1. Introduction

Digital Prescription Governance refers to the legal, regulatory, technological and institutional framework governing the creation, authentication, transmission, storage, dispensing and monitoring of medical prescriptions through electronic platforms.

Traditionally, prescriptions were handwritten or printed documents issued by registered medical practitioners. With the development of telemedicine, electronic health records, online pharmacies, artificial intelligence and digital healthcare platforms, prescriptions are increasingly generated and transmitted electronically.

Digital prescription governance ensures that electronic prescriptions are:

Issued only by legally authorised medical practitioners.

Based on genuine clinical assessment.

Authenticated through reliable digital mechanisms.

Protected against alteration, forgery and unauthorised access.

Dispensed by legally authorised pharmacies.

Compliant with patient privacy and data-protection requirements.

Subject to professional, civil, criminal and institutional accountability.

The central legal question is whether digital prescriptions provide the same degree of authenticity, medical responsibility, patient protection and regulatory oversight as conventional prescriptions.

In India, this subject is particularly important because digital healthcare operates across medical regulation, information technology law, pharmaceutical regulation, consumer protection and constitutional privacy.

2. Meaning and Scope of Digital Prescription Governance

Digital prescription governance encompasses the entire lifecycle of an electronic prescription.

A. Prescription creation

A registered medical practitioner examines the patient and creates an electronic prescription containing the patient's relevant medical information, diagnosis, medicine name, dosage, frequency, duration and other necessary instructions.

B. Authentication

The prescription must be attributable to the prescribing practitioner. Authentication may involve digital signatures, electronic authentication credentials, secure accounts and audit trails.

C. Electronic transmission

The prescription may be transmitted directly to the patient, a hospital, a pharmacy or an authorised digital healthcare platform.

D. Pharmaceutical dispensing

The dispensing pharmacy must verify the prescription, the practitioner's authority and applicable restrictions on the prescribed medicine.

E. Record retention

The prescription and associated records must be maintained in accordance with applicable medical, pharmaceutical, information technology and data-protection requirements.

F. Monitoring and accountability

Regulatory authorities must be able to investigate forged prescriptions, unauthorised prescribing, inappropriate medicine distribution, data breaches and professional negligence.

3. Legal Framework Governing Digital Prescriptions in India

India does not have one consolidated statute exclusively governing digital prescriptions. Instead, several laws and regulatory instruments operate together.

A. National Medical Commission Act, 2019

The National Medical Commission Act, 2019 establishes the institutional framework for regulating medical education and professional medical practice.

Its relevance includes:

Recognition and regulation of registered medical practitioners.

Maintenance of medical registers.

Professional standards and ethical obligations.

Disciplinary accountability for professional misconduct.

Regulation of medical practice conducted through technological platforms.

A digital prescription does not eliminate the professional responsibility of the doctor who issues it.

B. Telemedicine Practice Guidelines, 2020

The Telemedicine Practice Guidelines, issued on 25 March 2020, are among the most important regulatory instruments for digital prescription governance in India.

They recognise technology-enabled consultations and establish conditions under which registered medical practitioners may prescribe medicines remotely.

The guidelines address:

Verification of doctor and patient identity.

Establishment of a valid doctor–patient relationship.

Informed consent.

Appropriate clinical assessment.

Prescription restrictions.

Maintenance of medical records.

Confidentiality and information security.

Professional liability and negligence.

Classification of medicines

The guidelines establish different prescribing categories.

The prescribing doctor must have sufficient and relevant information to assess the patient's condition. Prescribing without an appropriate provisional diagnosis may amount to professional misconduct.

The restrictions concerning Schedule X drugs and narcotic and psychotropic substances are particularly important. The applicable medicine lists and subsequent modifications must also be considered.

Press Information Bureau+3

C. Drugs and Cosmetics Act, 1940 and Rules, 1945

The Drugs and Cosmetics Act, 1940 and the Drugs and Cosmetics Rules, 1945 regulate the manufacture, sale, distribution and dispensing of medicines.

Their importance in digital prescription governance is substantial.

Important provisions and requirements:

Schedule H medicines generally require a prescription from a registered medical practitioner.

Schedule H1 medicines are subject to additional prescription and recordkeeping requirements.

Schedule X medicines are subject to stricter controls.

Pharmacies must comply with licensing and dispensing requirements.

