What Makes a Medical Certificate Legally Valid in the UK?

The regulatory framework behind UK medical certificates — GMC registration, clinical governance, and what employers are legally required to accept.

Medical certificates are one of those documents that everyone encounters at some point, but few people understand from a regulatory standpoint. When your employer asks for a sick note, or an airline requests a fit-to-fly certificate, or a university panel requires medical evidence for mitigating circumstances — what actually makes that document legally valid?

The answer isn't as complicated as you might expect, but it's more nuanced than most people realise.

The Foundation: GMC Registration

The single most important factor in determining whether a medical certificate is valid in the UK is whether it was issued by a doctor registered with the General Medical Council (GMC).

The GMC is the independent regulatory body for doctors in the UK. Every doctor practising medicine in the United Kingdom — whether in the NHS, private practice, or online consultations — must hold GMC registration. This registration confirms that the doctor has met the required standards of medical education, training, and professional conduct.

When a GMC-registered doctor issues a medical certificate, they are exercising their professional clinical judgement. They are personally accountable to the GMC for the accuracy and appropriateness of any documentation they produce. This accountability is what gives the certificate its legal and professional weight.

How to verify GMC registration: The GMC maintains a publicly accessible online register. Anyone — an employer, a university administrator, an insurer — can look up a doctor's name or GMC number and confirm their registration status, qualifications, and any conditions on their practice. This is one of the most transparent regulatory systems in healthcare anywhere in the world.

For example, Dr Maria Knobel, the Medical Director of Medical Cert UK, holds av valid GMC registration number. You can verify this directly on the GMC register and see her full qualifications: MBBS from Barts and The London School of Medicine, BSc (Hons) from Imperial College London, and Membership of the Royal College of General Practitioners (MRCGP).

NHS vs Private: Does It Matter?

This is where the most common misconception arises.

Many employees — and many employers — believe that a medical certificate is only "valid" if it comes from an NHS GP. This is incorrect.

There is no legal distinction between a certificate issued by an NHS doctor and one issued by a private doctor, provided both hold GMC registration. The clinical authority of the document derives from the doctor's professional registration, not from the setting in which they practise.

ACAS — the Advisory, Conciliation and Arbitration Service, the UK government's workplace advisory body — has issued clear guidance on this point. Employers cannot refuse a valid sick note from a GMC-registered doctor simply because it was obtained privately or online. What matters is:

The doctor holds current GMC registration.
The certificate was issued following a genuine clinical assessment.
The document contains the information needed for the employer's records.

The only significant exception is government benefit claims. The Department for Work and Pensions (DWP) requires the specific NHS Med3 Fit Note form for Employment and Support Allowance (ESA), Universal Credit, and PIP assessments. Private certificates, regardless of the doctor's qualifications, are not accepted for these purposes. This is an administrative requirement of the DWP, not a reflection of the clinical validity of private certificates.

What Must a Valid Medical Certificate Contain?

While there is no single legally mandated template for private medical certificates (unlike the NHS Med3 form, which is standardised), a valid certificate should include:

The doctor's full name and GMC registration number. This allows the recipient to verify the doctor's credentials independently.

The date of issue. This establishes when the clinical assessment took place.

The patient's name and date of birth. Basic identification to confirm the certificate relates to the correct individual.

A clinical opinion. This is the core of the document — the doctor's professional assessment of the patient's fitness for work, travel, sport, or whatever the certificate's purpose is. This might state "not fit for work," "fit for work with adjustments," "fit to fly," or other relevant determinations.

The period covered. For sick notes, this means the dates during which the patient is considered unfit for work, or the date from which they are fit to return.

A signature. The doctor's signature (or digital equivalent) confirms that they have personally reviewed the case and stand behind the clinical opinion.

A verification mechanism. While not strictly required, best-practice services now include a unique reference number, QR code, or verification email address. Medical Cert UK, for instance, issues certificates with unique reference numbers that can be verified free of charge — a practice that strengthens confidence for both the patient and the recipient.

The Clinical Review Standard

A certificate issued without a genuine clinical assessment is not a valid medical document. It would be professionally improper for a doctor to issue a certificate without reviewing clinical evidence, and the GMC could take regulatory action against any doctor who did so.

What constitutes a valid clinical assessment in the context of online medical certificates?

A structured consultation process. The patient provides their medical history, current symptoms, functional impact, and the purpose of their certificate request through a detailed questionnaire.

