Health
6
 min read

What consent a pharmacy takes before it draws blood

Consent for a pharmacy blood draw is a documented conversation, not a signature. The medical, data protection and commercial layers belong on three sheets.
Blog post cover image
Written by
Noah Petermann
Published on
August 17, 2026

Consent for a venöse Blutentnahme (venous blood draw) in a German pharmacy is a documented conversation rather than a signature. The law protects the conversation, and the signed sheet records that it happened.

That decides whether a pharmacy is covered when something goes wrong, because § 630h Abs. 2 BGB puts the burden of proof on whoever drew the blood.

The second thing most templates get wrong is merging three documents into one. The medical Aufklärung (patient information and consent), the data protection notice for Gesundheitsdaten (health data) and the commercial agreement follow different rules, so one sheet tends to fail all three.

German civil law governs this consent and not pharmacy law

The Apothekenversorgung-Weiterentwicklungsgesetz (ApoVWG) made the venöse Blutentnahme lawful through § 11c ApoG, in force since 2 July 2026. It wrote no consent standard of its own, because one existed.

§ 630a Abs. 1 BGB defines the Behandelnder as whoever "die medizinische Behandlung eines Patienten zusagt", whoever promises a patient medical treatment. That is not limited to doctors, which is why §§ 630a to 630h BGB reach a pharmacy selling a blood draw.

Consent comes before the measure under § 630d Abs. 1 BGB and is effective only where the person was informed beforehand under § 630e Abs. 1 bis 4 BGB. It is withdrawable at any time, without reasons and without any particular form.

The Aufklärung has to cover risks and realistic alternatives

§ 630e Abs. 1 BGB names the ground: Art, Umfang, Durchführung, zu erwartende Folgen und Risiken der Maßnahme sowie ihre Notwendigkeit, Dringlichkeit, Eignung und Erfolgsaussichten. Where several medically appropriate routes exist with materially different burdens, the alternatives belong in the conversation, which for a pharmacy means naming the kapillare Blutentnahme and the doctor.

§ 630e Abs. 2 BGB sets the manner: orally, by the person carrying out the measure or someone trained to do so, early enough for a considered decision, and in terms the person understands. Written material supplements that conversation, and copies of anything signed are handed over.

§ 35b Abs. 2 ApBetrO reserves the Aufklärung, the Anamnese and the taking of consent to the approbierter Apotheker entitled to draw blood under § 11c Abs. 1 ApoG, even where the puncture is delegated to a Pharmazeut im Praktikum (PhiP), and a PTA may not take over any part of it. § 35b Abs. 3 ApBetrO protects privacy during the Aufklärungsgespräch as well as the draw, so a consent talk within earshot of the queue falls short.

The Anamnese belongs in the same conversation

The Anamnese (medical history) sits inside the consent conversation because it decides whether the draw goes ahead. § 35b Abs. 1 ApBetrO requires the Qualitätsmanagementsystem to hold Festlegungen covering Aufklärung, Anamnese, Dokumentation and hygiene together, and § 11c ApoG lists the same items in the ärztliche Schulung.

The items that change the answer belong in the Standardarbeitsanweisung: anticoagulant medication, known clotting problems, earlier circulatory reactions during a draw, the state of the skin at the intended site, age, and whether the panel requires Nüchternheit (fasting). The exact list follows the pharmacy's own ärztliche Schulung.

The data protection layer is where most templates fail

A blood test generates Gesundheitsdaten, which Art. 9 Abs. 1 DSGVO places in the besondere Kategorien personenbezogener Daten, where processing is prohibited unless Abs. 2 gives an exception. Two are realistic. Lit. a covers ausdrückliche Einwilligung for specified purposes, and lit. h covers medizinische Diagnostik and care, which under Art. 9 Abs. 3 DSGVO depends on the work being done under the responsibility of someone bound by professional secrecy, a condition an Apotheker meets through § 203 Abs. 1 Nr. 1 StGB. Which basis applies is a question for the pharmacy's own Datenschutzbeauftragter or lawyer, because consent under Art. 7 Abs. 3 DSGVO is withdrawable while lit. h is not.

Art. 13 DSGVO fixes what is stated at collection: the Verantwortlicher, the Datenschutzbeauftragter where one exists, the purposes and the legal basis, the recipients, the storage period or the criteria for it, the rights of the person including withdrawal, and the right to complain to a supervisory authority. A pharmacy sending samples out names the akkreditiertes Labor as a recipient.

