On 2 February 2026, the Prescription Medicines Code of Practice Authority (PMCPA) published a substantive revision of its social media guidance—the third iteration since 2016 and the first structural overhaul since the dedicated document issued in January 2023. The revision reflects a compliance pattern that has become difficult for pharmaceutical companies to ignore: organisations have engaged social media influencers to communicate health-related content without putting the necessary contractual, medical, transparency and pharmacovigilance controls around that activity.
The 2026 guidance is therefore more than a clarification of platform etiquette. It recalibrates how companies should think about responsibility for third-party digital communications. Where an influencer is engaged, briefed, paid or otherwise supported by a pharmaceutical company, the company must be able to explain what the relationship was for, what the influencer was permitted to say, who reviewed the material, how disclosure was handled and how safety information was captured after publication.
The underlying principle is familiar. Under the ABPI Code of Practice, a company can remain responsible for material communicated by a third party acting on its behalf. That may include posts, videos, stories, shares and other forms of digital interaction. The practical difficulty lies in determining the scope of that responsibility. Not every influencer communication presents the same regulatory risk, and the assessment cannot be reduced to the size of the account or the professional label attached to its owner.
A public-facing patient advocate, a lifestyle creator, a pharmacist and a consultant physician may all be engaged by a company, but they do not communicate with the same audience or in the same context. The applicable controls must reflect those differences while still preserving the company’s responsibility for the arrangement it has created.
The 2026 PMCPA Shift: Redefining Corporate Accountability for Third-Party Content
The PMCPA’s February 2026 guidance supersedes the January 2023 version and brings previously dispersed positions into a more navigable framework. It is organised around practical questions: what type of influencer engagement is being undertaken, how should the relationship be disclosed, what material requires review, and what can be learned from previous complaints and rulings?
That structure matters because influencer programmes often fail at the interfaces between departments. Marketing may commission the content. An external agency may brief the influencer. Medical or regulatory teams may review only the campaign landing page. Pharmacovigilance may not be told that comments and direct messages are part of the channel. Each individual decision can appear limited; together, they create a programme for which no one can produce a complete compliance record.
A paid post is not automatically indistinguishable from every other communication made under the company’s name. The relevant questions include:
- Was the influencer acting on behalf of the company or speaking independently?
- Was the content commissioned, approved, supplied with claims or materially shaped by the company?
- Was the communication directed at the public, healthcare professionals or a mixed audience?
- Does the content contain product information, disease-awareness material, patient experience or general health education?
- Did the company provide remuneration, free goods, access, training or other support?
- Could the audience reasonably understand the communication as promotional?
These questions do not eliminate corporate responsibility where it exists. They establish it with greater precision.
A company that contracts an influencer to deliver a defined campaign will generally need a stronger control environment than a company that encounters an unsolicited, independent discussion of a disease area. Likewise, communications aimed at healthcare professionals may engage different provisions and expectations from public-facing communications. The professional standing of the influencer is relevant to the audience, the context and the way the content may be understood; it is not a universal exemption from ABPI requirements.
The same applies to audience size. Reach can affect exposure, reputational impact and the resources needed for monitoring, but it does not by itself determine whether a communication is within scope. A small account can still publish a promotional claim, create a product-identifying impression or generate an adverse event report. A large account may be used for disease-awareness material that remains non-promotional if it is carefully designed and controlled. The assessment is contextual rather than purely numerical.
Corporate responsibility follows the substance of the relationship, not the label attached to the influencer or the platform used to publish the content.
The documentary record remains central. A company should be able to reconstruct the engagement from the initial brief to the final published version and subsequent monitoring. That does not mean every programme requires the same level of bureaucracy. It does mean that a company relying on informal messages, verbal instructions and post-publication corrections will struggle to demonstrate control if the content is challenged.
Beyond the Hashtag: Why Standard Disclosures Fail ABPI Transparency Standards
Standard social media disclosures such as #ad, #sponsored or platform-native paid partnership labels may be useful, but they are not a substitute for a compliant engagement structure. They tell the audience that a commercial relationship may exist. They do not, by themselves, explain who commissioned the content, what the influencer was asked to communicate, whether the company reviewed the claims or how the material fits within the company’s broader programme.
The distinction is important. A disclosure is primarily an audience-facing transparency measure. ABPI compliance also depends on the company’s internal evidence: the agreement, the briefing, the approved claims, the review history and the controls applied before and after publication.
A robust disclosure approach normally addresses several separate issues:
- the existence of a commercial or consultancy relationship;
- the identity of the company behind the engagement, where that is not clear from the account or post;
- the nature and limits of the influencer’s role;
- whether the communication is educational, disease-awareness, service-related or promotional;
- any material connection that could affect how the audience assesses the content.
