Digital Prescriptions: Legal Framework and 2026 Obligations

Since the gradual rollout of e-prescribing in France, the digital prescription has become a cornerstone of the digital transformation of the healthcare system. Governed by the Public Health Code, European Regulation 2017/745 and the Ségur digital health program, this prescription method profoundly modifies medical, pharmaceutical and paramedical practices. Understanding its legal framework is essential to ensure healthcare professional compliance and legal protection for patients.

The legal foundation of digital prescriptions

The legal basis for digital prescriptions rests primarily on article L.4071-1 of the Public Health Code, introduced by Ordinance No. 2020-1408 of November 18, 2020. This text defines electronic prescribing as a prescription issued, transmitted and archived electronically, having the same legal value as a paper prescription signed by the prescriber's hand.

Decree No. 2022-1329 of October 17, 2022 clarifies the technical modalities for implementation, in particular the obligation to use a teleservice compliant with the referential standards of the Digital Health Agency (ANS). The generalization of e-prescribing is planned for December 2024, making its adoption mandatory for all independent and hospital-based physicians.

Security, authentication and traceability

Digital prescriptions must meet strict security requirements. The qualified electronic signature, compliant with the eIDAS regulation (EU No. 910/2014), is required to guarantee the integrity and authenticity of the document. Professionals must use their CPS card (Healthcare Professional Card) or e-CPS to authenticate each prescription.

Each prescription is identified by a unique QR code generated by the national teleservice, allowing the pharmacist or healthcare professional recipient to retrieve all data via a centralized secure database, hosted by CNAM. This traceability significantly reduces the risks of falsification, double dispensing and medication errors.

Data protection and GDPR compliance

Digital prescriptions process sensitive health data within the meaning of article 9 of the GDPR. Their processing is subject to the provisions of the amended Data Protection Act and CNIL standards. Hosting providers must obligatorily have HDS certification (Health Data Hosting) as provided for in article L.1111-8 of the Public Health Code.

The patient retains a right of access, rectification and objection over their data. They must be clearly informed of the dematerialization of their prescription and the transmission procedures. In case of breach, sanctions can reach 4% of annual revenue under the GDPR, not including disciplinary sanctions.

Responsibilities of healthcare professionals

The prescriber remains fully responsible for the content of the prescription, whether digital or paper. They must ensure the accuracy of the prescription, dosage and correct patient identification via their INS (National Health Identifier). The pharmacist, for their part, has the obligation to verify the authenticity of the prescription via the teleservice before any dispensing.

Practical examples

Example 1 – Independent medical practice: A general practitioner uses their Ségur-certified practice management software to generate a digital prescription. The patient receives an SMS with a QR code that they present at the pharmacy, avoiding the loss of the paper document.

Example 2 – Telemedicine: During a remote consultation, the physician issues an e-prescription signed electronically via e-CPS. The prescription is transmitted directly to the pharmacy chosen by the patient, in accordance with article R.6316-1 of the Public Health Code.

Example 3 – Hospital facility: A University Hospital integrates e-prescribing into its HDS-certified hospital information system, enabling hospital prescriptions executed in the community (PHEV) with complete traceability between departments.

Conclusion

The digital prescription represents a major advance in securing the care pathway, but its deployment requires absolute legal and technical rigor. Healthcare professionals, software editors and facilities must anticipate regulatory deadlines and invest in compliant solutions to avoid legal risks and ensure quality care provision.