Aipedia: Pharmacists and pharmacies

AI questionnaires in online pharmacy prescribing

Aipedia, by the Apex broking team · Last reviewed 2026-10-30

An algorithm can sort online consultation answers, but for some medicines the GPhC says a prescriber must not rely on a questionnaire alone. Online pharmacies that automate too much face regulatory action and claims that fall on the owner and the prescriber.

Part of: AI in pharmacists and pharmacies

In short

Online pharmacies use algorithm-driven questionnaires to triage requests, reject unsuitable patients and present answers to a prescriber. The GPhC distance-selling guidance (February 2025) does not mention AI, but it says some medicines are not suitable to be prescribed by a questionnaire model alone; for those the prescriber must independently verify information. Weight-management medicines need extra safeguards. Automated systems may be used to warn staff about inappropriate requests. Owners must hold indemnity for the services they provide, including services using prescribers outside the UK, and solely automated decisions on health data are restricted by data law.

How online pharmacies use AI questionnaires

A typical online service asks the patient a set of questions, applies rules or an AI model to the answers, and either declines the request, asks follow-up questions or passes it to a prescriber with a suggested outcome. Some systems also check for repeat accounts, mismatched details or ordering patterns. The design question is how much the algorithm decides and how much the prescriber genuinely reviews.

The duties that apply

The relevant duties are:

Questionnaire-only prescribing: the GPhC distance guidance says some medicines are "not suitable to be prescribed by a questionnaire model alone". For these, the prescriber must not rely on the questionnaire and must independently verify the information.
Weight-management medicines: these need extra safeguards, and the guidance says verification by phone call is not appropriate for weight-loss supply.
Automated warnings: automated systems may be used to warn staff about inappropriate requests (4.2(h)); that is support for staff, not a replacement for them.
Accountability: the GPhC AI position statement says registrants remain personally accountable and AI should not replace clinical decision-making.
Data law: section 80 of the Data (Use and Access) Act 2025 restricts significant decisions based solely on automated processing of health data and requires safeguards such as human intervention.

What can go wrong

Illustrative scenario: an online pharmacy offering a weight-loss medicine uses an algorithm that approves requests where the questionnaire answers fall within set limits, and the prescriber signs batches of approved requests. A patient gives a false weight and omits a relevant condition. Nothing independent was checked, and the patient suffers harm. The complaint reaches the GPhC as well as a solicitor.

Here the problem is not that an algorithm was used but that it effectively made the decision for a medicine the guidance says needs independent verification. Other risks include algorithms configured in a way that favours approval, questions that patients learn to answer in the way that gets a supply, and changes to the logic that nobody risk-assessed. Under the GPhC position statement, owners and superintendents must carry out due diligence, risk-assess and routinely monitor such tools, and compliance can be examined on inspection.

Similar issues arise in aesthetics clinics; see AI in weight-loss injection clinics.

How PI usually responds

A claim would usually be made against the prescriber and the pharmacy owner. The GPhC indemnity page says owners must hold indemnity for the services they provide, reflecting their risks, including online supply outside Great Britain, and the distance guidance requires sufficient indemnity for services using prescribers based outside the UK. Insurers commonly ask detailed questions about online prescribing models, and cover may depend on the pharmacy following the GPhC guidance. If the process breached it, expect closer scrutiny of the claim, subject to the policy terms. Fitness-to-practise defence is a separate need. Questionnaires also hold health data, so a breach or misuse of that data may fall under cyber or data protection cover rather than PI; see data breach cover within PI.

Practical controls

Practical controls include:

List which medicines on your service need independent verification and build that step into the workflow.
Make sure prescribers review each request, not batches.
Use automation to flag and decline, and keep a human in every approval.
Record what was verified and how.
Re-test the algorithm after every change and keep the results.
Disclose your online model, any overseas prescribers and the medicines you supply when buying cover.

How Apex helps

Apex arranges indemnity for online and distance-selling pharmacies and their prescribers. A broker checks that your declared online model, including any automated triage, matches what the policy covers.

Sources

Frequently asked

Can an online pharmacy use an algorithm to approve prescriptions?

It can use automated systems to warn staff and filter requests, but for medicines the GPhC says are unsuitable for questionnaire-only prescribing, the prescriber must independently verify information. Data law also restricts significant decisions on health data made solely by automation.

Who is liable if an AI questionnaire approves an unsafe supply?

Usually the prescriber who signed the prescription and the owner who designed the service. A supplier of the questionnaire software may face contractual claims from the owner, but patients normally pursue the pharmacy and prescriber.

Do overseas prescribers change our indemnity needs?

Yes. The GPhC distance guidance says pharmacies must ensure sufficient indemnity for services that use prescribers based outside the UK, and the GPhC indemnity page says owners' cover must reflect online supply outside Great Britain. Tell your broker or insurer where your prescribers are based.

Does my indemnity need to mention online prescribing?

Yes, it should reflect it. The GPhC requires owners to hold indemnity for the services they provide, and registrants to declare their full scope of practice. Online prescribing, especially of weight-loss medicines, is something insurers may ask about specifically.

Check your PI covers how you use AI

Tell us about your firm and the work you do. A broker will review how your current PI treats AI-assisted work, or arrange new cover. No fee for a quote. Or call 0117 325 0027.

Start a PI quote Request a callback

Apex Insurance Brokers Limited is authorised and regulated by the Financial Conduct Authority. Registered in England and Wales, company number 07014570. This page is general information about how AI is used in the profession and how insurance may respond. It is not legal, regulatory or insurance advice on your circumstances, and it does not guarantee that cover will be available or on what terms.