The wording should be clear enough for the intended audience and visible in the content’s normal viewing context. A disclosure buried after a long caption, hidden behind a platform expansion function or separated from the relevant claim may not provide meaningful transparency. Nor should a company assume that a platform’s label will remain visible if the content is republished, clipped, embedded or converted into another format.
The issue becomes more difficult when an influencer creates content in their own style. Authenticity is often the reason for using an influencer, but authenticity cannot mean unrestricted improvisation where the subject matter involves medicines or health claims. The company should define what can be discussed, what must not be implied, when the influencer must refer questions to an approved source and how edits will be handled. The influencer’s voice can remain distinctive without allowing unsupported efficacy claims, unbalanced comparisons or product promotion to emerge from an open-ended brief.
A medical signatory review should be proportionate to the content and its intended audience. A post limited to general information about a disease area may require a different review from a video discussing treatment options, trial findings or a patient’s experience with a named medicine. The review record should show not only that someone approved the final draft, but also what was reviewed and whether the published version differed from the approved version.
The following distinction is useful in practice:
| Compliance element | Stronger practice | Higher-risk practice |
|---|---|---|
| Engagement documentation | A written agreement defining the service, audience, deliverables and permitted subject matter | An informal arrangement managed through scattered messages |
| Disclosure | Clear identification of the commercial relationship, adapted to the platform and audience | Reliance on a generic hashtag whose meaning or visibility is uncertain |
| Claims review | Medical, regulatory or legal review appropriate to the content and audience before publication | General approval of a campaign concept without review of the actual wording |
| Version control | Retained copies of the brief, approved draft, final post and later amendments | No reliable record of what was approved or published |
| Safety monitoring | A named route for escalating adverse event and product complaint information | Reliance on the influencer or community manager to recognise and forward reports |
| Oversight | Periodic checks that the influencer continues to follow the agreement | Treating publication as the end of the company’s responsibility |
A company should also consider the lifecycle of the content. Stories disappear, comments accumulate, videos are edited into short clips and users may ask questions that change the meaning of the original post. Transparency and review controls should therefore cover foreseeable derivatives of the campaign, not just the first version uploaded by the influencer.
Navigating Clause 24: Structuring Influencer Engagements as Compliant Consultancies
Clause 24 of the ABPI Code provides a framework for contracted services and consultancy arrangements. It can be relevant to influencer work where the individual is engaged to provide a defined service, such as participating in an educational initiative, creating agreed content or contributing professional or patient expertise. It should not be treated as a convenient label that turns an otherwise uncontrolled endorsement into a compliant consultancy.
The arrangement needs a genuine service rationale. The company should be able to explain why the influencer’s contribution is required, what they will do, who the service is intended to benefit and how the remuneration relates to that service. The agreement should also make clear that the influencer is not free to make unsupported claims or depart from the approved purpose of the engagement.
A workable consultancy structure commonly includes:
1. A written agreement. This should identify the parties, describe the service, define the intended audience and set out the content and conduct requirements. It should address disclosure, confidentiality, intellectual property, review rights, records and the handling of safety information.
2. A focused briefing. The briefing should distinguish permitted disease-awareness or educational content from product claims and should explain which subjects require escalation. It should also make clear that the final published material must correspond to the approved version.
3. A review and approval record. The company should retain the material that was reviewed, the comments made, the final approval and any documented changes. Approval of a broad campaign theme is not necessarily approval of every subsequent caption, video or response.
4. A payment rationale. Remuneration should be proportionate to the service and documented. The calculation should not encourage the influencer to maximise risky engagement through sensational claims, unapproved comparisons or repeated product references.
5. A monitoring and termination mechanism. The agreement should set out what happens if the influencer publishes unauthorised material, fails to disclose the relationship, receives a safety report or continues to use content after the engagement has ended.
The company’s agency arrangements also need attention. Outsourcing the campaign does not necessarily outsource the company’s obligations. If an agency selects the influencer, writes the brief, reviews the draft or manages the comments, the pharmaceutical company should still know what controls the agency applies and retain sufficient oversight to demonstrate that those controls are operating.
Remuneration is another area where informal practice can create avoidable risk. Payment may take different forms, including a fee, reimbursement, access to an event or provision of services. Whatever the form, the arrangement should be transparent and properly recorded. Product gifting, free samples or expenses handled outside the written agreement can create additional questions about inducement, value transfer and the true nature of the relationship.