Prescription medicines cannot lawfully be distributed merely because an online platform has received an electronic order.

An online pharmacy cannot escape pharmaceutical regulation by characterising its activities as digital transactions.

The government has expressly recognised that medicines covered by Schedules H, H1 and X must be sold in accordance with the applicable prescription and licensing requirements.

Press Information Bureau+1

D. Information Technology Act, 2000

The Information Technology Act, 2000 provides legal recognition to electronic records and electronic authentication.

Relevant provisions include:

Section 4: Legal recognition of electronic records.

Section 5: Legal recognition of electronic signatures.

Section 10A: Validity of contracts formed through electronic means.

Section 43: Liability relating to unauthorised access, downloading and damage to computer systems.

Section 66: Computer-related offences involving dishonest or fraudulent conduct.

Section 72: Punishment for breach of confidentiality and privacy in specified circumstances.

These provisions are important where a digital prescription is electronically created, authenticated, transmitted, altered or fraudulently accessed.

However, electronic recognition under the IT Act does not automatically make every electronic prescription medically valid. The prescriber must also comply with medical and pharmaceutical regulations.

E. Digital Personal Data Protection Act, 2023

The Digital Personal Data Protection Act, 2023 establishes India's statutory framework for the processing of digital personal data.

Digital prescription platforms may process:

Patient identity information.

Medical histories.

Diagnoses.

Medication records.

Contact information.

Prescription and dispensing histories.

The Act introduces obligations concerning lawful processing, notice, consent where applicable, security safeguards, individual rights and accountability of data fiduciaries.

Its applicability must be assessed together with the relevant commencement notifications and rules in force at the relevant time.

The constitutional foundation for protecting medical information is also provided by the Supreme Court's privacy jurisprudence in Justice K.S. Puttaswamy (Retd.) v. Union of India (2017).

F. Pharmacy Act, 1948

The Pharmacy Act, 1948 regulates the pharmacy profession and registration of pharmacists.

In digital prescription governance, it is relevant because electronic prescription platforms must ensure that dispensing activities are undertaken by legally qualified and authorised pharmacy professionals.

The digital platform cannot replace the pharmacist's independent professional responsibility to verify the prescription and dispense medicines in accordance with law.

4. Essential Principles of Digital Prescription Governance

4.1 Authenticity and digital authentication

A digital prescription must be traceable to the practitioner who issued it.

The system should preserve:

Prescriber's name and registration number.

Date and time of issuance.

Patient identification.

Medicine and dosage details.

Authentication information.

Prescription modification history.

A copied image of a prescription should not automatically be treated as genuine merely because it contains a doctor's name or signature.

4.2 Informed consent

Patients must understand the nature and limitations of remote medical consultation.

Where consent is required, the platform should document it. A patient should also be informed about the use of personal information and the circumstances in which medical records may be shared.

4.3 Prescription accuracy

Errors in electronic prescribing can arise through:

Incorrect patient selection.

Incorrect medicine selection.

Wrong dosage or frequency.

Automated transcription errors.

Inaccurate clinical decision-support recommendations.

Duplicate prescriptions.

The doctor remains responsible for exercising appropriate professional judgment.

4.4 Privacy and confidentiality

Digital prescriptions contain sensitive information about an individual's physical and mental health.

Governance systems should provide:

Encryption during transmission and storage.

Role-based access controls.

Secure authentication.

Audit logs.

Data retention policies.

Breach detection and response procedures.

Restrictions on unauthorised commercial use.

4.5 Prevention of prescription fraud

Common digital prescription fraud includes:

Forged electronic signatures.

Manipulation of prescription documents.

Reuse of prescription tokens.

Identity impersonation.

Unauthorised repeat dispensing.

Creation of prescriptions through fraudulent accounts.

A robust governance system should maintain a verifiable record of issuance, transmission, cancellation and dispensing.

4.6 Artificial intelligence and automated prescriptions

Artificial intelligence may assist doctors in identifying medicine interactions, calculating dosage recommendations and detecting potential prescription errors.

However, an AI-generated recommendation is not automatically a legally valid prescription.

The system must preserve meaningful medical supervision, professional accountability and clinical verification.

If an AI system recommends an unsafe dosage and the doctor approves it without reasonable scrutiny, questions of professional negligence and platform responsibility may arise.