The split is not an Aniva invention, because the ABDA Arbeitshilfe for the erweiterte Medikationsberatung as a pharmazeutische Dienstleistung already separates the patient agreement from the data protection declaration.

Three documents cover three different obligations

What the document doesMedizinische AufklärungDatenschutzhinweisKommerzielle Vereinbarung
Question it answersMay this draw happen todayOn what basis are the Gesundheitsdaten processedWhat is bought, at what price
Legal basis§§ 630d and 630e BGB, § 11c ApoG, § 35b ApBetrOArt. 9 and Art. 13 DSGVO, § 203 StGBContract law and price transparency
Who delivers itThe approbierter Apotheker onlyThe pharmacy as VerantwortlicherThe pharmacy as a business
What merging breaksWithdrawing consent tangles with cancelling a paid orderThe lawful basis vanishes into small printPrice terms sit in a withdrawable document

The service is limited to people aged 18 and over

§ 11c ApoG allows the venöse Blutentnahme only on persons aged 18 or over. No parent can consent around that limit, and the rules on informing minors in § 630e Abs. 5 BGB are never reached. The age check therefore happens in the Anamnese before the Aufklärung starts, and a pharmacy asked to draw blood from a 16 year old declines and points to the doctor.

The record is the defence

§ 630f Abs. 1 BGB requires a Patientenakte kept in unmittelbarem zeitlichem Zusammenhang with the treatment, and Abs. 2 names Einwilligungen und Aufklärungen among the entries. Abs. 3 sets retention at ten years after the treatment ends, unless other provisions set a different period.

Whether that period applies unchanged to a pharmacy blood draw record, and how it fits the DSGVO duty to delete what is no longer needed, is for the responsible Apothekerkammer or a lawyer to settle. Why the record matters is clear, because § 630h Abs. 2 BGB puts the burden on the Behandelnder to prove consent was obtained and the Aufklärung met § 630e BGB. A missing note reads like a missing conversation, which is where Haftung (liability) starts.

What a pharmacy does next follows the operating decisions

§ 2 Abs. 3b ApBetrO requires notification of the state authority about the Blutentnahmen and the rooms at least one week before starting, and again a week before any change, plus a Betriebshaftpflichtversicherung covering harm from the draws. Settling the room, the insurance and the notification first tells a pharmacy what the documents describe.

The three documents are then drafted separately and reviewed by the pharmacy's own lawyer or Datenschutzbeauftragter, because consent wording is legal drafting rather than a marketing task. Aniva publishes a form set that keeps the three layers apart, a starting point for that review rather than a finished legal document. Selbstzahlerleistungen economics and capillary versus venous sampling cover the wider question.

Pharmacists ask these questions about consent

Is a signature on a consent form enough

No, because § 630d Abs. 2 BGB makes consent effective only where the Aufklärung under § 630e BGB happened first. The signature records that the conversation took place and does not stand in for it. A dated note of what was explained carries more weight in a dispute.

Can a PTA take the consent while the pharmacist prepares

No. § 35b Abs. 2 ApBetrO reserves the Aufklärung, the Anamnese and the taking of consent to the approbierter Apotheker entitled to draw blood under § 11c Abs. 1 ApoG. This holds even where the puncture is delegated to a PhiP under supervision.

Does one sheet covering everything work

It rarely does, because the medical Aufklärung, the Art. 9 DSGVO information on Gesundheitsdaten and the commercial agreement rest on different rules and end in different ways. Three documents also allow one of them to be updated without reprinting the others.

How long does the pharmacy keep the record

§ 630f Abs. 3 BGB sets ten years after the treatment concludes for the Patientenakte, unless other provisions set a different period. Whether that period applies unchanged to a pharmacy blood draw record is a point for the responsible Apothekerkammer or a lawyer.

This article is general information about German pharmacy law and business practice and is not legal advice. The responsible Apothekerkammer or a lawyer decides individual cases.

Add blood testing to your business

Aniva provides the labs, the test kits, the shipping, the software and the data protection paperwork. You offer blood tests under your own brand. Tell us which tests you need and we will show you how it works.

Book a Demo

Your future self is waiting

Start building the healthiest decade of your life.

Join today