E-prescriptions in India — are they legal, and how do they actually work

Dnyanada Pawaskar delivered her first child by caesarean on 6 February 2018. She was discharged three days later with no post-operative instructions. On 10 February she started vomiting. Her family took her back to the hospital — but the doctor who had operated on her, Dr Deepa Pawaskar, was not there. She had a pre-planned trip out of town. So Dr Pawaskar diagnosed and prescribed over the phone, instructing a nurse and a chemist on what medicines to give, without examining the patient. By the next morning the patient's lips had turned black. She was rushed into an ICU. She died at 7 am. The post-mortem said pulmonary embolism.

Her husband filed a criminal complaint. In July 2018, the Bombay High Court refused anticipatory bail to Dr Pawaskar and her husband, also a doctor, holding that "prescription without diagnosis" resulting in death amounts to criminal negligence. It is still one of the most cited judgments in Indian telemedicine law — not because it was about telemedicine, but because it left every doctor in the country legally uncertain about ever prescribing to a patient they had not physically examined. There was no rulebook. Nobody knew where the line was.

Eighteen months later, COVID-19 made that ambiguity unworkable at national scale. On 25 March 2020, the Board of Governors — standing in for the Medical Council of India — issued the Telemedicine Practice Guidelines, folded into Appendix 5 of the 2002 Professional Conduct Regulations. For the first time, India had an actual rulebook for when a doctor could prescribe remotely, and what they were allowed to prescribe. The Pawaskar case is a large part of why that rulebook was overdue by the time it arrived.

That is the origin story. Here is how the system actually works today.

Is an e-prescription actually legal in India?

Yes. A prescription issued electronically by a Registered Medical Practitioner — someone enrolled on a State Medical Register or the Indian Medical Register — carries the same legal weight as a handwritten one, provided it follows the Telemedicine Practice Guidelines and, where a signature is involved, the Information Technology Act, 2000. The legality itself is not in question. What is conditional is how it is issued: which drugs, through which mode of consultation, with what kind of authentication, and what happens once it reaches a pharmacy counter. Get any of those wrong and the prescription — and the person who issued or filled it — is exposed.

The guidelines are administered today by the National Medical Commission, which replaced the MCI in 2019. Every teleconsultation has to start with identification on both sides: the RMP must display their name, qualification, and state registration number on the prescription itself, and the patient has to be verified. Consent matters too. If the patient initiates the call, their consent is "implied." If the doctor initiates it, or if the prescription is going to be routed straight to a specific pharmacy, the patient has to give "explicit" consent, on record, so they retain the right to choose where they get the medicine filled.

What a doctor can actually prescribe online

This is the part almost nobody outside pharmacy actually understands, and it is the part that matters most if you are the one filling the prescription. The Telemedicine Practice Guidelines split every drug into four tiers based on how much clinical risk remote prescribing carries.

The Prohibited List is not a suggestion. When actor Sushant Singh Rajput died in 2020, part of the criminal complaint his partner filed named a doctor for allegedly sending a prescription for clonazepam — a Schedule X psychotropic — over what amounted to a teleconsultation. That is a direct, real example of the Prohibited List clause being invoked in a live case, not a hypothetical.

What makes an e-prescription legally valid

An RMP typing their name at the bottom of a document, or attaching a scanned photo of their signature, does not make it a legally binding e-prescription. That is the single most common misunderstanding, and it is the reason a WhatsApp prescription sits in a genuinely uncertain legal position.

The Information Technology Act, 2000 recognises two routes to a legally valid electronic signature.

Section 3 — Digital Signature (PKI-based)

The doctor holds a private cryptographic key, usually on a password-protected USB token, issued as a Digital Signature Certificate by a licensed Certifying Authority. This proves both who signed the document and that not a single byte has changed since.

Section 3A — Electronic Signature

The more common route in practice is Aadhaar eSign — the doctor authenticates via Aadhaar OTP or biometric through UIDAI's infrastructure, with no USB token required.

Either route satisfies Section 5 of the IT Act. A plain typed name or a scanned signature does neither — it has no cryptographic audit trail, which means if the prescription is ever challenged, in a negligence suit, a regulatory audit, or a dispensing dispute, it does not meet the evidentiary bar under Section 63 of the Bharatiya Sakshya Adhiniyam, 2023, which replaced Section 65B of the Indian Evidence Act. This is exactly why every serious telemedicine platform in India builds Aadhaar eSign or PKI signing directly into the prescription workflow, rather than letting a doctor simply type their name into a text box.

