Controlled Drugs

Controlled drug prescribing rules in the UK: a clinic refresher

Quick answer

Controlled drugs are governed by the Misuse of Drugs Act 1971 and the Misuse of Drugs Regulations 2001, which place medicines into schedules with different handling rules. Private prescribers must use standardised private CD prescription forms for Schedule 2 and 3 drugs, quote a prescriber identification number, and remember that CD prescriptions are generally valid for 28 days. Always check current official guidance before prescribing.

Controlled drugs (CDs) sit under a stricter legal regime than any other medicines a private clinic will handle. The rules are not new, but they are easy to get slightly wrong in a busy private practice, and slightly wrong is enough to have a pharmacy reject a prescription, delay a patient's treatment, or attract regulatory attention. This refresher covers the framework, the private prescription requirements, record keeping, common private-practice examples and the operational side of getting CDs safely to patients. It is a working summary for clinic teams, not legal advice: where a specific schedule or requirement matters to your prescribing, verify it against current legislation and official guidance before you rely on it.

What counts as a controlled drug

Two pieces of legislation do most of the work. The Misuse of Drugs Act 1971 establishes the offences and classifies drugs into Classes A, B and C, which mainly determine criminal penalties. For clinical practice, the more useful instrument is the Misuse of Drugs Regulations 2001, which permits legitimate medical use and sorts controlled drugs into five schedules.

Broadly, the schedules run from most to least restricted. Schedule 1 covers substances with little or no recognised medicinal use, which ordinary prescribers cannot prescribe. Schedule 2 includes many strong opioids and stimulants and carries the fullest set of requirements: safe custody, CD register entries and strict prescription rules. Schedule 3 covers drugs such as certain sedatives and analgesics, with most of the prescription requirements of Schedule 2 but generally lighter record-keeping obligations. Schedule 4 is split into two parts, with Part 1 covering benzodiazepine-type drugs and Part 2 covering anabolic and androgenic steroids among others. Schedule 5 covers low-strength preparations of certain CDs with minimal controls.

The practical point for a clinic is that the schedule, not the class, determines how you must prescribe, record and store a drug. Schedules are amended over time and individual products can move, so check the current scheduling of any drug you prescribe rather than working from memory.

Private CD prescription requirements

Private prescriptions for Schedule 2 and 3 controlled drugs that will be dispensed in the community must be written on the standardised private CD prescription form for the relevant UK nation (for example the FP10PCD in England), rather than on ordinary private prescription stationery. The prescriber must also hold and quote a private CD prescriber identification number, which is issued for this purpose and is separate from other professional registration numbers. A pharmacy cannot lawfully dispense a Schedule 2 or 3 private CD prescription that arrives on the wrong form or without the identification number, so getting this right at source avoids the most common rejection scenario.

The content requirements for Schedule 2 and 3 prescriptions are also stricter than for ordinary medicines. As a general summary, current rules expect:

  • The prescription to be written indelibly, signed by the prescriber and dated. Most particulars no longer need to be in the prescriber's own handwriting, but the signature must be, and the whole document must be indelible.
  • The patient's name and address, the form and, where relevant, the strength of the preparation, and the dose to be taken. "As directed" on its own is not an acceptable dose.
  • The total quantity or number of dosage units in both words and figures for Schedule 2 and 3 drugs.
  • The prescriber's address, which must be within the UK.

Validity is a frequent stumbling block: prescriptions for Schedule 2, 3 and 4 controlled drugs are valid for 28 days from the appropriate date on the prescription, not the six months that applies to other prescription-only medicines. Repeatable prescriptions are not permitted for Schedule 2 and 3 drugs, and there is long-standing good-practice guidance that quantities should normally reflect up to 30 days of treatment, with a documented rationale where more is clinically justified. The exact requirements differ slightly between schedules and are updated periodically, so treat this as orientation and confirm the current position for the specific drug in question.

Record keeping and CD registers

Any clinic that holds Schedule 2 controlled drugs on its premises, for example for administration during procedures, must maintain a CD register. Key expectations, described generally, include:

  • A bound book or compliant electronic register, with a separate section for each drug, form and strength.
  • Entries made promptly, in chronological order, recording receipt and supply with dates, quantities and the persons or firms involved.
  • No overwriting or deletion: corrections are made by dated marginal note or footnote so the original entry remains legible.
  • A running balance for each drug, which is firmly established good practice and expected by inspectors, with regular reconciliation against physical stock.
  • Registers retained for at least two years from the date of the last entry, alongside requisitions and invoices for the periods current guidance specifies.

Safe custody obligations also apply to Schedule 2 drugs and to some Schedule 3 drugs, typically meaning an approved CD cabinet. Clinics registered with the CQC should expect controlled drug governance, including a nominated accountable officer arrangement where applicable, standard operating procedures and incident reporting routes, to feature in inspections. If your clinic never holds CD stock and only issues prescriptions dispensed elsewhere, your register obligations are far lighter, but your prescribing records, audit trail and clinical governance still need to stand up to scrutiny. For the wider compliance picture, see our regulation guides.

Common private-practice examples

The CDs a private, telehealth or hormone clinic actually touches are usually a narrower set than a hospital formulary, and it helps to know where the frequent ones sit. The table below is a general orientation only: always confirm the current schedule of the specific product you prescribe.

