GPhC Inspection Checklist 2026: A 30-Day Pharmacy Guide

A GPhC inspection checklist should help a pharmacy test whether it can evidence all five principles of the standards for registered pharmacies: governance, staff, premises, services including medicines management, and equipment and facilities. The purpose is not to assemble a folder for inspection day. It is to find the gap between a written process and what happens in practice, assign an owner and record the improvement.

This 2026 checklist turns those five principles into a focused 30-day review for UK community pharmacies, distance-selling pharmacies and pharmacies providing private services. Use it alongside the official GPhC standards, current guidance relevant to your services and your own professional and legal advice.

How to use this GPhC inspection checklist

Nominate one accountable lead, but do not complete the review alone. Inspectors may speak with different members of the team, observe practice, review records and follow a process from beginning to end. A reliable self-audit therefore combines document review, staff questions, observation and sample testing.

1. Define the scope. List every service, patient route, delivery method, prescriber relationship, location, system and third party in use.
2. Test reality. Select recent examples and trace what actually happened rather than asking only whether a policy exists.
3. Record evidence. Note the record, system screen, observation or staff explanation that supports each answer.
4. Rate the gap. Separate an absent control from an inconsistent process, an incomplete record and a potential improvement.
5. Close the loop. Give each action an owner and date, then retest it and record the outcome.

The January 2026 GPhC inspection decision-making framework distinguishes between standards not met, standards met, areas for improvement and good practice. Crucially, the regulator says that document is a guide rather than an exhaustive checklist. Treat the questions below as an internal audit prompt, not as proof that an inspection will have a particular outcome.

GPhC inspection checklist by the five principles

Principle 1: Governance

Governance connects every other part of the inspection. The GPhC's published learning from inspections identifies risk management, monitoring the safety and quality of services, and safe service delivery among the standards that strongly influence overall performance.

• Can the team identify the material risks in every service and show how controls were chosen, implemented and reviewed?
• Are standard operating procedures current, specific to the pharmacy, accessible during working hours and understood by the people using them?
• Do incident, near-miss, complaint and safeguarding records show action, learning and follow-up rather than collection alone?
• Are responsibilities clear across the owner, superintendent, responsible pharmacist, prescribers, locums, contractors and technology suppliers?
• Are required records complete and retrievable, with appropriate confidentiality, retention and access controls?
• Have new services, material changes, staffing pressures and third-party dependencies triggered fresh risk assessments?
• Can the pharmacy demonstrate suitable indemnity arrangements, business continuity and escalation routes?

Evidence to sample: one recent incident from report to closure; one complaint; a current service risk assessment; an SOP acknowledgement record; a business-continuity test; and evidence that a recurring issue changed practice.

Principle 2: Staff

• Are staffing levels and skill mix suitable for the workload and services being delivered?
• Can each team member describe their role, limits, escalation route and what to do if commercial pressure conflicts with patient safety?
• Are induction, role-specific training, competence assessment and continuing development recorded?
• Can staff explain how they raise concerns and how the pharmacy creates an open learning culture?
• Are locums and temporary staff given practical access to local procedures, systems and emergency information?
• Where prescribing or clinical services are involved, is accountability between pharmacy and prescriber clear and evidenced?

Evidence to sample: training and competence records for people on different shifts; a locum induction; rotas against workload; meeting notes that show learning; and a real example of a concern being escalated.

Principle 3: Premises

• Are dispensary, consultation and storage areas clean, secure, appropriately maintained and suitable for their use?
• Can confidential conversations take place without being overheard, and are screens, labels and records protected from unauthorised view?
• Are access, lighting, ventilation, waste, pest, fire and general safety controls appropriate and evidenced?
• Is the consultation room ready for care rather than being used as overflow storage?
• Do public information and registered-pharmacy details remain accurate across the premises and digital channels?

Evidence to sample: walk the route used by a patient and by a delivery; test privacy from the public area; inspect secure storage; and review recent premises and safety checks.

Principle 4: Services, including medicines management

• Is each service designed around a documented, safe patient journey from first contact through assessment, supply, delivery and follow-up?
• Can the team trace a sample prescription or service record through the complete workflow?
• Are clinical decisions, consent, relevant checks, interventions and reasons for non-supply recorded clearly enough for another professional to understand?
• Are medicines sourced, stored, selected, supplied and delivered safely, with usable recall and alert processes?
• Are fridge, controlled-drug and other legally required records accurate and reviewed, with discrepancies investigated?
• Are vulnerable people identified and safeguarded, with suitable routes for escalation?
• Are service audits and outcome reviews used to improve quality rather than completed as a paperwork exercise?

Evidence to sample: a normal supply, an exception or intervention, a delivery, a declined private-service request where applicable, a medicines alert and a recall test. The GPhC's public inspection reports and knowledge hub can help teams understand how standards are applied in context.

Principle 5: Equipment and facilities

• Is equipment suitable for the services provided, available when needed and used by trained people?
• Are calibration, validation, cleaning, maintenance and replacement requirements identified and recorded?
• Are refrigerators, monitoring devices, clinical equipment, security systems and IT facilities checked at an appropriate frequency?
• Is there a safe fallback when essential equipment, connectivity or a supplier system fails?
• Are faults, out-of-range readings and remedial actions documented through to resolution?

Evidence to sample: choose one critical item and trace its purchase or validation, staff training, routine checks, fault history and contingency arrangement.

A 30-day GPhC inspection preparation plan

The five principles tell you what to test; the following schedule gives the work a manageable sequence. Adapt it to the pharmacy's risk profile. A material patient-safety concern should be escalated immediately rather than left until its allocated week.

