Documented governance for pharmacy access infrastructure
PAS™ gives pharmacists, pharmacy owners, banner groups and regulators a documented governance framework for pharmacist-controlled access infrastructure — with clear operating boundaries, evidence requirements, review processes and accountability. It is the standard that governs how PharmaSelf24™ and MedyBOX™ operate.
Structured. Documented. Pharmacist-governed. Auditable.
PAS™ does not replace, supersede or reinterpret pharmacy legislation, state or territory regulation, professional standards or regulator decisions. Jurisdictional requirements always take precedence. PAS™ is designed to help pharmacies document and evidence responsible operation within those requirements. State and territory regulatory bodies — including the Victorian Pharmacy Authority (VPA), the Pharmacy Council of NSW, the Pharmacy Regulation Authority South Australia (PRASA), the Pharmacy Board of Tasmania, the Pharmacy Board of WA, Queensland Health, ACT Health, NT Health, and AHPRA — retain full authority at all times.
For the most current regulatory requirements applicable to your pharmacy, consult the relevant state or territory authority directly.
A site-based assurance framework for pharmacy access infrastructure
PAS™ — the Pharmacy Access Standard — is Med-ID's governance framework for pharmacist-controlled pharmacy access infrastructure. It defines the operational, documentation, and oversight requirements that must be in place before any Med-ID system is deployed and maintained at a pharmacy site.
When a pharmacy carries the PAS™ mark, it means the site has been assessed against a defined set of criteria, the responsible pharmacist has acknowledged their governance obligations in writing, and the system is connected to Med-ID's monitoring platform for ongoing operational oversight.
PAS™ is not a marketing badge. It is the documented evidence that an installation is controlled, reviewable, and professionally governed — available to any stakeholder who needs to understand how the site operates.
Not the product
PharmaSelf24™ and MedyBOX™ are the physical systems. PAS™ is the framework that governs how they operate at every site.
Not a regulatory body
PAS™ does not replace or compete with state and territory pharmacy regulators. It is designed to support and align with their requirements.
Not a legal guarantee
PAS™ certification is not legal advice and does not constitute regulatory approval. Pharmacies remain responsible for all applicable compliance obligations.
A governance layer
PAS™ adds a structured, documented, pharmacist-governed operating layer that gives all stakeholders — including regulators, banner groups, and landlords — a clear basis for confidence.
The challenge is not just technical legality. It is approval confidence.
Pharmacy access infrastructure — systems that dispense prescriptions or provide retail access outside staffed hours — is lawful when properly governed. The barrier to adoption is rarely the law itself. It is the absence of a clear, documented framework that gives pharmacists, banner groups, landlords, and approval decision-makers the confidence to say yes.
For pharmacists
PAS™ protects pharmacist authority by making responsibility clear, documented and reviewable. The pharmacist remains the professional authority. PAS™ does not replace pharmacist judgement. Pharmacist sign-off is central. Product selection and boundaries are documented. Records protect the pharmacist if questions arise.
For banner groups and executives
PAS™ gives pharmacy groups a repeatable governance model for assessing, approving and scaling access infrastructure across multiple sites. Consistent rollout standards. Reduced ambiguity. Stronger brand protection. Regulator-facing documentation. Consistent member pharmacy guidance. Audit-ready evidence. Scalable framework for future infrastructure.
For regulators and landlords
PAS™ gives regulators a structured way to understand how Med-ID infrastructure is classified, governed, commissioned, monitored, reviewed and evidenced. Documented operating boundaries. Clear responsibility split. Audit-ready records. Incident escalation pathway. No claim to replace regulator authority. For landlords and site approvers, PAS™ helps show that Med-ID infrastructure is professionally governed, pharmacist-controlled, maintained, monitored and supported.
