DSCSA Requirements Reminder Before November 27, 2026

The Short Answer: Most of the pharmaceutical supply chain already has to meet every DSCSA requirement, and qualifying small dispensers now have until November 27, 2027 for electronic, package-level tracing. November 27, 2026 still matters, since it is the date the FDA uses to decide which pharmacies count as a small dispenser.

The Drug Supply Chain Security Act (DSCSA) sets the rules for tracing prescription drugs as they move through the United States. Manufacturers, repackagers, wholesale distributors, and large dispensers are already past their exemption dates. In August 2026, the Food and Drug Administration gave qualifying small dispensers one more year.

That extension covers less than many pharmacies assume. Most foundational DSCSA requirements apply today to every trading partner. Pharmacy owners near the 25-person staff limit should confirm their status before November 27, 2026. Everyone else should use the remaining time to test the systems they will rely on in 2027.

Where DSCSA Compliance Stands in Late 2026

The law was signed in 2013 and phased in. In 2023, the FDA used a compliance policy to set a one-year stabilization period. This form of enforcement discretion gave trading partners additional time to build their systems, and it ended on November 27, 2024.

The FDA then issued exemptions by trading partner type. All of them have now expired except the one for small dispensers.

Current Dates by Trading Partner

• Manufacturers and repackagers: exemption ended May 27, 2025
• Wholesale distributors: exemption ended August 27, 2025
• Large dispensers (26 or more full-time pharmacists and pharmacy technicians): exemption ended November 27, 2025
• Small dispensers (25 or fewer): exemption runs through November 27, 2027

Why the FDA Extended the Small Dispenser Date

The FDA says the extra year lets it finish its assessment of small dispensers, publish a final report for public comment, and hold a public meeting. The assessment looks at the cost and practicality of package-level tracing software and hardware for small pharmacies.

The agency also urges small dispensers to keep working toward the enhanced drug distribution security requirements during the extension.

Why November 27, 2026 Still Matters

Under the new exemption, small dispenser status is measured on November 27, 2026. A pharmacy qualifies if the company that owns it has 25 or fewer full-time employees licensed as pharmacists or qualified as pharmacy technicians on that date.

Who Should Recheck Their Count

• Pharmacy groups that added pharmacists or pharmacy technicians in the past two years
• Owners with several locations under one company, since staff are counted across the company that owns the pharmacy
• Independent pharmacies that merged, sold, or changed ownership

If You Do Not Qualify

A dispenser over the limit does not get the extension and is expected to meet the full package-level requirements now. Trading partners in this position can request a waiver, exception, or exemption through the FDA’s CDER NextGen portal. The FDA expects them to keep working on compliance while a request is under review.

Small dispensers that do qualify do not need to file anything or notify the FDA.

DSCSA Requirements That Apply to Everyone Right Now

The small dispenser exemption covers only the electronic, interoperable, package-level parts of the law. The DSCSA compliance obligations below apply to all supply chain partners today.

Why the Law Exists

Product tracing helps trading partners find and remove counterfeit drugs and other harmful drugs before they reach patients. The World Health Organization estimates that at least 1 in 10 medicines in low- and middle-income countries is substandard or falsified, which shows how global sourcing can expose the healthcare supply chain to this risk.

Authorized Trading Partners

Buy and sell only with trading partners that hold the right license or registration. This includes wholesale distributors and third-party logistics providers, which report their licensure to the FDA each year.

Transaction Data

Three records move with each change of ownership of a prescription drug.

• Transaction information: product name, strength, dosage form, NDC, container size, number of containers, lot number, transaction date, and the names and addresses of both parties
• Transaction history: a record of the product’s prior transactions
• Transaction statement: a statement from the seller confirming it is authorized and meets the law’s requirements

The law calls for keeping these records for at least six years. Being able to pull them quickly matters during a recall or an investigation.

Suspect and Illegitimate Product

• Quarantine and investigate any suspect product
• Notify the FDA and immediate trading partners within 24 hours after determining a product is an illegitimate product
• Remove illegitimate product from distribution so it does not reach patients

Product Identifiers

Manufacturers and repackagers place a product identifier on each package and homogeneous case. It includes the standardized numerical identifier (the NDC plus a unique serial number), the lot number, and the expiration date, printed in human-readable text and a 2D data matrix barcode. Dispensers should accept only pharmaceutical products that carry one.

What Package-Level Tracing Adds

The enhanced drug distribution security requirements already apply to manufacturers, repackagers, wholesale distributors, and large dispensers. Small dispensers have until November 27, 2027. 

These traceability requirements add the following:

• Package-level data exchange: transaction information moves electronically in a secure, interoperable manner, often using the GS1 EPCIS standard
• Interoperable system: each partner’s system has to send and receive package-level data with its trading partners
• Verification requirements: partners verify product identifiers at the package level during suspect product investigations
• Saleable return checks: a saleable return is verified before it goes back into inventory for resale
• Faster responses: partners provide package-level tracing data when the FDA or other officials request it during a recall or investigation

The phased dates were intended in part to limit supply chain disruption and protect patient access to prescription drug products, while the pharmaceutical industry finished building these systems.

A Pre-Deadline Checklist for Pharmacies

Use the time before November 27, 2026 to work through these steps.

1. Count full-time licensed pharmacists and qualified pharmacy technicians across every location the company owns, and record the count as of November 27, 2026.
2. Confirm the license or registration of every supplier.
3. Pull a sample of recent transaction information and check how fast your team can find it.
4. Review written procedures for suspect product, quarantine, and FDA notification.
5. Ask your wholesale distributor which data exchange and verification options it supports, and schedule a test well before November 2027.
6. If you repackage, check that unit dose labels carry an accurate lot number and expiration date in a scannable barcode. That same data supports barcode medication administration at the bedside.

Testing early gives staff time to fix problems and supports a smooth transition.

Getting Ready Before November 27, 2026

DSCSA requirements in late 2026 come down to three things. Buy and sell only with authorized trading partners, keep transaction records your team can pull quickly, and follow written procedures for suspect products. Manufacturers, repackagers, wholesale distributors, and large dispensers are already held to full package-level tracing. Small dispensers have until November 27, 2027, but their status is set by staff count on November 27, 2026.

Pharmacies that confirm their count and test their systems now are in a better position for a smooth transition. Label accuracy is a good place to start, since a lot number, serial number, or expiration date typed in by hand can slow verification for supply chain partners downstream.

Pak-EDGE® UD Barcode Labeling Software from Medical Packaging Inc., LLC (MPI) creates GS1-compliant barcodes and pulls lot and expiration data from the manufacturer’s bottle, which reduces manual entry. It works with MPI’s Auto-Print® and Fluidose® unit dose systems. Contact MPI to review your labeling workflow before November 27, 2026.