5. Judicial Interpretation: Important Case Laws

An important qualification is that Indian courts have not yet developed a comprehensive body of decisions specifically dealing with digital prescriptions. Nevertheless, several Supreme Court decisions establish legal principles directly relevant to electronic prescribing, telemedicine and digital healthcare.

Case 1: Jacob Mathew v. State of Punjab (2005) 6 SCC 1

Supreme Court of India

Legal principle: Professional negligence and standard of medical care.

The Supreme Court examined the legal standards governing medical negligence and the circumstances in which a medical practitioner may be held criminally liable.

The Court emphasised that a doctor cannot be held negligent merely because a treatment decision produces an adverse result. Negligence must be assessed against the standard of reasonable professional competence and care.

Application to digital prescriptions:

Doctors must exercise independent clinical judgment before issuing electronic prescriptions.

Incorrect digital dosage recommendations may raise questions of professional negligence.

A doctor cannot automatically avoid liability by blaming prescription software.

AI-generated prescribing errors must be evaluated in light of the doctor's actual role and reasonable professional responsibilities.

Importance: This judgment provides a foundation for determining medical responsibility when electronic prescribing produces patient injury.

Case 2: Samira Kohli v. Dr. Prabha Manchanda (2008) 2 SCC 1

Supreme Court of India

Legal principle: Informed consent and patient autonomy.

The Supreme Court explained that valid medical consent must be voluntary and based on adequate information concerning the nature and purpose of the proposed treatment.

The judgment is important for digital prescription governance because digital healthcare platforms must not treat a patient's mere acceptance of online terms as unlimited consent to medical procedures or treatment.

Application:

Patients should receive understandable information about prescribed treatment.

Doctors must respect patient autonomy.

Consent to a teleconsultation is not necessarily consent to every proposed intervention.

Digital systems should maintain appropriate records of consent and treatment decisions.

Importance: The judgment supports patient autonomy in electronically delivered medical services.

Indian Kanoon+1

Case 3: Justice K.S. Puttaswamy (Retd.) v. Union of India (2017) 10 SCC 1

Nine-judge constitutional bench

Legal principle: Right to privacy as a fundamental right.

The Supreme Court unanimously recognised privacy as a constitutionally protected fundamental right under Article 21 and other relevant constitutional freedoms.

The judgment recognised informational privacy as an important component of individual autonomy.

Application to digital prescriptions:

Medical prescriptions cannot be treated as ordinary commercial data.

Patient medical histories require strong confidentiality safeguards.

Healthcare platforms must justify the collection and use of personal information.

Unauthorised disclosure of prescription records may implicate constitutional privacy principles.

Governmental access to medical information must satisfy applicable constitutional requirements.

Importance: This decision provides the constitutional foundation for privacy protection in digital healthcare systems.

Indian Kanoon+1

Case 4: Indian Medical Association v. V.P. Shantha (1995) 6 SCC 651

Legal principle: Medical services and consumer protection.

The Supreme Court clarified the circumstances in which medical services fall within the scope of consumer-protection legislation.

The decision established that medical services provided for consideration generally fall within consumer-protection jurisdiction, subject to the recognised exceptions.

Application to digital prescriptions:

A patient who receives paid digital healthcare services may have consumer remedies where the service involves:

Negligent prescribing.

Incorrect medicine information.

Defective digital healthcare services.

Failure to provide promised professional services.

Improper handling of prescription-related transactions.

The applicability of the Consumer Protection Act, 2019 must be assessed in the particular circumstances.

Importance: Digital healthcare providers cannot assume that their online business model automatically excludes consumer-protection liability.

Indian Kanoon+1

Case 5: Maharaja Agrasen Hospital v. Master Rishabh Sharma (2019) 7 SCC 301

Legal principle: Medical negligence, medical records and institutional accountability.

The Supreme Court dealt with serious medical negligence and the responsibility of healthcare institutions.

An important aspect of the judgment concerned the obligation to provide medical records to patients. Failure to provide records within the prescribed period under the applicable professional-conduct regulations can attract disciplinary consequences.

Application to digital prescriptions:

Hospitals should preserve electronic prescription records.

Patients should have access to relevant medical records.

Prescription histories may become important evidence in negligence proceedings.

Healthcare institutions may face liability for negligent conduct of their employees or engaged professionals.