PAS™ is:
- a voluntary governance and certification framework
- administered by Med-ID
- designed to support responsible pharmacy access infrastructure
- based on documentation, operating standards, auditability and pharmacist control
PAS™ is not:
- a law
- a regulatory approval
- a replacement for state or territory requirements
- a shortcut around pharmacist responsibility
A structured path to certification
The first question most pharmacists and approval stakeholders ask is simple: what is the correct pathway? PAS™ provides a structured, documented pathway from initial site review through to governance preparation, authority pathway support where required, installation, commissioning, certification assessment and ongoing review.
Discovery Call
30–45 minutesA Med-ID representative discusses your pharmacy's circumstances — script volume, physical space, state regulatory framework, and operating model. This call determines which PAS™-certified system is appropriate and outlines the certification pathway.
Site assessment
On-site visitMed-ID conducts a physical site assessment to confirm installation feasibility, connectivity requirements, and alignment with installation standards. A detailed site report is produced and shared with the pharmacy.
Governance documentation
1–2 weeksMed-ID works with your pharmacy to prepare the required governance documentation: designated pharmacist nomination, standard operating procedures, product acknowledgements, and pharmacist sign-offs. Templates are provided for required governance records where appropriate.
State or territory authority pathway
Typical preparation: 2–4 weeksMed-ID supports the pharmacy to prepare any required state or territory submission, notification or approval material before installation. Where site and PAS™ documentation are complete, preparation is typically expected to take 2–4 weeks, subject to external authority timeframes.
Installation and commissioning
1–2 daysMed-ID installs and commissions the system. Staff training is conducted. The system is connected to Med-ID's remote monitoring platform.
Certification assessment
Final reviewMed-ID conducts a final certification assessment against all five criteria. When all criteria are satisfied, the PAS™ mark is granted, the pharmacy receives its certification documentation, and the site is listed as a PAS™-certified installation.
Ongoing certification
ContinuousMed-ID's remote monitoring platform provides continuous operational oversight. Periodic certification reviews are conducted. The PAS™ mark remains valid while certification criteria are maintained — and may be suspended if they are not.
Designed to support alignment with Australian pharmacy legislation, regulatory requirements and professional standards
Med-ID has developed a comprehensive governance system designed to ensure each deployment is aligned with applicable legislation, regulatory expectations, and pharmacy practice standards across Australia.
Every Med-ID deployment is pharmacist-controlled, SOP-governed, and aligned to jurisdiction-specific legislation before activation.
All systems are designed to ensure:
- No autonomous supply — all dispensing and supply authorisation occurs before patient access
- No unsupervised dispensing — a licensed pharmacist retains control and responsibility at all times
- Clear distinction from vending — PAS™ helps distinguish pharmacist-governed pharmacy access infrastructure from unmanaged, third-party or ungoverned vending-style operation
Professional pharmacy activities (including dispensing and clinical decision-making) remain clearly separated from logistical functions (including secure storage and collection), with control maintained at all times through pharmacist-led Standard Operating Procedures.
Applicable legislation and frameworks
National (Commonwealth) framework
- Health Practitioner Regulation National Law
- Therapeutic Goods Act 1989 (Cth)
- Privacy Act 1988 (Cth)
- Competition and Consumer Act 2010 (Cth) (Australian Consumer Law)
State and Territory legislation
Each deployment is aligned to the relevant medicines and poisons legislation, including:
- NSW: Poisons and Therapeutic Goods Act 1966 (NSW)
- QLD: Medicines and Poisons Act 2019 (Qld)
- VIC: Drugs, Poisons and Controlled Substances Act 1981 (Vic)
- WA: Medicines and Poisons Act 2014 (WA)
- SA: Controlled Substances Act 1984 (SA)
- TAS: Poisons Act 1971 (Tas)
- ACT: Medicines, Poisons and Therapeutic Goods Act 2008 (ACT)
- NT: Medicines, Poisons and Therapeutic Goods Act 2012 (NT)
Pharmacy Practice & Professional Standards
- State-based pharmacy legislation (premises and ownership)
- Pharmacy Board of Australia guidelines
- PSA Professional Practice Standards
Every PAS™-certified site must satisfy all three
The three pillars are not aspirational values. They are operational requirements — assessed before certification is granted and maintained for the mark to remain valid. These pillars are assessed through five PAS™ certification criteria: pharmacist governance, operational compliance, security and access control, connectivity and monitoring, and ongoing compliance.