Supporting evidence. The patient uploads relevant documentation — prescriptions, discharge summaries, NHS app records, photographs, or other clinical evidence.

Individual review by a named doctor. A GMC-registered GP reviews the submission, assesses whether the clinical evidence supports the certificate request, and makes an independent determination. The doctor may contact the patient directly for additional information.

Clinical refusal where appropriate. A critical marker of legitimate clinical governance is the willingness to refuse certificate requests that are not clinically supported. If a doctor determines that a certificate is not appropriate, it should not be issued — and the patient should not be charged.

This standard mirrors what happens in a face-to-face NHS consultation. The mode of delivery (in-person vs online) does not affect the clinical validity of the assessment, provided the doctor has sufficient information to form a professional opinion.

Employer Obligations: What the Law Says

UK employment law provides a clear framework for how employers should handle medical certificates:

The Employment Rights Act 1996

This Act protects employees from unfair dismissal, including dismissal for illness-related absence. While employers can manage absence through legitimate policies, they cannot dismiss an employee solely because they have been off sick, particularly where the employee has provided appropriate medical evidence.

The Equality Act 2010

If an employee's condition qualifies as a disability under the Equality Act — which includes many mental health conditions, chronic pain conditions, ADHD, IBS, migraines, and other long-term conditions — the employer has a statutory duty to make reasonable adjustments.

A medical certificate that recommends specific adjustments (modified duties, adjusted hours, phased return to work) creates a documented basis for these legal obligations. An employer who ignores such recommendations may be liable for disability discrimination.

ACAS Guidance

ACAS guidance is clear: employers should accept medical certificates from registered healthcare professionals, regardless of whether the certificate was obtained from an NHS or private doctor. An employer who refuses a valid private certificate without legitimate reason may face challenge through grievance procedures or employment tribunals.

Confidentiality

Employers are not entitled to know a specific diagnosis. A medical certificate confirming "not fit for work" is sufficient for absence records and SSP purposes. The detailed medical reasoning behind the certificate is confidential between the patient and their doctor. Employers who pressure employees to disclose their diagnosis may be in breach of data protection regulations and the Equality Act.

Online Medical Certificates: The Regulatory Landscape

The growth of online medical certificate services has raised legitimate questions about regulation. How are these services governed, and what standards do they operate under?

GMC oversight applies equally to online practice. The GMC's Good Medical Practice guidance applies to all doctors, regardless of whether they practise face-to-face, by telephone, or through online consultations. A doctor issuing certificates online is subject to exactly the same regulatory standards, professional obligations, and accountability as a doctor in a high-street surgery.

ICO registration. Services handling patient data in the UK must be registered with the Information Commissioner's Office (ICO) and comply with UK data protection law, including GDPR. Medical Cert UK, for example, is registered with the ICO under registration number ZC112101.

Professional indemnity insurance. Every doctor issuing medical certificates should carry their own professional indemnity insurance. This provides legal protection for both the doctor and the patient in the event of a dispute or complaint.

Clinical governance structures. Well-run services have a named Medical Director who sets clinical standards, a documented clinical review process, and published policies on complaints, refunds, and editorial standards.

How to Verify a Medical Certificate

If you're an employer, university administrator, or other recipient of a medical certificate, you can verify its authenticity through several channels:

Check the doctor's GMC registration. Look up the GMC number on the GMC register. Confirm the doctor holds full registration and is licensed to practise.
Use the certificate's verification mechanism. If the certificate includes a reference number or QR code, use it. Medical Cert UK offers free verification via verify@medicalcert.co.uk and https://medicalcert.co.uk/verified/.
Contact the issuing service. Legitimate services will confirm whether a certificate was issued by their platform.
Check for completeness. A valid certificate should contain all the elements described above — doctor's name and GMC number, patient details, clinical opinion, dates, and signature.

The Bottom Line

A medical certificate is legally valid in the UK if it meets three core criteria:

It was issued by a GMC-registered doctor who holds full, independent registration.
It was based on a genuine clinical assessment — not automated, not rubber-stamped.
It contains the information needed for its intended purpose (fitness for work, travel, sport, etc.).

The distinction between NHS and private, or between in-person and online, is irrelevant to the certificate's legal validity. What matters is the doctor's registration, the clinical process, and the integrity of the document.

Medical Cert UK operates under the clinical oversight of Dr Maria Knobel, a Member of the Royal College of General Practitioners. All certificates include a unique reference number for independent verification. Rated 4.8/5 on Google Reviews and Trustpilot.