Importance: This case supports the principle that reliable medical documentation is essential for transparency, patient rights and accountability.

VoxJuris+1

Case 6: Dr. S.K. Jhunjhunwala v. Mrs. Dhanwanti Kaur (2019) 2 SCC 282

Legal principle: Proof and causation in medical negligence.

The Supreme Court emphasised that the existence of an adverse medical outcome alone does not establish negligence. There must be an adequate connection between the alleged breach of professional duty and the injury suffered.

Application to digital prescriptions:

Suppose a patient receives an incorrect medicine through an online prescription system and suffers an adverse reaction.

The legal investigation should establish:

Who created the prescription?

Whether the prescription was clinically appropriate.

Whether the software altered the prescription.

Whether the pharmacist dispensed the correct medicine.

Whether the error caused the patient's injury.

Importance: The decision is relevant to allocating responsibility among doctors, hospitals, pharmacies and digital healthcare service providers.

VoxJuris

6. Liability of Different Stakeholders

Digital prescription governance requires a clear allocation of legal responsibility.

Liability is fact-specific. A software provider does not automatically become liable for every medical error, just as a doctor is not automatically responsible for every technical failure.

7. Important Legal Issues and Emerging Challenges

7.1 Fake digital prescriptions

Digital prescription forgery creates risks of unlawful medicine acquisition and patient harm.

Potential legal consequences include:

Criminal liability for forgery and cheating under applicable provisions of the Bharatiya Nyaya Sanhita, 2023.

Computer-related offences under the Information Technology Act, 2000.

Disciplinary proceedings against involved medical professionals.

Pharmaceutical regulatory action against unlawful dispensing.

7.2 Unauthorised repeat prescriptions

Digital systems may allow patients to reuse prescription images or electronic credentials.

Governance mechanisms should ensure that:

Expired prescriptions are not improperly reused.

Repeat dispensing is authorised.

Dispensing records are updated.

Controlled medicines receive additional verification.

7.3 Cross-platform prescription sharing

When prescriptions move between hospitals, doctors, pharmacies and third-party applications, the risk of unauthorised access increases.

Legal safeguards should address data minimisation, access controls, consent where required and secure transmission.

7.4 Algorithmic prescribing discrimination

AI-based prescription systems may recommend different treatments based on incomplete or biased patient data.

For example, an algorithm trained on an unrepresentative patient population may produce less accurate dosage recommendations for certain groups.

Such systems raise questions concerning:

Medical negligence.

Algorithmic transparency.

Discrimination.

Clinical validation.

Institutional accountability.

7.5 Digital prescription evidence in court

Electronic prescriptions can become important documentary evidence in criminal, civil and consumer proceedings.

Relevant issues include:

Authenticity of electronic records.

Digital signatures.

Timestamp verification.

Audit trails.

Evidence of alteration.

Chain of custody.

Sections 61–63 of the Bharatiya Sakshya Adhiniyam, 2023 are particularly relevant to the admissibility of electronic and digital records.

8. Regulatory and Institutional Accountability

Several institutions have important supervisory responsibilities.

An effective governance structure should ensure coordination between medical regulators, pharmaceutical authorities and digital-data regulators.

9. Digital Personal Data Protection: Important 2025–2027 Development

A significant development is the notification of the Digital Personal Data Protection Rules, 2025 and the phased commencement of the DPDP Act.

The commencement notification dated 13 November 2025 provides different implementation dates.

Certain institutional and preliminary provisions commenced immediately.

Certain provisions are scheduled to commence after one year.

The principal data-processing obligations under Sections 3–17 are scheduled to commence 18 months after publication, namely 13 May 2027.

Therefore, as of 6 November 2026, it would be inaccurate to assume that every substantive DPDP obligation is already operative.

E-Gazette+2

For digital prescription providers, this means that compliance planning should address both the existing applicable privacy framework and the incoming DPDP requirements.

10. Comparative Legal Position: Australia, United States and European Union

Digital prescription governance is increasingly regulated through integrated electronic health systems.

A. Australia

Australia has developed a structured electronic prescribing framework.

Important legislation and regulatory instruments include:

National Health Act 1953.

National Health (Pharmaceutical Benefits) Regulations 2017.

Privacy Act 1988.

Healthcare Identifiers Act 2010.

Relevant state and territory medicines and poisons legislation.

