Controlled Drug Storage in a Private Clinic: What the Law Actually Requires

The detailed controlled drugs cabinet specification that gets quoted at private clinics applies to five named categories of premises, and a doctors' surgery or private clinic is not one of them. What binds you is a shorter and more general duty in the same regulations.

That is not permission to keep controlled drugs in a desk drawer, and the rest of this article explains why you should still buy the cabinet. But it is worth understanding which rule you are actually complying with, because the people quoting the specification at you are usually selling it.

Where does the cabinet specification come from?

The Misuse of Drugs (Safe Custody) Regulations 1973. The Schedule to those regulations sets out a genuinely detailed construction standard, covering things like the gauge and welding of the sheet steel, a maximum clearance around the door, lock mechanisms with a minimum number of differing levers or pins, deadbolt dimensions, and fixing to the structure with rag bolts.

It is a real specification and it is precise. The question is who it applies to.

Which premises does it actually bind?

Regulation 3(1) of those regulations lists the premises the safe custody requirements attach to. There are five categories:

Retail pharmacy businesses
Nursing homes
Certain establishments under the Social Work (Scotland) Act
Mental nursing homes
Private hospitals under the Mental Health (Scotland) Act 1960

Doctors' surgeries and private clinics do not appear in that list. Neither does a private consulting room, a physiotherapy practice, or an aesthetics clinic.

This surprises people, and it is worth being clear about what it does and does not mean. It means the Schedule's construction standard is not the legal requirement placed on your premises. It does not mean controlled drugs are unregulated in your hands.

So what does bind a private clinic?

Regulation 5 of the same regulations, which is much shorter and considerably broader. The duty is to keep the drugs

in a locked receptacle which can be opened only by him or by a person authorised by him

That is the standard your clinic is actually held to. It is outcome-based rather than prescriptive: the container must be locked, and access must be limited to you or people you have authorised.

Note what regulation 5 does not do. It does not specify steel gauge, lock type or fixings. It also does not accept a drawer with a key that four people have copies of, because that fails the second half of the test.

If the specification does not apply, why buy the cabinet?

Because the legal minimum is not the standard you will be judged against in practice, and three separate things push in the same direction.

Inspection expectations. Where CQC or an equivalent inspector looks at controlled drugs handling, a compliant cabinet is what they expect to see. "Regulation 5 does not require it" is a technically correct answer that will make an inspection longer, not shorter.

Professional guidance. Royal Pharmaceutical Society guidance on the safe management of controlled drugs is the reference standard across healthcare, and it points to secure storage of the kind the Schedule describes.

Your own risk. A locked receptacle that is not a proper cabinet is easier to remove entirely. Theft of controlled drugs from a clinic is a serious incident whatever the regulations say about the container it came from.

So the practical advice is unchanged: buy a compliant cabinet, fix it properly, and control the keys. The point of this article is that you should do it because it is good practice and the expected standard, not because a vendor told you the 1973 Schedule compels you. Understanding which rule binds you also tells you where you have genuine discretion, which matters when you are fitting out a small room.

Do I need a controlled drugs register?

This is the requirement more often missed than the cabinet, and it has fewer exceptions than people assume.

Regulation 19 of the Misuse of Drugs Regulations 2001 requires a register to be kept by every person authorised to supply Schedule 1 or Schedule 2 controlled drugs. There are three narrow exemptions, covering destruction, supply under a licence direction, and certain ward sisters and midwives.

There is no blanket exemption for doctors. If you supply Schedule 2 controlled drugs, you keep a register.

The register has its own requirements: bound rather than loose-leaf if kept on paper, or a compliant computerised system; entries made on the day of the transaction or the following day; entries not cancelled, obliterated or altered, with corrections made by dated marginal note or footnote.

That last rule is the one that most resembles clinical record-keeping, and for the same reason. A record you can silently change is a record nobody can rely on.

What does a compliant setup look like?

Six things, in the order most clinics get them wrong.

A locked receptacle meeting regulation 5, in practice a proper cabinet, fixed to the structure
Controlled key access. Named people, a known number of keys, and a process when someone leaves
A controlled drugs register kept to the regulation 19 requirements, with corrections by dated footnote rather than by amendment
Running balances checked, so a discrepancy is found in days rather than at an inspection
A destruction process with the required witnessing for the relevant schedule
A written procedure covering all of the above, so the answer to "how do you manage this" is a document rather than a description

Keep the drugs register separate from your clinical system. Prescribing and administration are recorded in the patient's clinical notes, and that record needs the same qualities: contemporaneous, attributable to a named clinician, and amendable only in a way that leaves the original visible. Systems like Atlacare lock a note on sign off and keep a versioned audit trail, which is the same principle regulation 19 applies to the register.

The honest summary

The cabinet specification you keep being quoted is real law that does not apply to your premises. The duty that does apply is shorter, broader, and easier to satisfy on paper.

Satisfy the higher standard anyway. Then spend the attention you have left on the register, the balances and the key control, because those are where private clinics actually come unstuck, and no cabinet fixes any of them.

This is general information about the regulatory framework, not legal or pharmaceutical advice. Requirements vary with the schedule of the drug, the nation of the UK and the nature of the premises. Take advice from your accountable officer, your indemnity provider or a pharmacist before setting up controlled drugs handling, and confirm the current regulations, which are amended regularly.

Sources: Misuse of Drugs (Safe Custody) Regulations 1973 · Misuse of Drugs Regulations 2001, regulation 19 · Royal Pharmaceutical Society, safe management of controlled drugs