Patient data destruction for registered pharmacies.
Pharmacies handle special category personal data every day — prescription forms reveal diagnoses, conditions and medications that patients consider among their most private information. GPhC registration standards and UK GDPR both require that this data is handled securely from the moment of dispensing through to certified destruction.
Why pharmacies have the strictest data disposal obligations.
Every prescription form dispensed in a pharmacy reveals highly sensitive personal health information — the patient's name, address, GP, medical condition and medication. Under UK GDPR, prescription data is special category data under Article 9, requiring the highest level of security at every stage of its lifecycle including at the point of disposal.
The General Pharmaceutical Council's standards for registered pharmacies require that confidential patient information is protected at all times. GPhC inspection reports regularly identify inadequate document disposal procedures as a failing — including prescriptions stored insecurely, patient records placed in general recycling, or no documented procedure for destruction at end of retention.
The solution is a regular scheduled collection service with a certificate of destruction issued after every visit. This provides the documented audit trail that GPhC inspectors expect to see, demonstrates compliance with the NHS Records Management Code, and meets your obligations under UK GDPR Article 9.
Prescription forms reveal health conditions and medications — special category data requiring the highest security at all stages, including at disposal. Placing prescriptions in general waste is a significant GDPR breach.
GPhC Standard 4 requires that pharmacies have safe and effective processes for handling confidential information. Secure document disposal with a documented procedure satisfies this requirement.
Controlled drug register entries must be retained for a minimum of 2 years from the date of the last entry, then destroyed securely. Controlled drug prescription forms must also be retained for 2 years.
Patient medication records held in pharmacy systems should be retained for a minimum of 8 years. Paper-based records follow the same principle and require secure destruction after the retention period.
All prescription and pharmacy documents accepted.
All paper-based prescription, dispensing and administrative documents accepted. No sorting required.
Dispensed NHS prescription forms at end of 2-year retention period. Both paper and electronic prescription tokens.
Private prescription forms and accompanying clinical correspondence at end of 2-year retention.
Controlled drug register entries, requisitions and prescription forms at end of 2-year retention under the Misuse of Drugs Regulations.
Paper-based patient medication records, medication review records and dispensing history at end of retention.
Paper repeat prescription request forms, ordering slips and repeat dispensing records.
Letters from GPs, hospitals and prescribers containing patient clinical information.
Monthly endorsement batches, submission forms and NHS reimbursement documentation.
Printed patient dispensing labels and medication packaging bearing patient personal information. Specialist destruction available.
Employee records, GPhC registration documents, DBS certificates and locum contractor correspondence.
Specialist destruction
Dispensing labels, packaging & printed materials.
Patient dispensing labels and medication packaging bearing personal information cannot simply be placed in recycling. Printed materials containing patient names, addresses and medication details require certified destruction to prevent any possibility of personal data being recovered. We provide specialist destruction of printed pharmacy materials at a fixed per-kilogram rate.
Request a quoteMinimum 5kg · Certificate of destruction issued per job
How long should a pharmacy keep prescription and patient records?
Retention periods for pharmacy records are set by NHS guidance, the Misuse of Drugs Regulations and GPhC standards. These are minimum periods.
| Record type | Minimum retention | Basis |
|---|---|---|
| NHS prescription forms (FP10) | 2 years From date of dispensing | NHS BSA guidance |
| Private prescriptions | 2 years From date of supply | Human Medicines Regs 2012 |
| Controlled drug register entries | 2 years From date of last entry | Misuse of Drugs Regs 2001 |
| Controlled drug prescriptions | 2 years From date of dispensing | Misuse of Drugs Regs 2001 |
| Patient medication records | 8 years After last dispensing entry | NHS Records Management Code |
| NHS endorsement records | 2 years After submission to NHS BSA | NHS BSA guidance |
| Staff & locum records | 6 years After employment ends | Employment law best practice |
| Financial & business records | 6 years From end of accounting period | HMRC / Companies Act |
This table is for general guidance. Always refer to GPhC guidance, NHS BSA direction and your superintendent pharmacist for specific circumstances.
Fixed prices. Published upfront.
All plans include free sacks or lockable bin and a certificate of destruction after every collection. GPhC inspection-ready documentation as standard.
Serving pharmacies across three counties.
Trusted by pharmacies across the region.
"Reliable and professional. The certificate of destruction is exactly what we need for our GPhC inspection records. Collections are always on time and the documentation is always right."
"Switched to Clearcut for our pharmacy group. Consistent service, transparent pricing and the GPhC-ready documentation gives us complete confidence in our compliance records."
Pharmacy shredding FAQs
Get a quote for your pharmacy.
We work with pharmacies and dispensing practices across Dorset, Hampshire and Wiltshire. Tell us your requirements and we'll confirm a price the same day.
89 Commercial Road, Bournemouth, England, BH2 5RR
Office@Clearcutconfidentialwaste.co.uk
01202 022409
© 2026 Clearcut Confidential Waste