The Australian system uses electronic prescription tokens and a National Prescription Delivery Service (NPDS).

Prescribers and pharmacists must use conformant clinical software. Patients can choose their pharmacy and receive prescriptions electronically.

Dept of Health, Disability & Ageing+2

Electronic prescribing for dispensers

Frequently Asked Questions | medAuth

Understanding eScripts

9

Important governance lesson for India: A centralised prescription-delivery infrastructure, standardised authentication and comprehensive audit trails can improve the security and reliability of electronic prescriptions.

B. United States

The United States regulates electronic prescriptions through federal and state legislation.

Important frameworks include:

Controlled Substances Act, 1970.

Electronic Prescriptions for Controlled Substances (EPCS) requirements.

Health Insurance Portability and Accountability Act (HIPAA).

SUPPORT Act, 2018.

Electronic prescriptions for controlled substances are subject to special authentication and security requirements.

HIPAA establishes privacy and security obligations for covered healthcare entities and their business associates.

Governance lesson: Electronic prescribing requires stronger identity verification and security controls when controlled medicines are involved.

C. European Union

The European Union regulates digital healthcare through several interconnected legal instruments.

Important frameworks include:

General Data Protection Regulation (GDPR).

eIDAS Regulation.

Cross-border healthcare legislation.

European Health Data Space Regulation.

These frameworks address personal-data protection, electronic identification, secure electronic transactions and cross-border health-data exchange.

Governance lesson: Digital prescription systems should be interoperable while preserving patient confidentiality and the legal requirements of individual jurisdictions.

11. Major Challenges in Digital Prescription Governance

The following issues require further legislative and institutional development:

12. Recommendations for Stronger Digital Prescription Governance

India should consider the following reforms.

1. National electronic prescription standards

Develop uniform technical and legal standards for electronic prescriptions across hospitals, clinics, telemedicine platforms and pharmacies.

2. Strong practitioner authentication

Introduce reliable registration verification and secure digital authentication mechanisms for prescribing professionals.

3. AI accountability framework

Require clinical validation, human supervision, explainability where appropriate and clear responsibility for AI-assisted prescribing.

4. Centralised audit infrastructure

Maintain secure records of prescription creation, authentication, modification, cancellation and dispensing.

5. Patient rights protection

Provide patients with meaningful access to their prescription histories and mechanisms for correcting inaccurate information.

6. E-pharmacy supervision

Strengthen licensing, prescription verification, pharmacist accountability and monitoring of prohibited medicines.

7. Cybersecurity requirements

Require encryption, access restrictions, vulnerability assessments and effective incident-response mechanisms.

8. Cross-border coordination

Develop standards for recognising foreign prescriptions while maintaining national restrictions on controlled and prescription-only medicines.

9. Effective grievance redressal

Provide accessible complaint mechanisms for patients affected by fraudulent prescriptions, dispensing errors and misuse of medical information.

13. Conclusion

Digital Prescription Governance represents an important intersection of medical law, pharmaceutical regulation, constitutional rights, information technology and consumer protection.

In India, the Telemedicine Practice Guidelines, 2020, the National Medical Commission framework, the Drugs and Cosmetics Act, 1940, the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 collectively provide important elements of the regulatory structure.

The judicial principles established in Jacob Mathew, Samira Kohli, Puttaswamy, Indian Medical Association v. V.P. Shantha and Maharaja Agrasen Hospital provide a foundation for determining professional responsibility, informed consent, privacy, consumer rights and institutional accountability.

However, these decisions are not direct rulings on the legality of modern electronic prescription systems. Their principles must be applied to digital healthcare disputes according to the facts and applicable legislation.

Ultimately, the objective of digital prescription governance should be to ensure that technological innovation does not weaken medical ethics, professional accountability, patient autonomy or public safety.

14. Important Legal References for Academic Research

Primary research resources:

Telemedicine Practice Guidelines, 2020

National Medical Commission

India Code – Central legislation

Ministry of Electronics and Information Technology

Australian electronic prescribing framework

Research conclusion: Digital prescription governance should be understood not merely as the electronic replacement of handwritten prescriptions, but as a comprehensive legal accountability system governing doctors, pharmacists, hospitals, software developers, AI systems and digital healthcare platforms.

The analysis is primarily India-focused, with comparative Australian, American and European perspectives.