Example (general)Typical schedulingPractical implication
Strong opioids and certain stimulantsSchedule 2Standardised private form, full prescription requirements, CD register and safe custody if held on site
Certain sedatives and mid-strength analgesicsSchedule 3Standardised private form and full prescription requirements; register requirements generally lighter
Benzodiazepine-type drugsSchedule 4 Part 128-day validity; standardised private form not required
Testosterone and other anabolic or androgenic steroidsSchedule 4 Part 228-day validity; standardised private form not required; still a controlled drug with import and possession nuances

Testosterone deserves particular care because so many hormone and men's health clinics prescribe it. As a Schedule 4 Part 2 drug it escapes several of the heavier Schedule 2 and 3 requirements: a normal private prescription can be used and a CD register entry is not required for supply. But it remains a controlled drug. The 28-day prescription validity applies, professional standards on remote prescribing of testosterone are demanding, and prescribers should document assessment, monitoring and review with the same rigour they would apply to any CD. Do not let the lighter paperwork create a lighter clinical mindset.

Dispatch and safe delivery

For clinics operating remotely or nationally, the journey from dispensing pharmacy to patient is part of your CD governance, not an afterthought. GPhC standards for registered pharmacies expect medicines delivered to patients to be handled by safe and secure means, with particular care for controlled drugs, and CQC expects clinics to be able to account for what happens between prescription and receipt.

Sensible expectations for a CD delivery arrangement include a full audit trail from dispensing to handover, tracked and signed-for carriage, discreet tamper-evident packaging, delivery to the verified patient address, and a clear procedure for failed deliveries, returns and losses, including who investigates and who is notified. Temperature control matters for some products, and any suspected theft or loss in transit should trigger the pharmacy's and clinic's incident procedures promptly.

This is one reason many clinics use a specialist fulfilment partner rather than improvising with a local arrangement. Script Dispense, for example, supports controlled-drug prescribing and dispensing for verified clinics and prescribers through its e-script platform, with dispensing by a GPhC-registered pharmacy (9012851) and tracked delivery direct to patients under the clinic's own branding. There are no platform fees, and clinics may charge an admin client care fee for their own service. Whatever route you choose, the clinic remains responsible for satisfying itself that the dispensing and delivery arrangements meet the standards above.

Common pitfalls and a working checklist

The same handful of errors account for most rejected private CD prescriptions and most uncomfortable inspection findings:

  • Writing a Schedule 2 or 3 private prescription on ordinary stationery instead of the standardised private CD form.
  • Omitting the private CD prescriber identification number, or quoting the wrong number.
  • Missing the quantity in both words and figures, or using "as directed" instead of a dose.
  • Presenting a prescription after the 28-day validity window has passed.
  • Assuming Schedule 4 Part 2 drugs such as testosterone are outside the CD regime altogether.
  • Register entries made late, running balances not kept or not reconciled, or corrections made by crossing out.
  • No documented procedure for lost, failed or intercepted deliveries.

A practical pre-issue checklist for any private CD prescription:

  • Confirm the drug's current schedule and any product-specific restrictions.
  • Use the correct standardised private CD form where the schedule requires it, and include your prescriber identification number.
  • Check the prescription is indelible, signed, dated, and carries the patient's details, dose, form, strength where relevant, and quantity in words and figures.
  • Confirm the quantity reflects good practice, normally up to 30 days, and document any justified exception.
  • Diarise the 28-day validity so the patient can obtain the medicine in time.
  • Confirm how the medicine will be dispensed and delivered, and that the audit trail covers the full journey.
  • Record the clinical rationale, consent and monitoring plan in the patient record.

Controlled drug law rewards routine. Clinics that build these checks into templates and standard operating procedures rarely have problems; clinics that rely on memory eventually do. Keep your team's knowledge current against the legislation, official guidance and your professional regulator's standards, and revisit your procedures whenever the rules change. More operational guides for prescribing clinics are available in our Controlled Drugs category.

This guide is professional information for verified UK clinics and prescribers. It is not directed at the public, is not medical advice, and does not replace your own regulatory obligations or clinical judgement. Prescribers remain fully responsible for all clinical decisions. Script Dispense is a trading name of Pharmaexpo Ltd; dispensing is carried out via a GPhC-registered pharmacy (9012851).

Give your clinic its own pharmacy, without the setup

Verified clinics and prescribers use Script Dispense to send branded medications direct to patients, with live tracking and no platform fees.

Create your free clinic account

Frequently asked questions

Do private prescribers need a special form for controlled drugs?

Yes, for Schedule 2 and 3 controlled drugs dispensed in the community. These must be written on the standardised private CD prescription form for the relevant UK nation, such as the FP10PCD in England, and must include the prescriber's private CD prescriber identification number. Ordinary private stationery is not acceptable for these schedules, and pharmacies must refuse non-compliant prescriptions.

How long is a controlled drug prescription valid for?

Prescriptions for Schedule 2, 3 and 4 controlled drugs are valid for 28 days from the appropriate date stated on the prescription, rather than the six months that applies to other prescription-only medicines. Good practice guidance also suggests limiting quantities to around 30 days of treatment unless a longer supply is clinically justified and documented. Always confirm current requirements.

Is testosterone a controlled drug in the UK?

Yes. Testosterone is generally classed as a Schedule 4 Part 2 controlled drug under the Misuse of Drugs Regulations 2001, alongside other anabolic and androgenic steroids. It does not require the standardised private CD form or a CD register entry, but the 28-day prescription validity applies and prescribers should follow rigorous assessment, monitoring and documentation standards. Check current guidance for specifics.

Does a clinic need a CD register if it never holds stock?

Generally no. CD register obligations attach to holding and supplying Schedule 2 drugs, so a clinic that only issues prescriptions dispensed by an external pharmacy has much lighter record-keeping duties. It still needs robust prescribing records, an audit trail, and governance covering incidents and delivery failures, and CQC will expect clear controlled drug procedures proportionate to the service.