What must be present on an eScript?

It should legally contain the prescriber's name and HPI-I; the patient's full name and DOB; the date of issue; the quantity of medication; any authorised repeats; and a secure digital signature.

Does the token display my medical condition?

The SMS or email link was purposely planned to be discreet. It simply indicates that a prescription is pending, and the medication name may be listed, but one will not see the diagnosis or the patient's health information.

How can I verify that my eScript is authentic?

A legitimate eScript token should link to a secure healthcare-related domain. Patients should exercise caution if asked for unrelated financial or excessive personal information.

May a pharmacist change the information on my eScript?

Usually, a pharmacist is not authorised to change a doctor's instructions. However, if necessary for clinical safety, contact the prescribing doctor to obtain a new prescription to clarify or request a new telehealth prescription in accordance with professional and legal requirements.

Required Information on an Official eScript

Key Takeaways

A valid eScript must include prescriber identifiers, patient details, medication information, and a secure digital signature.
The token acts as a secure access reference, not the prescription itself.
Repeat quantities and expiry are encoded within the electronic record.
Pharmacists must record dispensing details in compliance with legal requirements.
Retention and record-keeping obligations vary by jurisdiction.
Security features support prescription integrity and audit tracking.

To be legally valid, an electronic prescription must include specific data elements that enable a pharmacist to verify its validity and dispense the medication correctly. An electronic prescription differs from a paper prescription in that it is created and stored as structured digital data in accordance with the National Health Act 1953 and the Australian Digital Health Agency (ADHA) standards.

A digital token from Prime Medic grants you secure access to the complete legal record kept in the national system. Our eScript & Prescription Access Hub is designed to issue prescriptions in accordance with applicable Australian legislative and technical requirements.

Doctor Identification Requirements

An acceptable electronic prescription must include a "digital paper trail" that clearly links it to an authorised health practitioner. Electronic prescribing systems use nationally recognised healthcare identifiers to verify prescriber identity.

Data Points for Prescriber

AHPRA Registration Number: The Australian Health Practitioner Regulation Agency requires every prescriber to be registered and have a number. You can learn more about this in our guide, "AHPRA registration numbers explained."
Healthcare Provider Identifier-Individual (HPI-I): A unique 16-digit number identifying individual practitioners in the digital health system.
Provider Number: The unique identifier for a specific business location (e.g., Prime Medic), linking the script to a physical or registered digital clinic.
Digital Signature: The script includes a robust electronic signature generated through secure digital prescribing software that meets relevant Australian digital health standards and is accessible only after secure login. This replaces the conventional ink signature.

These data elements support identity verification processes within the electronic prescribing framework.

Patient Identification and Safety Data

Additionally, patient identification data in eScript must be handled with care and protected against leakage at all points where prescriptions are sent. Accurate dispensing relies on appropriate patient identification within the prescribing system through a list of standard identifiers in an electronic prescription. However, under the Privacy Act, such identity information is retained only to the extent necessary for identification.

Patient Data that Must be Provided

Full Legal Name: Given and family names should be consistent with the Medicare card.
Date of Birth: Now a mandatory field for all eScripts to ensure error prevention. It was previously optional on some paper prescriptions.
Gender: To be used as an auxiliary identification factor against records.
Individual Healthcare Identifier (IHI): This number serves as the main "connector" for all methods relating to a given patient. Your doctor obtains this number from you to upload the eScript to a Prescription Delivery Service operating within Australia's electronic prescribing framework.
Privacy Notice: The eScript token on your phone typically displays only your initials, in line with medication-tracking privacy standards. Thus, if someone else is looking at your phone, they will see only the owner's initials, but the full details will be visible only after the pharmacist scans the QR code.

More details on how we handle this highly sensitive information are available in our Privacy Policy and Rules for Prescription Data.

The Token Code and QR Verification

What people usually notice the most about an eScript is the token, which is mostly a QR code or an alphanumeric link. It functions as evidence of a valid prescription, not the prescription itself.

Connection via Technology

Unique Token ID: Each token contains a unique identifier. The token identifier ensures the correct one is used.
Link to the PDS: Upon scanning the QR code, the pharmacy's software sends a request, including the token ID, via the link to the Prescription Delivery Service (PDS) to retrieve the medication details.
Authenticity Check: The system verifies whether the token is still valid, has been cancelled, or has already been used. This is part of the pharmacy eScript verification process.

Repeat Information and Validity Notes

If your doctor decides to give you repeats, this information must be part of an encoded e-record. The digital system automatically records and tracks repeat quantities to maintain multi-medication safety.

How to Handle Repeats

Repeat Authorisation: The script must clearly specify the number of allowed repeats (e.g., "5 repeats").
Repeat Intervals: For certain safety-critical medications, the prescription must specify a minimum interval between dispensings (e.g., "no more than once every 20 days").
Expiration Dates: Most Schedule 4 prescriptions are valid for up to 12 months, while Schedule 8 prescriptions are typically valid for up to 6 months, depending on state regulations.

When a repeat is dispensed, the used token is marked as invalid in the system, and a new token may be generated for the remaining repeats. Track your cycle through our Repeat Prescription Validity Rules.

Required Dispenser Information

Pharmacists are legally obliged to electronically "endorse" the prescription, thereby finalising the eScript cycle and leaving a clear audit trail.

The Dispensing Record

The software used by the pharmacist must automatically log the following details:

Exact timestamp: The exact time the medication was supplied.
Pharmacy Identifiers: The HPI-O (Organisation Identifier) address of the pharmacy.
Dispenser ID: The AHPRA number of the specific pharmacist who personally dispensed the medication.
Remaining Balance: The updated number of repeats left on the record.

Retention periods for dispensing records are governed by state and territory legislation and may vary, particularly for Schedule 8 medicines. For professional standards regarding these records, you can refer to the Pharmaceutical Society of Australia's electronic prescription resources.

Need Medical Advice?

Consult with our experienced doctors from the comfort of your home. Available 24/7 for your convenience.

Book Appointment

1300 090 252

Access eScripts via Online Doctor Consultation

Speak with an Australian-registered doctor. If clinically appropriate, an eScript may be issued following a clinical assessment.

Request to Access eScripts

Required Information on an Official eScript in Australia and What Should Be Included