FDA DSCSA Enforcement Policy Updates – HDA 2023 Seminar

FDA DSCSA Enforcement Policy Updates from HDA 2023 Traceability Seminar

FDA officials provided clarifications on Drug Supply Chain Security Act (DSCSA) enforcement policy during the Healthcare Distribution Alliance's 2023 Traceability Seminar, addressing the agency's approach to November 2023 enhanced drug distribution security (EDDS) compliance and unit-level traceability requirements. The guidance directly affects how wholesale drug distributors manage verification systems, product identifiers, and transaction information under the final DSCSA enforcement phase.

Regulatory Background

The DSCSA, enacted under Title II of the Drug Quality and Security Act (Public Law 113-54) in 2013, established unit-level traceability requirements for prescription drugs in the U.S. supply chain. Section 582 of the Federal Food, Drug, and Cosmetic Act (FD&C Act), as amended by DSCSA, requires trading partners to capture and maintain transaction information, transaction history, and transaction statements (collectively, "transaction documentation" or "T3") in electronic, interoperable format.

The November 27, 2023 deadline marked the transition from lot-level to unit-level serialization requirements for wholesale drug distributors. Under 21 CFR 582(g)(1), distributors must verify product identifiers on prescription drugs before distribution, conduct suspect and illegitimate product investigations, and maintain electronic T3 records for six years.

FDA's DSCSA enforcement authority includes inspection of records, seizure of non-compliant products, and civil penalties for knowing violations. The agency has previously issued guidance documents on product identifiers (September 2018), verification system interoperability (June 2018), and wholesale distributor requirements (November 2019).

Key Policy Updates from HDA 2023

FDA officials clarified the agency's enforcement discretion policy for wholesale distributors during the initial implementation period following the November 2023 deadline. The policy addresses three primary areas:

Verification System Implementation: FDA will not take enforcement action against wholesale distributors solely for failing to verify product identifiers on 100% of outbound transactions, provided the distributor demonstrates documented progress toward full verification system implementation. Progress includes executed contracts with solution providers, ongoing system testing, and incremental transaction coverage increases. This enforcement discretion does not extend to suspect product investigations or illegitimate product determinations, which remain mandatory under 21 CFR 582(b)(4).

Transaction Information Format: The agency confirmed that transaction information must be maintained in electronic, interoperable format as of November 27, 2023. Paper-based T3 does not satisfy DSCSA requirements for transactions occurring after the deadline. FDA acknowledged supply chain partners may be at different implementation stages, stating distributors will not face enforcement for receiving non-compliant transaction information from upstream trading partners if they document non-compliance and request corrected documentation.

Saleable Returns Processing: FDA provided guidance on returns processing under enhanced drug distribution security requirements. Distributors may accept saleable returns from dispensers without verifying product identifiers if the product remains in the dispenser's possession and control until return, and transaction documentation demonstrates chain of custody. This applies to products dispensed before November 27, 2023 and returned after the deadline. Distributors must verify product identifiers before redistributing returned products to downstream trading partners.

Impact on Wholesale Drug Distributor Operations

These policy updates directly affect distributor verification system roadmaps and trading partner qualification processes. Distributors operating under enforcement discretion must document verification system implementation milestones, including vendor selection timelines, testing protocols, and projected coverage expansion schedules. FDA expects distributors to demonstrate continuous progress—static implementation plans do not qualify for enforcement discretion.

Transaction information exchange processes require immediate operational changes. Distributors must implement systems to receive, store, and transmit EPCIS-formatted transaction data. Legacy EDI-based T3 systems do not meet November 2023 requirements. Distributors receiving non-compliant transaction information from manufacturers or upstream distributors must log exceptions and establish corrective action timelines with trading partners.

Returns processing workflows require segregation of pre-November 2023 and post-November 2023 product inventory. Distributors must implement quarantine procedures for returned products pending product identifier verification. Saleable returns from dispensers require documented chain of custody verification before products re-enter distribution. These processes apply to all prescription drug products subject to DSCSA, including refrigerated and frozen products handled by cold chain 3PLs operating under wholesale distributor licenses.

What ColdChainCheck Data Shows

ColdChainCheck tracks 1,275 wholesale drug distributors and 3PLs, of which 1,234 hold active FDA registrations—a baseline requirement for DSCSA compliance. However, FDA registration alone does not indicate verification system implementation status or EPCIS transaction data capability. The average compliance score across tracked entities is 51/100, placing the majority (919 entities, or 72%) in the "Fair" tier. This distribution reflects incomplete publicly visible compliance signals across state licensure, accreditation, and enforcement history—not direct verification system deployment data, which FDA does not publish.

Only 63 entities in the directory hold NABP Verified-Accredited Wholesale Distributors (VAWD) accreditation, representing 5% of tracked distributors. VAWD accreditation requires DSCSA compliance verification during the accreditation audit process, including review of transaction documentation systems and verification procedures. The gap between FDA-registered entities (1,234) and NABP-accredited entities (63) indicates most distributors rely on state board of pharmacy inspections rather than voluntary third-party accreditation for compliance verification.

73 entities have FDA enforcement actions or product recalls on record in the ColdChainCheck database. Enforcement history does not directly correlate to DSCSA non-compliance—recalls may relate to cGMP violations, storage temperature deviations, or other non-traceability issues. However, entities with multiple enforcement actions warrant additional due diligence during trading partner qualification.

Compliance Officer Action Items

• Audit current trading partners against verification system timelines: Use the ColdChainCheck directory to identify distributors in your supply chain. Cross-reference FDA registration status and NABP accreditation. Distributors without VAWD accreditation should provide documented verification system implementation plans if relying on enforcement discretion.

• Request transaction information format confirmation: Contact wholesale distributors providing your products to confirm EPCIS-compliant transaction data capability. Distributors still transmitting paper or non-interoperable electronic T3 after November 27, 2023 do not meet DSCSA requirements regardless of enforcement discretion.

• Document returns processing procedures: For specialty pharmaceutical products with high-value saleable returns, establish written procedures confirming chain of custody verification and product identifier verification protocols. Cold chain 3PLs handling returns under your wholesale distributor license must follow identical verification requirements.

• Monitor FDA registration renewals: FDA registration lapses indicate potential operational or compliance issues. ColdChainCheck flags entities with expired registrations. Registration status should be verified annually during trading partner requalification cycles.

ColdChainCheck tracks FDA enforcement actions, state license status, and NABP accreditation data across all directory entities. Compliance officers can monitor trading partner compliance signals through entity-specific pages showing license counts, accreditation status, and enforcement history. For broader DSCSA implementation guidance, see the compliance guides section covering verification system requirements and transaction documentation standards.

Disclaimer: This article provides informational analysis of FDA policy updates and is not legal or regulatory advice. Verify DSCSA compliance requirements with legal counsel and consult current FDA guidance documents for authoritative interpretation.