Days 1–7: scope the operation and test governance

• Map every service, system, location, prescriber, supplier and patient route.
• Create a single action log with the principle, standard, evidence, gap, risk, owner and due date.
• Review risk assessments, SOP control, complaints, incidents, near misses and safeguarding records.
• Check required registers, insurance, accountability arrangements and business continuity.
• Choose two recent issues and confirm that action was completed and effectiveness reviewed.

Days 8–14: interview the team and walk the premises

• Ask staff on different shifts to explain escalation, incident reporting, confidentiality and service-specific risks.
• Match training and competence records to the work each person performs.
• Review workload, skill mix, supervision, locum induction and access to procedures.
• Walk the patient, dispensing, consultation, storage and delivery routes.
• Resolve privacy, security, access, maintenance and housekeeping issues and keep evidence of the fix.

Days 15–21: trace services and medicines

• Sample records from each material service, including at least one exception, refusal or intervention where relevant.
• Test the audit trail from request or prescription through clinical review, supply, delivery and follow-up.
• Review storage, controlled-drug governance, temperature monitoring, alerts and recalls.
• Check that patient-facing information agrees with the service that is actually delivered.
• Confirm how third parties are monitored and how their failures enter the pharmacy's own governance system.

Days 22–30: test equipment, close gaps and run a mock inspection

• Review the equipment register, maintenance, calibration, fault handling and contingency plans.
• Retest high-risk actions rather than accepting a completed tick box.
• Run a mock trace with someone who did not own the original process.
• Ask team members to find evidence under normal working conditions.
• Record remaining risks, who accepted them, the interim control and the final completion date.
• Schedule the next focused audit so readiness continues after day 30.

Extra checks for online and distance-selling pharmacies

An online pharmacy needs to evidence both the registered premises and the digital patient journey. A polished website is not evidence that the underlying service is safe, while a sound dispensary process cannot compensate for an unsafe online route.

• Is the pharmacy's identity, ownership, registration and contact information clear and accurate?
• Can patients understand who provides the pharmacy and prescribing services, how decisions are made and how to raise a concern?
• Are identity, age, safeguarding and fraud controls proportionate to the service and consistently recorded?
• Can the pharmacy demonstrate clinical independence, appropriate information gathering, safe prescribing relationships and intervention pathways?
• Are data access, audit logs, backups, cyber incident response and supplier permissions controlled?
• Are delivery risks, failed deliveries, temperature requirements and return or disposal arrangements managed?
• Does the mobile patient journey preserve critical safety information and avoid steering people towards a medicine before an appropriate assessment?

Use Pharmacy Mentor's guide to the common weaknesses in online prescribing pharmacies for a deeper digital-service review. Our guides to pharmacy identity-verification systems and pharmacy cybersecurity cover two supporting control areas in more detail.

What happens during a GPhC inspection?

The exact activity depends on the pharmacy and the reason for the inspection. In practical terms, be ready for the inspector to review the registered premises, speak with team members, examine relevant records and observe or trace how services operate. The test is whether the pharmacy meets the standards in practice, not whether it can produce the longest policy folder.

After inspection, the GPhC publishes an overall outcome of standards met or standards not all met. Its inspection-report site also shows findings against the five principles. If one or more standards are not met, the pharmacy may need an improvement action plan and the regulator monitors whether the improvements are made.

Common checklist mistakes

• Auditing documents but not delivery. Sample real records and observe the process.
• Using a generic evidence pack. Evidence must reflect the pharmacy's actual services, people and risks.
• Leaving digital services outside the inspection scope. Website, prescribing, identity, data and delivery controls are part of the operating model.
• Fixing a gap without retesting it. Record whether the action worked and whether it created a new risk.
• Preparing only the responsible pharmacist. The wider team should be able to explain their work and escalation routes.
• Treating day 30 as the finish line. Owners remain accountable for meeting the standards every day.

GPhC inspection checklist FAQs

What does a GPhC inspector look for?

A GPhC inspector looks for evidence that the standards for registered pharmacies are met in practice. The evidence is assessed across five principles: governance, staff, premises, services including medicines management, and equipment and facilities.

What documents should be ready for a GPhC inspection?

The relevant evidence depends on the pharmacy and its services. Common records include current procedures and risk assessments, staff training and competence records, incident and complaints logs, required pharmacy registers, equipment checks, temperature records, audit trails, and evidence that identified risks have been acted on.

Is the GPhC inspection decision-making framework itself a checklist?

No. The GPhC describes its decision-making framework as an operational guide for consistent decisions, not an exhaustive checklist. This page organises a self-audit; it does not guarantee compliance or replace the standards and current guidance.

How should an online pharmacy prepare for a GPhC inspection?

Test the complete patient journey as well as the physical operation. Review website transparency, identity and age checks where relevant, clinical and prescribing governance, records, safeguarding, data access, delivery controls, follow-up, and the evidence connecting third-party services to the pharmacy's own risk management.

How often should a pharmacy use an inspection checklist?

Inspection readiness should be maintained throughout the year. Review higher-risk controls and recent incidents routinely, complete focused audits during the year, and run a full five-principle review after material service, staffing, premises or technology changes as well as at a planned annual point.

Strengthen the digital evidence behind your checklist

A technically sound website and traceable digital journey can make evidence easier to find and risks easier to control. Pharmacy Mentor reviews pharmacy websites, online prescribing journeys and supporting systems through a pharmacy-specific commercial and compliance lens.

Request a pharmacy website compliance check, or book a consultation with Pharmacy Mentor to discuss a wider digital review.

Important: This independent checklist is for general information and internal quality improvement. It is not GPhC-endorsed, is not exhaustive and does not constitute legal, regulatory or clinical advice. Always check the standards and guidance that apply to your pharmacy and services.