Secure
Every PAS™-certified system operates under named pharmacist authority. Dispensing events and retail access are controlled by a licensed pharmacist — not by the system acting autonomously. The pharmacist's governance obligations are documented and acknowledged in writing before the system goes live.
Open 24/7
PAS™-certified systems extend pharmacy access beyond standard trading hours — providing patients with prescription collection and essential retail access when it is needed, not just when the dispensary counter is staffed. Operational availability is continuous; pharmacist oversight is built into the framework, not dependent on physical presence.
Contactless
PharmaSelf24™: Patient access is controlled through secure patient-specific collection credentials, with collection events logged and auditable. MedyBOX™: Transactions are logged by time, product, payment event and operational status, with stock, fault and connectivity monitoring available through the Med-ID platform.
Request the PAS™ Certification Pack
Med-ID governance documents are not publicly downloadable. They are provided by request to pharmacies, banner groups, regulators, landlords and approval stakeholders where appropriate. Submit a request and we will send the documents directly to your email following review by Med-ID.
Document access statement: Med-ID governance documents are provided on a request-only basis. Access is determined by Med-ID following review of the requesting party's credentials and intended use.
Premium Pharmacy Access Infrastructure Information Pack
Version 2.14.2.26 · 14 February 2026 · Customer Distribution
A broad introduction to Med-ID's pharmacist-governed pharmacy access infrastructure, including PharmaSelf24™, MedyBOX™, PAS™, commercial value, deployment pathways, and next steps.
PharmaSelf24™ Information Pack
Version 2.3.3.26 · 3 March 2026 · Customer Distribution
A customer-facing overview of PharmaSelf24™ secure prescription collection infrastructure, including pharmacist-authorised supply, patient collection workflow, access control, auditability, installation, and business case.
MedyBOX™ Information Pack
Version 2.18.3.26 · 18 March 2026 · Customer Distribution
A customer-facing overview of MedyBOX™ pharmacist-curated retail access infrastructure, including non-scheduled product range, operational model, customer benefits, governance, and commercial opportunity.
PharmaSelf24™ Pharmacy Access Standard
Version 2.2.4.26 · 2 April 2026 · Customer Distribution
The operational governance standard for PharmaSelf24™ deployments within the PAS™ framework, defining pharmacist authority, secure collection boundaries, access control, monitoring, incident management, records, and ongoing review.
MedyBOX™ Pharmacy Access Standard
Version 2.10.4.26 · 10 April 2026 · Customer Distribution
The operational governance standard for MedyBOX™ deployments within the PAS™ framework, defining product boundaries, pharmacist curation, planogram control, consumer safeguards, monitoring, incidents, records, and audit readiness.
PAS™ Privacy & Data Governance Statement
Version 2.24.4.26 · 24 April 2026 · Customer Distribution
A customer-facing governance statement explaining how privacy, data minimisation, access control, audit logs, record retention, transparency, support access, incident review, and pharmacist/pharmacy control apply to PharmaSelf24™ and MedyBOX™ systems operating within PAS™.
Five criteria. All five required.
PAS™ certification is assessed against five criteria (C1–C5), as defined in the PAS™ Accreditation Standards Document (PAS-AS-001). All five must be satisfied before the mark is granted, and maintained for the mark to remain valid. There is no partial certification.
The full standards — including the evidence required and assessment methods — are available in the PAS™ Certification Pack. Request the documents above to review the complete framework.
Evidence trail: PAS™ creates an audit-ready evidence trail across pharmacist responsibility records, SOPs, signed planograms where applicable, product boundaries, commissioning records, monitoring records, incident records, training records, periodic reviews and annual reassessment.
