximately 35 prescriptions/month), and €1,140/year savings on printing and physical archiving costs. HDS compliance and automatic archiving in each patient's DMP also allowed smooth preparation for CPAM audit.

Case 2: Private clinic — Clinique Saint-Éloi (Lyon, 180 beds)

Clinique Saint-Éloi faced specific regulatory challenges: controlled substance prescriptions for its palliative care department, work stoppage prescriptions for hospitalised patients, and 20-year secure archiving. The previous solution did not meet qualified signature requirements or HDS obligations.

After migration to Certyneo (via our migration offer from their previous provider — consult our page) and configuration of distinct workflows by prescription type, the clinic achieved: full compliance with ANSSI and ANS requirements for controlled substance prescriptions, 65% reduction in disputes with partner pharmacies, and 42% decrease in administrative processing delays for Health Insurance reimbursement files. The DPIA carried out with Certyneo's support enabled compliance with GDPR in under 3 weeks.

Case 3: Pharmacy network — Pharmavie Group (35 pharmacies, PACA region)

Though on the receiving end (not issuing) of prescriptions, Pharmavie network integrated Certyneo's electronic signature verification module into its dispensing system. Objective: automatically authenticate electronic prescriptions received via Mon espace santé platform and detect forged prescriptions.

Results in 12 months: detection of 23 attempted prescription forgeries (vs 4 manually detected the previous year), 2.5 minute gain per electronic prescription on the verification process, and full compliance with National Pharmacy Council requirements regarding dispensing traceability.