What Is DSCSA? A Plain-English Guide for Pharmacies
A new technician holds up an invoice with a simple question: what is DSCSA, and why is it on everything? You've seen those five letters on invoices, wholesaler emails and maybe an FDA notice. You know it matters. But explaining it in two sentences, without notes, is harder than it sounds.
That's what this guide is for. By the end, you'll be able to explain DSCSA to your team in plain words. You'll also know what it asks of your pharmacy today and what changes by 2027.
What is DSCSA, in one sentence?
DSCSA is the Drug Supply Chain Security Act, a federal law signed on November 27, 2013. It sets up a way to identify and trace prescription drugs, package by package, as they move from the maker to the wholesaler to your pharmacy.
The goal is safety. FDA says the system helps keep harmful drugs out of the supply chain. It also helps find them if they get in, and pull them out fast. Think of fake, stolen or tampered drugs. If every sale leaves a record, it's much harder for a bad bottle to slip through unnoticed.
Example (fictional): A bottle of a blood pressure drug leaves a plant in New Jersey. It goes to a wholesaler's warehouse, then arrives at your pharmacy in a tote. At each sale, the seller passes along a record of what was sold, by whom and to whom. If FDA later finds a fake lot, those records show who had it and when.
That chain of records is the whole idea. The rest of the law is about what goes into those records, and who has to keep them.
The building blocks: the 2D code, TI and TS
Three terms come up again and again, so it helps to know them by name.
The first is the product identifier. It's the 2D barcode on each package, the square code that many pharmacists call a "QR code" at the counter. Under the law's definitions, it holds the NDC, a unique serial number, the lot number and the expiration date. The same details are also printed so a person can read them.
The second is transaction information (TI). It's the record of each sale: the product, its strength, the NDC, the lot, the quantity, the date, and who sold it to whom.
The third is the transaction statement (TS). It's the seller's statement that it's authorized and followed the rules for that sale. You may also hear about "transaction history." Since November 27, 2023, transaction history is no longer required.
What DSCSA covers, and what it doesn't
DSCSA covers prescription drugs for human use in their finished form, like tablets, capsules and vials. Over-the-counter drugs are outside it. So are a few groups of prescription products, such as blood for transfusion, medical gases, certain IV fluids, and drugs compounded under section 503A or 503B.
It also helps to know what isn't a "transaction." Dispensing to a patient on a prescription is not a DSCSA transaction. So you don't track serial numbers patient by patient under this law. The rules kick in when product changes hands between businesses, like your wholesaler selling to you.
Why DSCSA feels like it keeps "starting"
If DSCSA feels like it has started five times, you're not wrong. The law rolls out in phases, and each phase made the news. Here are the dates that matter to a pharmacy.
| Date | What happened |
|---|---|
| November 27, 2013 | The law is signed |
| January 1, 2015 | Your trading partners must be authorized |
| July 1, 2015 | Pharmacies must receive and keep TI and TS |
| November 27, 2020 | Pharmacies may handle only product with a product identifier |
| November 27, 2023 | The electronic, package-level phase begins under the law (section 582(g)) |
| November 27, 2024 | FDA's one-year stabilization period ends |
| November 27, 2025 | FDA's exemption for pharmacies with 26 or more full-time pharmacists and technicians ends |
| November 27, 2026 | The headcount date for small dispensers |
| November 27, 2027 | The exemption for small dispensers ends |
So when someone says "DSCSA started," ask which part they mean. The basic duties have been in force for years. Only the electronic layer is still on a countdown for small pharmacies.
DSCSA Compliance for Small Pharmacies: Free Training (2026 Rules). Find your deadline and check off every step → Get free access
What DSCSA asks of your pharmacy today
For a pharmacy, the everyday duties fit on one page. Buy only from authorized trading partners, and don't accept product without TI and TS. Keep those records for at least six years. Handle only product with a product identifier. Quarantine and investigate anything suspect. If you determine a product is illegitimate, notify FDA and the immediate trading partners you believe may have received it within 24 hours. And if FDA or a state official asks for records during a recall or an investigation, you have two business days.
Each of those has its own post. Start with DSCSA pharmacy requirements in 2026, then learn how to check a trading partner's license.
What changes by 2027
The last phase moves all of this onto secure, electronic data at the package level. Your TI will include the product identifier of each package. You'll also need systems to verify product and answer requests with that data.
When that applies to you depends on your team. You're a small dispenser if the company that owns your pharmacy has 25 or fewer full-time pharmacists and pharmacy technicians in total as of November 27, 2026. If so, FDA's August 6, 2026 letter gives you until November 27, 2027. Our post on the small dispenser definition shows how to count.
One myth to clear up while we're here. FDA does not require you to scan every package on receipt. Its guidance recommends that buyers confirm the electronic data matches the product they receive. Our post on 2D barcodes and scanning explains the difference.
To exchange that data, you'll need a way to receive it from each partner. A DSCSA connector, such as Connect RX by Maltexi, connects your pharmacy to your trading partners for electronic DSCSA data.
FAQ
What does DSCSA stand for? The Drug Supply Chain Security Act. It's a federal law signed on November 27, 2013, and it's part of the FD&C Act.
Does DSCSA apply to over-the-counter drugs? No. It covers prescription drugs for human use, with a few exclusions, such as medical gases and certain IV fluids.
Is DSCSA already in effect? Yes, in phases. The basic duties for pharmacies have applied since 2015. The electronic phase applies to small dispensers from November 27, 2027.
Is DSCSA the same as "track and trace"? People often use that phrase for it. DSCSA is the law, and tracing each package is one of its goals.
Do I have to track which serial number went to which patient? Not under DSCSA. Dispensing to a patient on a prescription is not a DSCSA transaction. Your state may have its own rules, so check with your board of pharmacy.
The short version
DSCSA is the federal law that traces prescription drugs from the maker to your pharmacy. The basic duties already apply to you today. The electronic, package-level phase comes next, on a date set by your team size. Learn the three building blocks, check your count, and use our DSCSA compliance checklist to see where you stand.
Know what to do today. Be ready for 2027. → Get the free DSCSA training
DSCSA rules can change. Always confirm the latest requirements on FDA.gov. This is educational content, not legal advice.
Sources
- FDA, Drug Supply Chain Security Act (main page).
- FD&C Act §581, 21 U.S.C. 360eee (definitions).
- FD&C Act §582, 21 U.S.C. 360eee-1.
- FDA, DSCSA exemptions for small business dispensers until Nov 27, 2027 (Aug 6, 2026).
- FDA, DSCSA exemptions for certain trading partners (Oct 9, 2024).
- FDA guidance, Enhanced drug distribution security requirements: compliance policies (Aug 2023).