What happens at the pharmacy counter

A cryptographically valid e-prescription still has to clear one of India's oldest and strictest laws before a pharmacist can hand over the medicine.

Rule 65 of the Drugs and Cosmetics Rules, 1945 says Schedule H and H1 drugs — most antibiotics, psychiatric medication, and other closely controlled therapeutics — cannot be sold without a valid prescription from a registered practitioner. For Schedule H1 specifically, the pharmacy has to keep a separate register logging the patient's name, the prescriber's details, the drug, the batch number, and the quantity. An e-pharmacy has to replicate this digitally for every single order, tying each dispensed strip back to a verified, timestamped prescription — this is precisely the compliance architecture behind how online pharmacies operate in India.

Section 42 of the Pharmacy Act, 1948 is separate and just as strict: only a registered pharmacist can compound, prepare, or dispense medicine against a prescription — not a store clerk, not an automated system without a pharmacist sign-off. Violating this used to carry a fairly mild penalty: up to six months in jail or a fine of ₹1,000. That changed with the Jan Vishwas (Amendment of Provisions) Act, 2023, which rebalanced penalties across 42 central laws. Under the revised Section 42, the maximum jail term actually dropped to three months — but the financial penalty jumped to as much as ₹2 lakh. For a large e-pharmacy fulfilment centre processing thousands of orders a day, that is the difference between a rounding error and a real deterrent, and it is why these platforms now run genuinely heavy internal auditing to make sure a registered pharmacist authorises every dispatch.

Why any of this exists — the case for going digital in the first place

None of this friction is arbitrary. The clinical argument for e-prescriptions predates COVID by decades and comes down to one blunt fact: handwritten prescriptions have historically been a significant source of harm. Prescription errors account for roughly 70% of medication errors serious enough to cause real harm, and a landmark US Institute of Medicine report tied illegible handwriting to at least 7,000 deaths a year in America alone — bad enough that the Medical Council of India amended its Code of Medical Ethics in 2016 to require doctors to prescribe in generic names, legibly, preferably in capital letters.

Computerised Provider Order Entry, or CPOE, the system underneath most e-prescription platforms, attacks this directly. Retrospective studies put the reduction in medication errors from CPOE at around 48%, and in high-acuity settings like orthopaedic surgery and cardiac ICUs, error reductions of up to 92% have been documented. The mechanism is not complicated: standardised digital fields eliminate ambiguity about drug name and dose, and most platforms cross-check the order against a patient's known allergies and existing medications in real time. CPOE is not risk-free — "alert fatigue" and wrong-selection errors from clunky drop-down menus are real, documented failure modes — but the net effect on patient safety is not in dispute.

The infrastructure behind it — ABDM and eSanjeevani

Legalising e-prescriptions is one thing. Routing them reliably to the right pharmacy for 1.4 billion people is another, and that is what the Ayushman Bharat Digital Mission (ABDM) was built for. Launched in September 2021, ABDM gives every citizen an Ayushman Bharat Health Account (ABHA) — a unique digital health ID, conceptually similar to Aadhaar but scoped to healthcare — that can store and share e-prescriptions, lab reports, and discharge summaries. Over 60 crore ABHA IDs have been created so far. Sitting alongside it are the Health Facility Registry and Healthcare Professionals Registry, which act as an automated filter: an e-prescription can only be generated by a doctor listed in the HPR and routed to a pharmacy listed in the HFR, a real structural check against fraudulent actors in the system.

The platform actually running most of this at scale is eSanjeevani, the government's free national telemedicine service — and this is the detail that is oddly absent from almost everything else written on this topic. eSanjeevani runs two models: doctor-to-doctor, linking rural health centres to specialists, and a direct patient-to-doctor OPD model anyone can use from a smartphone. According to a 2024 study in The Lancet Regional Health – Southeast Asia, the platform has delivered over 27 crore consultations since launch, generating ABHA-linked e-prescriptions patients can download or forward straight to a local pharmacy. It is free, it is government-run, and it is the single largest working example of e-prescribing in the country — worth knowing if you are trying to understand how this system actually functions for most Indians, rather than just for the urban, app-using minority that shows up in most coverage of this topic.

