DSCSA 2025 Compliance Guide: Exemptions & Requirements

DSCSA 2025 Compliance Guide: Exemptions, Requirements, and Distribution Strategy Updates

On November 27, 2024, the FDA published final guidance clarifying the scope of product identifier requirements under the Drug Supply Chain Security Act (DSCSA), effective November 27, 2025. The guidance establishes exemptions for specific product categories and transaction types, fundamentally reshaping how wholesale drug distributors authenticate pharmaceutical products in the U.S. supply chain.

Regulatory Context: DSCSA Enhanced Drug Distribution Security

The Drug Supply Chain Security Act (Public Law 113-54) was enacted November 27, 2013, to establish an electronic, interoperable system for identifying and tracing prescription drugs distributed in the United States. Under 21 U.S.C. § 360eee-1, wholesale drug distributors must verify product identifiers before accepting ownership of prescription drug products, with full enforcement beginning November 27, 2025.

The statute requires trading partners to capture and maintain transaction information (TI), transaction history (TH), and transaction statements (TS) for each product transaction. Product identifiers consist of the National Drug Code (NDC), serial number, lot number, and expiration date — together forming a unique package-level identifier required for verification and tracing.

FDA's November 2024 guidance (Docket No. FDA-2023-D-3782) clarifies which products and transactions fall outside DSCSA's verification requirements, addressing industry confusion about the scope of 21 U.S.C. § 360eee-1(a)(1).

Key Exemptions and Requirements

Products Exempt from Product Identifier Requirements

The FDA guidance establishes that the following categories do not require product identifiers under DSCSA:

1. Drop-shipped products where the wholesale distributor acts solely as a logistics coordinator without taking ownership. The distributor must document that ownership transferred directly from manufacturer to dispenser.

1. Emergency medical reason exemptions under 21 U.S.C. § 360eee-1(a)(2)(B), which allow distributors to bypass verification when a licensed practitioner determines an immediate need. The distributor must maintain documentation of the emergency determination and notify FDA within 5 business days.

1. Specific product categories permanently exempt under 21 CFR 207.1, including:

- Blood and blood components for transfusion

- Radiopharmaceuticals with physical half-lives less than 100 hours

- Medical gases defined in 21 CFR 207.3(b)(1)

- Homeopathic drugs marketed in accordance with 21 CFR 201.66(h)

- Products distributed for clinical investigation under 21 CFR 312

1. Repackaged products where the wholesale distributor performs the repackaging. The distributor affixes its own product identifier as the "manufacturer" under DSCSA for the repackaged product.

Transaction Requirements for Wholesale Distributors

Wholesale distributors must maintain TI/TH/TS documentation for six years from the date of the transaction or until one year after the product's expiration date, whichever is later. Under 21 U.S.C. § 360eee-1(b)(1), this includes:

• Proprietary or established name of the product
• Strength and dosage form
• NDC number
• Container size
• Number of containers
• Lot number
• Transaction date
• Name and address of the entity from which ownership is being transferred
• Name and address of the entity to which ownership is being transferred

The guidance clarifies that "ownership" means title transfer, not physical possession. Distributors providing 3PL services without taking title do not trigger DSCSA transaction documentation requirements for those specific transactions.

Impact on Wholesale Distribution Operations

Authentication System Requirements

Wholesale distributors must implement verification systems capable of:

1. Batch verification of product identifiers at receipt using EPCIS-compatible scanning infrastructure
2. Quarantine protocols for products failing verification, with documented investigation and FDA notification within 24 hours
3. Exception handling workflows for emergency medical reason exemptions, including practitioner documentation and FDA notification
4. Systems integration between warehouse management systems (WMS) and verification databases

The November 27, 2025 enforcement date applies to verification obligations. Distributors receiving product after this date without compliant product identifiers from their trading partners may face enforcement action under 21 U.S.C. § 360eee-4.