The distinction between a consultancy and an endorsement is not semantic. A consultancy has a defined service, a documented purpose and controls around what the individual is asked to do. An endorsement arrangement may instead be built around the expectation that the influencer will express favourable views or generate attention. If the latter is the real purpose, calling it a consultancy will not resolve the underlying compliance concern.
Clause 24 works when it describes a real, documented service. It is not a compliance wrapper for an informal endorsement.
The Prohibition of POM Promotion: Managing Boundaries in Digital Health Advocacy
Prescription-only medicine promotion to the public is prohibited under the relevant UK framework, including the ABPI Code. The difficult cases are rarely the obvious advertisement with a product name, pack shot and purchase-oriented message. They arise when disease-awareness material, patient storytelling or educational content gradually becomes identifiable as an invitation to consider a particular medicine.
The correct question is not whether one isolated word appears on screen. It is whether the communication, viewed in context, has a promotional purpose or effect in relation to a prescription-only medicine. The assessment may take account of the wording, imagery, sequencing, links, hashtags, calls to action, surrounding campaign material, audience and the company’s role in creating the content.
A reference to a molecule, formulation, trial or treatment approach is therefore not automatically prohibited in every setting. The context matters. A scientific discussion directed to an appropriate healthcare-professional audience may be assessed differently from a public-facing video that uses the same reference to steer patients toward a branded treatment. A neutral account of research may differ from a message that presents the research as a reason to seek a particular product. The company’s purpose and the likely effect on the audience must be examined together.
The same contextual analysis applies to indirect identifiers. Colour, packaging, device design, a distinctive dosing routine or a recognisable campaign phrase may contribute to product identification, but none is automatically determinative in isolation. The question is whether the overall presentation makes a specific medicine identifiable and promotes it to an audience for whom such promotion is not permitted.
Disease-awareness campaigns can be appropriate where they provide balanced, non-promotional information and do not function as disguised product advertising. They become higher risk when they:
- describe a treatment’s claimed benefits without naming it;
- use a distinctive product image or visual identity;
- invite the public to ask a healthcare professional about a particular treatment;
- direct users to a company-controlled page that makes the product connection clear;
- pair a general disease message with a product-specific call to action;
- use patient stories in a way that presents a medicine as the expected or preferred solution.
A medical signatory review should test the whole user journey, not just the individual influencer post. The reviewer should consider the profile, linked pages, pinned content, comments, paid amplification, campaign hashtags and any follow-up material supplied by the company. A post that appears neutral on its own may become promotional when read alongside the landing page to which it directs users.
Healthcare professional influencers require particular care. Their qualifications may make an audience more likely to treat their statements as authoritative, but professional status does not automatically convert public promotion of a prescription-only medicine into permissible professional communication. The intended audience, the channel and the purpose of the message remain relevant. At the same time, it would be inaccurate to treat every communication by a healthcare professional as equivalent to one made by a general lifestyle influencer. The reviewer should identify whether the communication is genuinely directed to healthcare professionals, whether access is controlled and whether the content is suitable for that audience.
A practical pre-publication assessment can ask:
1. Who is expected to see the content?
2. What is the company trying to achieve through the communication?
3. Is a medicine named, identifiable or made identifiable through the surrounding material?
4. Does the content contain a claim about efficacy, safety, mechanism, superiority or treatment choice?
5. Would the audience reasonably understand the message as encouraging use or inquiry about a specific medicine?
6. Does the influencer’s credibility amplify the promotional force of the message?
7. What happens when the audience follows the link, reads the comments or encounters related campaign content?
If the answers point towards product promotion to the public, the content should not be rescued by changing a hashtag or adding a general disclaimer. It needs to be redesigned, redirected to an appropriate audience or abandoned.
Pharmacovigilance in the Feed: Monitoring Adverse Event Reporting in Influencer Channels
Influencer channels create a pharmacovigilance challenge because safety information may appear in places that were designed for engagement rather than reporting. A follower may describe an adverse experience in a comment, mention a product in a direct message, reply to a temporary story or tag the influencer in a separate post. The message may be incomplete, misspelled, multilingual or mixed with speculation. It may still require assessment and escalation.
The company’s responsibility is not to treat every online statement as a confirmed adverse reaction. It is to maintain a process for recognising potentially relevant information, capturing it, seeking clarification where appropriate and passing it to the pharmacovigilance function under the company’s procedures.
That process should cover more than the visible post. Depending on the engagement, monitoring may include:
- comments and replies on the influencer’s content;
- direct messages sent to the influencer or the company;
- mentions and tags on related posts;
- temporary or disappearing content;
- questions submitted during live broadcasts;
- reposts and user-generated derivatives of the original material;
- comments on paid advertisements or linked campaign pages.