Ongoing compliance: PAS™ Certification is not a one-time claim. It is subject to ongoing compliance, review and renewal.
Pharmacist governance
- A named, licensed pharmacist must be designated as the responsible pharmacist for the system — not a role, a person.
- The pharmacist must approve all dispensing events (PharmaSelf24™) or the product range (MedyBOX™) before the system is operational. No system operates without pharmacist authorisation.
- The pharmacy must have documented standard operating procedures governing system use, reviewed and signed by the responsible pharmacist.
Operational compliance
- The system must operate within Australian pharmacy legislation and the applicable state or territory regulatory framework. Pharmacies remain responsible for all compliance obligations. PAS™ provides documentation and evidence of operational controls, not legal certainty.
- PharmaSelf24™: all dispensing, clinical review, counselling, and authorised supply must be completed before any prescription is loaded. Schedule 8 products are not permitted under any circumstances.
- MedyBOX™: only approved non-scheduled general retail pharmacy items may be stocked. The product category list is defined, documented, and pharmacist-approved.
Security and access control
- Patient access must be secured via a unique PIN or equivalent access control mechanism — every collection event is attributable to a specific patient.
- The system must maintain a complete, timestamped audit trail of all access events. This trail is available for review by the pharmacy, Med-ID, and relevant regulatory authorities.
- Physical security must meet Med-ID's installation standards for the operating environment.
Connectivity and monitoring
- The system must be connected to Med-ID's remote monitoring platform — providing real-time operational visibility.
- Transaction logs, system health data, and access events must be accessible to Med-ID's operations centre at all times.
- The pharmacy must maintain connectivity in accordance with Med-ID's technical requirements.
Ongoing compliance and review
- The pharmacy must participate in Med-ID's periodic operational review process. Certification is not a one-time event — it is maintained through ongoing oversight and operational alignment.
- Any material change to the system's operating environment, product range, or responsible pharmacist must be notified to Med-ID.
- The PAS™ mark may be suspended or withdrawn if certification criteria are not maintained. The framework has teeth.
PAS™ works with regulators, not instead of them
PAS™ is a voluntary operational framework developed by Med-ID. It is not a regulatory instrument and does not carry legal force. Pharmacies remain responsible for all compliance obligations with applicable pharmacy legislation and regulation. PAS™ does not replace, reframe, or reinterpret any Australian, state, or territory pharmacy legislation or regulation.
State and territory pharmacy regulation operates across three layers: local pharmacy business or premises oversight, state or territory health department administration of medicines and poisons law, and national practitioner regulation through AHPRA and the Pharmacy Board of Australia.
State & Territory Regulatory Authorities
Pharmacy Business / Premises Regulator
State / Territory Health Department Role
Victoria
Victorian Pharmacy Authority (VPA)
Victorian Department of Health
Medicines, poisons, public health and related regulatory administration
New South Wales
Pharmacy Council of New South Wales (PCNSW)
NSW Health
Medicines, poisons, pharmacy policy and related compliance functions
Queensland
Pharmacy Business Ownership Council (PBOC)
Queensland Health
Medicines, poisons, public health and related regulatory administration
South Australia
Pharmacy Regulation Authority South Australia (PRASA)
SA Health
Medicines, poisons, health policy and related compliance functions
Western Australia
Pharmacy-related premises / licensing oversight under WA regulatory framework
WA Department of Health
Medicines, poisons, pharmacy licensing and related regulatory administration
Tasmania
Tasmanian Pharmacy Authority (TPA)
Tasmanian Department of Health
Medicines, poisons and related health regulatory administration
Northern Territory
Pharmacy Premises Committee (PPC)
NT Health
Medicines, poisons and territory health regulatory administration
Australian Capital Territory
ACT pharmacy premises / licensing oversight through ACT health regulatory framework
ACT Health / Health Protection Service
Medicines, poisons, licensing, inspections and related compliance functions
Each state and territory has a health department or ministry that administers medicines and poisons law and related compliance functions. Pharmacy premises, ownership, and business regulation may also sit with a separate pharmacy authority, council, or committee. Pharmacist registration and professional regulation remain nationally regulated through AHPRA and the Pharmacy Board of Australia.