3PL and Cold Chain Logistics Considerations

Third-party logistics providers that do not take ownership of pharmaceutical products are not required to verify product identifiers under DSCSA. However, 3PLs must maintain clear documentation demonstrating they are operating in a logistics-only capacity. The FDA guidance specifically notes that "holding product on behalf of a trading partner" does not constitute ownership transfer.

Cold chain logistics providers operating under 3PL agreements should document that:

• Title remains with the shipper throughout the storage period
• Temperature-controlled storage is provided as a service, not as part of a distribution transaction
• Physical transfer to the final dispenser occurs on behalf of the upstream trading partner

Licensing and Registration Remain Separate Requirements

DSCSA compliance does not replace state licensure requirements for wholesale drug distributors. Under 21 U.S.C. § 353(e)(1), any person engaged in wholesale distribution of prescription drugs must be licensed by the state in which the distribution occurs. NABP's Verified-Accredited Wholesale Distributors (VAWD) program accreditation covers 35 states through reciprocity agreements, but does not exempt entities from individual state license applications in non-reciprocal jurisdictions.

FDA registration under 21 CFR Part 207 remains a separate federal requirement for all entities engaged in manufacturing, repackaging, relabeling, or salvaging drug products.

What ColdChainCheck Data Shows About DSCSA Readiness

Of the 1,275 wholesale drug distributors and 3PLs tracked in ColdChainCheck's directory, 1,234 hold active FDA registration under 21 CFR Part 207. This indicates that 96.8% of entities have completed the baseline federal registration requirement, but FDA registration does not confirm DSCSA verification system implementation or product identifier compliance.

The average compliance score across all tracked entities is 51/100, placing the majority of the industry in the "Fair" tier. Only 28 entities (2.2%) achieve "Excellent" scores (80-100 points), while 919 entities (72.1%) fall in the "Fair" tier (40-59 points). This distribution suggests that while most wholesale distributors maintain basic licensure and registration, fewer demonstrate the full spectrum of compliance signals including NABP accreditation and clean enforcement records.

NABP accreditation status is particularly relevant for DSCSA compliance. Only 63 entities (4.9%) in the directory hold current NABP VAWD accreditation. NABP's accreditation criteria include operational standards for product handling, storage, and security that align with DSCSA's traceability and verification requirements. The low accreditation rate suggests that the majority of wholesale distributors have not undergone third-party verification of their operational systems — systems that must now support product identifier verification by November 27, 2025.

73 entities (5.7%) have at least one FDA recall, warning letter, or enforcement action on record. For procurement teams conducting due diligence on trading partners, a clean enforcement record combined with current FDA registration and state licensure provides a baseline signal that the entity operates within regulatory boundaries. DSCSA non-compliance beginning November 27, 2025, will generate new enforcement actions — a signal ColdChainCheck will continue to track.

Practical Steps for QA and Procurement Teams

• Verify current trading partners' FDA registration status using the ColdChainCheck directory. Filter by state or entity name to confirm active registration before the November 27, 2025 enforcement date.

• Document 3PL vs. distributor relationships. If your organization uses third-party logistics providers, confirm in writing that they do not take title to product. 3PLs operating in a logistics-only capacity are not subject to product identifier verification requirements, but wholesale distributors taking ownership are.

• Review contracts for drop-ship arrangements. If your wholesale distributor drop-ships directly from manufacturer to dispenser, ensure the contract explicitly states that the distributor does not take ownership. This exemption requires documented evidence of direct title transfer.

• Track enforcement actions post-November 2025. ColdChainCheck monitors FDA warning letters, recalls, and enforcement actions. Entities that fail to implement compliant verification systems after the enforcement date will generate new signals visible in compliance scores.

For additional context on wholesale drug distributor licensing requirements and NABP accreditation, see the ColdChainCheck compliance guides.

Disclaimer: This article is provided for informational purposes only and does not constitute legal or regulatory advice. ColdChainCheck presents publicly available compliance data; readers should verify all information with the relevant regulatory authorities and consult legal counsel for compliance guidance specific to their operations.