The monitoring frequency should reflect the channel, the volume of interaction, the nature of the content and the potential seriousness of the information. A company should define who reviews the channel, what training they receive, how they record a possible report and when the information is transferred to pharmacovigilance. Community managers do not need to make the final medical assessment, but they do need enough training to recognise that a seemingly casual comment may require escalation.
The 2026 guidance’s practical message is not that every social media report is processed through an identical clock. Legal pharmacovigilance obligations, applicable reporting timelines and internal escalation targets are related but not interchangeable. A company may set a short internal target—for example, asking staff to forward potential safety information within the same working day or within 24 hours—but that operational target should not be presented as a universal statutory reporting deadline for every comment on every platform.
The applicable timeline can depend on the nature of the information, when the company or a person acting on its behalf became aware of it, whether minimum criteria for a valid case are available, and the relevant UK and international pharmacovigilance requirements. Seriousness, validity and reportability may need to be assessed by qualified pharmacovigilance personnel. An incomplete comment may require follow-up; a product complaint may follow a different route from an adverse reaction; and an apparent duplicate may need to be reconciled with an existing case.
This is why the influencer agreement and briefing should include a clear safety route. The influencer should know that they must not diagnose, dismiss or publicly debate a potential adverse reaction on the company’s behalf. They should know where to direct the individual and how to notify the company or designated contact. The company should also decide whether the influencer’s own account will be monitored directly or whether the agency and platform arrangements provide a reliable alternative.
A useful operating model separates three functions without isolating them:
| Function | Primary responsibility | Required connection |
|---|---|---|
| Marketing or partnerships | Scope of the engagement, agency oversight and campaign delivery | Must inform medical, compliance and pharmacovigilance teams about the channels and content |
| Medical and compliance | Review of claims, audience, disclosure and promotional risk | Must understand how the approved content will be monitored after publication |
| Pharmacovigilance | Assessment, follow-up, case processing and reporting | Must have timely access to comments, messages and records captured by the campaign team |
The interface between those functions should be tested before launch. A tabletop exercise can use a hypothetical comment containing a product name and a reported symptom to determine who sees it first, what is recorded, how the influencer responds, whether the comment is preserved and how the information reaches the safety database. Testing is more useful than assuming that a general social media policy will cover a bespoke influencer programme.
Moderation also requires care. Removing a comment may be appropriate under a platform policy, but deletion should not erase information that the company may need for pharmacovigilance or complaint handling. The organisation should have a process for preserving relevant content and recording the circumstances of any moderation action. At the same time, public replies should not disclose personal medical information or invite individuals to post sensitive details in an open comment thread.
Compliance Position: The 2026 Threshold
The February 2026 PMCPA guidance raises the standard for companies that use influencers in pharmaceutical and health-related communications, but it does not turn every social media mention into a product promotion or every influencer into an identical regulatory subject. The threshold is better understood as a structured assessment of the relationship, the audience, the content, the company’s purpose and the controls applied around publication.
Four elements remain particularly important:
- a documented engagement with a clear service or campaign purpose;
- transparency that gives the audience a meaningful understanding of the relationship;
- content review proportionate to the subject matter and intended audience;
- pharmacovigilance and complaint-monitoring arrangements that cover the actual channels being used.
Those elements should operate together. A strong contract cannot cure a public-facing POM promotion. An effective hashtag cannot replace medical review. A trained community manager cannot compensate for the absence of a route into pharmacovigilance. A compliant initial post can still create risk if the company ignores the comments, direct messages and derivative content that follow.
The 2026 shift is therefore practical rather than merely formal. The company should be able to show what it knew, what it approved, what it told the influencer, what the audience was expected to understand and how it responded when the communication generated new information. That is a more useful test than asking whether the programme included a disclosure or whether an agency handled the day-to-day work.
The most persistent failure modes are now recognisable: informal relationships without defined deliverables, disclosure reduced to a generic hashtag, broad campaign approval without review of final wording, disease-awareness content that becomes product advocacy, and influencer channels that are not connected to pharmacovigilance processes. Each reflects a gap between the public-facing campaign and the systems behind it.
The answer is not to eliminate every human element from influencer work. A creator’s voice, a patient advocate’s experience and a healthcare professional’s ability to explain complex information can all have value. The answer is to build the engagement so that those strengths do not depend on regulatory ambiguity. When the audience, purpose, content and controls are assessed together, influencer marketing can be managed as a governed communication activity rather than treated as an informal extension of advertising.