Standard operating procedure

Patient Identity Verification Procedure

How [Organisation Name] verifies and re-confirms the identity of patients in a remote or online service, at registration, at each clinical contact and before any prescription, so that care is given to the right person and the right record

For Telehealth & Online ClinicRef BS-TEL-SOP-001See a sample (PDF) →
£39.99
One-off purchase · no VAT · instant download
  • Instant download after checkout
  • Editable Microsoft Word (.docx)
  • Mapped to the CQC standards
  • Optional 3-monthly updates

What's inside

This standard operating procedure is fully drafted and structured, ready to brand and complete for your service. It covers:

  • 1. Purpose
  • 2. Scope
  • 3. Definitions and abbreviations
  • 4. Responsibilities
  • 5. Procedure
  • 6. Identity-verification checklist
  • 7. When identity cannot be confirmed - escalation and edge cases
  • 8. Records and data protection
  • 9. Related documents
  • 10. Review and version control
  • 11. Disclaimer

Legislation & standards it maps to

  • Health and Social Care Act 2008 (Regulated Activities) Regulations 2014 - Regulation 9 (Person-centred care) and Regulation 12 (Safe care and treatment)
  • Care Quality Commission (CQC) single assessment framework
  • General Medical Council, Good medical practice (2024)
  • General Medical Council, Good practice in prescribing and managing medicines and devices (2021), including its guidance on remote prescribing
  • General Pharmaceutical Council, Guidance for registered pharmacies providing pharmacy services at a distance, including on the internet
  • Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR)

Who it applies to

All doctors, non-medical prescribers, pharmacists, registered nurses and other clinicians, together with clinical support staff, registration and onboarding staff, customer service and administrative staff, and the registered manager or [Insert Job Title] at [Organisation Name] who register patients, conduct remote consultations, prescribe, or handle patient identity at a distance

Glossary

Plain-English explanations of the technical terms and legislation used in this document.

Asynchronous consultation
A consultation where the clinician and patient are not present at the same time, for example an online questionnaire the clinician reviews later.
Care Quality Commission (CQC)
The independent regulator of health and social care services in England.
Controlled drug
A medicine whose supply, storage and records are tightly restricted by law because of its potential for misuse.
Data Protection Act 2018
The UK law that sits alongside the UK General Data Protection Regulation and governs how personal information is handled.
Digital identity verification service
An electronic service that confirms who a person is by checking their documents, a face match and trusted data sources to a set standard.
Duty of candour
The legal duty to be open and honest with a person and their family when something goes wrong with their care.
General Medical Council (GMC)
The body that registers doctors in the UK and sets the standards they must follow.
General Pharmaceutical Council (GPhC)
The body that registers and regulates pharmacists and pharmacies in Great Britain.
Good medical practice
The General Medical Council's core guidance setting out the professional standards expected of doctors.
Liveness / face-match check
A check that the person on video is a real, live individual and that their face matches the photo on their identity document.
Photographic identity document (photo ID)
A government-issued document showing the holder's photograph, full name and date of birth, such as a passport or photocard driving licence.
Prescription-only medicine (POM)
A medicine that may lawfully be supplied only on the instruction of an appropriate prescriber.
Proxy
A person acting on a patient's behalf, such as a parent, guardian, carer or someone with the proper authority to act.
Regulated activity
A type of care or treatment the law requires a provider to register with the regulator to deliver.
Registered Manager
The person registered with the regulator as responsible for the day-to-day running of a service.
Remote prescribing
Prescribing a medicine without a face-to-face appointment, for example after a video, telephone or online consultation.
Risk assessment
A structured check identifying what could cause harm and what is being done to prevent it.
Safeguarding
Protecting people's health, wellbeing and rights and keeping them safe from abuse, harm or neglect.
Single assessment framework
The structure the regulator uses to judge a service, built around quality statements and five key questions (safe, effective, caring, responsive, well-led).
Special category data
Sensitive personal information, including health data, that data-protection law gives extra protection.
Standard Operating Procedure (SOP)
A written, step-by-step instruction setting out how a particular task is to be carried out consistently and safely.
UK General Data Protection Regulation (UK GDPR)
The UK's main data-protection law governing how personal information is collected and used.

How it works

  1. Buy securely with Stripe - instant, no VAT, no account needed.
  2. Download your editable Word file from the link we email you straight away.
  3. Complete the placeholders for your service, then have it approved before use.
  4. Add the optional updates subscription and we keep it current as guidance changes.

Related documents

PolicyTelehealth Consent Policy£54.99
PolicyCybersecurity Policy£54.99
PolicyRemote Assessment Policy£54.99
PolicyData Protection Policy£54.99

Need the whole set?

Buy the full Telehealth & Online Clinic pack and save versus buying documents individually.

View the Telehealth & Online Clinic pack