Record-Keeping Obligations for Prescribers

The paperwork nobody talks about

Sixty-three pages. That's roughly how long the current Poisons Standard runs before you get to the cannabis scheduling entries , and the record-keeping obligations don't get their own tidy chapter. They're spread across Commonwealth instrument, state and territory legislation, and the TGA's access pathway conditions. I've lost a few Saturday mornings to this (Trevor the sourdough starter was more patient than I was) and the short version is: the documentation burden on prescribers is real, it varies by pathway, and getting it wrong can cost an Authorised Prescriber their approval.

This article maps out what those obligations actually look like.

Two access pathways, two sets of obligations

Most medicinal cannabis in Australia reaches patients through one of two routes: the Special Access Scheme (SAS), specifically the Category B pathway, or the Authorised Prescriber (AP) scheme. Both sit under the Therapeutic Goods Act 1989 (Cth) and the Therapeutic Goods Regulations 1990, but they carry different administrative shapes.

Under SAS-B, the prescriber submits an application to the TGA before supply. The approval is patient-specific and product-specific. Once granted, a copy of that approval effectively becomes a foundational record , it documents the regulatory basis on which the product was prescribed. Prescribers must retain records consistent with their professional and jurisdictional obligations, which we'll get to below.

The AP pathway works differently. Approval is granted to the prescriber for a specific indication and patient class, so the upfront TGA paperwork shifts. But the ongoing record-keeping weight actually increases: Authorised Prescribers are required to submit biannual reports to the TGA detailing the number of patients treated, and they must maintain records sufficient to support those reports. Missing a reporting cycle isn't a minor admin slip , it's a compliance failure that can trigger suspension of AP status.

What the Poisons Standard actually says

Cannabis products containing tetrahydrocannabinol above certain thresholds are listed as Schedule 8 controlled drugs under the Poisons Standard. Lower-THC products, particularly those primarily containing cannabidiol, may be Schedule 4 (prescription only) depending on concentration. The scheduling matters for record-keeping because Schedule 8 obligations are significantly stricter than those for Schedule 4.

For Schedule 8 substances, state and territory controlled drugs legislation imposes its own layer. In most jurisdictions this means:

• A written prescription on a compliant form (some jurisdictions require specific government-issued pads or electronic equivalents).
• Retention of a copy of the prescription for a minimum period; commonly five years, though this varies. The ACT's Medicines, Poisons and Therapeutic Goods Act 2008 is the relevant instrument here for practitioners working in this territory.
• In several jurisdictions, mandatory entry into a state-run controlled drugs register or real-time prescription monitoring system (SafeScript in Victoria, for instance).
• Record of supply quantity, batch details, and patient identification.

It's worth pausing on that last point. Product batch details. This is where some prescribers fall over, particularly early in their medicinal cannabis prescribing. Unapproved medicinal cannabis products accessed through SAS or AP pathways are not listed on the Australian Register of Therapeutic Goods (ARTG) in the standard sense, though they must still meet TGA manufacturing requirements including Good Manufacturing Practice (GMP). Recording the batch number isn't bureaucratic pedantry; it's the thread that allows a product recall or adverse event investigation to be traced. I'd argue this is actually the most practically important record a prescriber keeps, and it's often the one glossed over in onboarding materials from the access platforms.

The TGA's own conditions of approval

Beyond state scheduling law, the TGA attaches specific conditions to both SAS approvals and AP designations. For Authorised Prescribers, the published conditions require that records be kept for each patient, including:

• The indication for which the product was prescribed.
• The product name, form, and strength.
• The quantity prescribed and the period of prescription.
• The dates of any follow-up consultations and any adverse events reported.

That adverse event reporting piece connects directly to the TGA's pharmacovigilance framework. Prescribers have an obligation, not just a courtesy; to report serious adverse events through the TGA's reporting portal. The record they keep is the source document for any such report. In practice, this means clinical notes need to capture more than "patient doing well." Changes in dosing, any concurrent medications, and patient-reported outcomes all belong in the record if they're potentially relevant to the product being used.

Some of what gets prescribed is quite chemically specific, a product might be a full-spectrum oil carrying a range of cannabinoids including minor ones, or a more refined preparation. Understanding what's in the product (which is a separate topic to record-keeping, but adjacent) informs which scheduling bucket it sits in and, therefore, which record-keeping regime applies. It's not unusual for a prescriber to have one patient on a Schedule 4 CBD-dominant product and another on a Schedule 8 product containing meaningful THC, and the paperwork for each looks different.

State and territory variation, a genuine headache

The Commonwealth TGA framework sits on top of state and territory controlled substances law, and the interaction isn't always smooth. This is, honestly, one of the messier corners of the regulatory structure. A prescriber seeing patients across multiple jurisdictions; telehealth makes this very common now, faces a patchwork of retention periods, prescription form requirements, and monitoring system obligations.

Queensland, New South Wales, Victoria, South Australia, Western Australia, the ACT, the Northern Territory, and Tasmania all have their own controlled drugs instruments. Most align roughly on the five-year retention requirement for Schedule 8 records, but the specific prescription form requirements and the real-time monitoring obligations vary. Victoria's SafeScript system requires real-time recording of Schedule 8 prescriptions at point of supply. Other jurisdictions have their own or are in various stages of adoption. Prescribers operating across state lines should not assume their home jurisdiction's requirements satisfy those of the state where the patient resides, and for telehealth prescribing, the patient's jurisdiction typically governs.

Biannual reporting under the AP scheme

This is the one that catches people off guard most often. Authorised Prescribers must submit reports to the TGA every six months covering their prescribing activity. The report doesn't require individual patient data; it's aggregate, but you can't produce it accurately without good underlying patient records. The TGA has made clear in its published guidance that failure to submit these reports is grounds for revocation of AP status.

The reporting window is tight: reports are due within 30 days of the end of each six-month period. Set a calendar reminder. Better yet, maintain a running log so the report is essentially compiled already by the time the window opens. I've seen AP status suspended over missed reports that the prescriber was genuinely unaware of, not through negligence, but because no one had clearly explained the biannual obligation at the point of approval.

What "minimum" retention actually means in practice

Legislative minimums are floors, not optimal practice. Clinical records in Australia are generally expected to be retained for a minimum of seven years from the date of last entry for adult patients (longer for minors; typically until the patient turns 25). Professional indemnity insurers routinely recommend keeping records for the full duration of a potential claim window. Given that medicinal cannabis prescribing is a relatively recent and still-scrutinised practice, erring on the side of longer retention is sensible. Any adverse event that surfaces years after prescribing will be assessed against the records that exist at that point.

Electronic records are fine, preferable, in most cases, provided they're backed up, access-controlled, and compliant with the Privacy Act 1988 (Cth) requirements for health information. A spreadsheet on a personal laptop is not adequate infrastructure for controlled drug records.

Sources

• Guidance for prescribers of medicinal cannabis; Therapeutic Goods Administration (TGA)
• Poisons Standard (current instrument), Federal Register of Legislation
• Authorised Prescribers of medicinal cannabis, Therapeutic Goods Administration (TGA)
• About medicinal cannabis; Australian Government Department of Health and Aged Care

, Marcus Hale, Regulatory researcher, TGA & access law