What PAS™ provides to pharmacies and pharmacists
- Documented standard operating procedures for system use
- Pharmacist acknowledgement of product controls (e.g. no Schedule 8 products in PharmaSelf24™)
- Defined and approved product category lists for MedyBOX™
- Incident reporting templates and compliance review schedules
- Complete audit trail of all access and dispensing events
What PAS™ provides to regulators and banner groups
- A consistent, auditable governance framework across all certified sites
- Evidence that pharmacist oversight is documented and enforced, not assumed
- A reference framework for assessing pharmacy access infrastructure installations
- Remote monitoring data accessible to support regulatory review if required
- Pharmacist-signed acknowledgements on file for all operational parameters
Important: PAS™ certification does not constitute legal advice, regulatory approval, or a guarantee of compliance with any applicable law or regulation. Pharmacies are responsible for obtaining all required approvals from the relevant state or territory regulatory authority before operating any pharmacy access infrastructure. Med-ID recommends that pharmacies seek independent legal and regulatory advice specific to their jurisdiction and circumstances.
PharmaSelf24™ and MedyBOX™ operate under different regulatory frameworks
This distinction is fundamental to the Med-ID compliance model. Each product is governed by a different regulatory position, with different operational requirements.
PharmaSelf24™ is pharmacist-authorised prescription collection infrastructure. Dispensing and supply approval occur before loading. Patient collection happens after pharmacist authorisation. No self-selection or vending occurs at the point of collection.
- State pharmacy authority notification or approval (jurisdiction-dependent)
- Pharmacist responsible for all dispensing and supply authorisation
- Patient access controlled through secure patient-specific collection credentials
- Collection events logged and auditable
- Physical security and CCTV requirements
- SOP documentation and staff training
MedyBOX™ is pharmacist-governed retail access infrastructure. Non-scheduled products only. No S2, S3, S4 or S8 medicines. Product range and planogram are approved and governed by the responsible pharmacist. Not prescription collection.
- Product range limited to non-scheduled items (no S2, S3, S4, S8)
- Pharmacist responsible for product curation, planogram and boundary governance
- Transactions logged by time, product, payment event and operational status
- Stock, fault and connectivity monitoring via Med-ID platform
- Physical security requirements
- Standard retail compliance (Australian Consumer Law)
How PAS™ addresses the real questions stakeholders ask
Approval decisions are rarely blocked by technical legality alone. They are held up by unanswered questions about control, accountability, and what happens when something goes wrong. PAS™ is designed to answer those questions before they are asked.
"Will this create compliance risk for my pharmacy?"
PAS™ certification means your system is operating under a documented governance framework — with named pharmacist responsibility, written SOPs, and a complete audit trail. If a question is ever raised, the evidence is already on file.
"Can we approve this consistently across our network?"
PAS™ applies the same criteria to every site. Banner groups can reference the framework when assessing member applications — knowing that every certified site has met the same documented standard.
"Is this a managed installation or an unattended machine?"
PAS™-certified systems are not unmanaged installations. They are pharmacist-governed, remotely monitored, and subject to ongoing operational review. The responsible pharmacist is named, documented, and accountable.
"What happens if something goes wrong?"
PAS™ provides a documented incident response process, a complete access audit trail, and a named pharmacist responsible for the site. Every event is logged, timestamped, and reviewable.
Request PAS™ Certification Pack
PAS™ exists because pharmacy access infrastructure must be more than convenient. It must be governed, documented, pharmacist-led and capable of being reviewed. That is the standard Med-ID is building.
The Discovery Call is free and carries no obligation. A Med-ID representative will discuss your pharmacy's circumstances, assess suitability, and outline the certification pathway — including state-specific regulatory context and implementation timeline.