PCN Compliance Guide: Digital Record-Keeping for Nigerian Pharmacies

Digital record-keeping is no longer optional for Nigerian pharmacies. The Pharmacists Council of Nigeria (PCN) and the National Agency for Food and Drug Administration and Control (NAFDAC) have both intensified enforcement of record-keeping requirements in recent years. At the same time, the Nigeria Data Protection Act (NDPA) imposes new obligations on any business that handles patient personal data.

This guide breaks down exactly what PCN and NAFDAC require from Nigerian pharmacies in terms of digital records, and how modern pharmacy management software in Nigeria can make compliance straightforward rather than burdensome.

What the Pharmacists Council of Nigeria requires

The PCN's guidelines for community and hospital pharmacies mandate the following record-keeping obligations:

• Prescription register: All dispensed prescriptions must be recorded, including the date, prescriber name, patient name, drug name, strength, quantity dispensed, and directions.
• Controlled substances register: Schedules II and III controlled substances require a separate, dedicated register with mandatory entries for each dispensing event.
• Stock reconciliation: Records showing incoming stock, outgoing stock (sales), and balance-on-hand must be maintained and available for inspection.
• Batch records: For all pharmaceutical products, batch numbers and expiry dates must be documented at the point of purchase and linked to dispensing records.

What NAFDAC requires

NAFDAC's focus is primarily on the product supply chain and the documentation of drug quality and authenticity. For retail pharmacies, the key requirements are:

• Purchasing only from licensed and approved pharmaceutical distributors.
• Maintaining supplier records and purchase invoices for all products.
• Batch and expiry records that allow rapid response to product recalls.
• Cold-chain documentation for temperature-sensitive products.

NDPA obligations for pharmacies handling patient data

The Nigeria Data Protection Act (NDPA) 2023 defines personal data as any information relating to an identified or identifiable individual. For pharmacies, this includes:

• Patient names, addresses, and contact details.
• Prescription records and medication history.
• Payment information.

Under the NDPA, pharmacies must:

• Process patient data lawfully and transparently.
• Store data securely and limit access to authorised staff.
• Retain data only as long as necessary.
• Respond to patient data access requests within 30 days.
• Notify patients of data breaches within 72 hours.

How digital pharmacy management software supports compliance

Manual paper records are inherently non-compliant in several ways: they cannot be searched quickly for an audit, they are vulnerable to damage or loss, and they make tracking specific batches in a recall scenario extremely difficult. A modern pharmacy management software platform addresses all of these issues:

Automatic prescription logging

Every Rx dispensed through Qwiva's POS is automatically logged with all required fields — date, prescriber, patient, drug, batch number, and quantity. The prescription register is always up to date and searchable in seconds.

Batch and expiry tracking built-in

Every purchase order received in Qwiva is logged with the supplier's invoice, batch numbers, and expiry dates. If NAFDAC issues a recall for a specific batch, you can identify affected inventory instantly and pull the dispensing records for that batch.

Role-based access control for NDPA compliance

Qwiva's staff management module allows you to assign different access levels to different staff roles. Dispensing staff can access prescription records. Management can access reports. The owner has full access. This limits data exposure and supports NDPA compliance.

Data encryption and secure cloud storage

All data in Qwiva is encrypted in transit (TLS 1.2+) and at rest (AES-256), with daily automated backups. Your patient records and business data are protected even in the event of a device theft or office break-in.

Practical steps to achieve compliance today

1. Adopt a pharmacy management system that logs prescriptions automatically.
2. Ensure batch and expiry tracking is enabled for all pharmaceutical products.
3. Set up role-based access so only authorised staff can view patient records.
4. Review your supplier list to confirm all suppliers are NAFDAC-licensed.
5. Display a data privacy notice in your pharmacy informing patients how their data is used.

PCN and NAFDAC compliance does not have to be a burden. With the right pharmacy management software, it becomes an automatic by-product of your day-to-day operations.