The privacy question nobody fully answers yet

An e-prescription is a data record. It carries diagnosis codes, drug history, sometimes fertility or mental-health details. That data now falls under the Digital Personal Data Protection Act, 2023, and the older IT (Reasonable Security Practices) Rules, 2011, both of which require platforms handling it to secure it properly and get meaningful consent before sharing it onward. This is a live compliance obligation for every telemedicine and e-pharmacy platform, not a background formality, and it is part of why regulators are watching this sector as closely as they are.

Could this all get pulled back?

It is worth being straight about this, because it changes what "legal" means going forward. The government has been drafting a replacement for the entire Drugs and Cosmetics Act since 2022 — most recently as the Drugs, Medical Devices and Cosmetics Act, 2025, presented by the DCGI to the Union Health Ministry within days of the Coldrif cough syrup deaths in late 2025. Earlier drafts of this bill have carried language allowing the central government to "regulate, restrict or prohibit" the online sale of drugs by notification, meaning a full ban on e-pharmacies remains a live legal possibility, not a settled question.

This is not theoretical pressure either. The DCGI has repeatedly issued show-cause notices to roughly 20 leading e-pharmacies — including Tata 1mg, Amazon, Flipkart, Netmeds, Practo, and Apollo — first in 2016, again in 2019, and again in February 2023, over alleged unlicensed online drug sales. The Delhi High Court briefly banned online medicine sales nationwide in December 2018 before the order was relaxed. None of this makes e-prescriptions themselves illegal — the clinical and legal basis for telemedicine prescribing stands regardless of what happens to any one e-pharmacy platform — but it is a live regulatory fight, not a finished one.

What this means for you

If you are a patient: an e-prescription is valid if it names the RMP, their registration number, is signed via a proper digital or Aadhaar-based signature and not a scanned photo or a typed name, and, if it is for anything beyond basic OTC medicine, followed a consultation appropriate to that drug's list. If a "prescription" arrives as a WhatsApp text with no verifiable signature, a pharmacist filling it against a Schedule H drug is taking on real risk, and so, in a quieter way, are you.

If you are heading into pharmacy practice or a B.Pharma career: this is the part almost nothing written on this topic covers, and it is the part that will actually affect you at work. A pharmacist dispensing against an e-prescription is not just checking whether a PDF looks official. Rule 65's H1 register still has to be maintained, Section 42 still requires you personally to authorise the dispensing, and neither the Jan Vishwas Act's steeper fines nor a doctor's digital signature protects you if you dispense against something that does not actually meet the guidelines' own conditions — wrong list, wrong consultation mode, missing signature. Understanding this framework is not optional if you are going to work the counter or build the back-end compliance systems e-pharmacies increasingly need.

Quick answers

Is an e-prescription legal in India?

Yes. A prescription issued electronically by a Registered Medical Practitioner carries the same legal weight as a handwritten one, as long as it follows the Telemedicine Practice Guidelines, 2020, and uses a signature method recognised under the Information Technology Act, 2000.

Can a doctor prescribe any medicine over a video or phone call?

No. The Telemedicine Practice Guidelines split drugs into List O, A, and B based on risk, with a separate Prohibited List — covering Schedule X drugs and NDPS-regulated substances — that can never be prescribed via telemedicine, regardless of consultation mode.

Is a prescription sent over WhatsApp legally valid?

Not reliably. A typed name or a photo of a signature lacks the cryptographic authentication the IT Act requires for a legally enforceable electronic signature. A valid e-prescription needs a proper Digital Signature Certificate under Section 3, or an Aadhaar-based eSign under Section 3A.

Can a pharmacist get in trouble for filling an invalid e-prescription?

Yes. Under Section 42 of the Pharmacy Act, 1948, as amended by the Jan Vishwas Act, 2023, dispensing against an invalid or unauthorised prescription can carry a fine of up to ₹2 lakh, alongside separate penalties under Rule 65 of the Drugs and Cosmetics Rules for Schedule H and H1 violations.

Is eSanjeevani free to use?

Yes. eSanjeevani is the Indian government's free national telemedicine platform, offering both doctor-to-doctor and direct patient-to-doctor consultations, and it has delivered over 27 crore consultations to date.

Will e-pharmacies be banned in India?

Not currently, but it remains a real possibility. Draft versions of the replacement Drugs, Medical Devices and Cosmetics Act have included language allowing the government to restrict or prohibit online drug sales by notification, and the DCGI has repeatedly issued show-cause notices to major e-pharmacies over licensing violations.

If this was useful, the next piece worth reading is on how online pharmacies changed the Indian pharma industry — which covers the trade margin and regulatory-grey-zone side of the same digital distribution system this article explains from the prescription end.