DSCSA November 2024: Electronic Transaction Requirements

DSCSA Enhanced Drug Distribution Security: November 2024 Transaction Requirements

Wholesale drug distributors and third-party logistics providers must now capture and transmit enhanced product tracing data for every transaction under the Drug Supply Chain Security Act (DSCSA). As of November 27, 2024, distributors are required to provide Transaction Information (TI), Transaction History (TH), and Transaction Statement (TS) in an interoperable electronic format for each sale or distribution of prescription drugs. The FDA has begun issuing warning letters to entities failing to meet these requirements.

Regulatory Background

The DSCSA (Public Law 113-54) established a phased implementation timeline to create an electronic, interoperable system for identifying and tracing prescription drugs distributed in the United States. Title II of the Federal Food, Drug, and Cosmetic Act (21 U.S.C. 360eee et seq.) outlines specific obligations for manufacturers, repackagers, wholesale distributors, and dispensers.

The November 2024 deadline represents the completion of the enhanced drug distribution security provisions under 21 U.S.C. 360eee-1(d)(1). Prior to this date, distributors could provide transaction documentation in paper or electronic form. The new requirement mandates structured electronic data exchange, enabling downstream trading partners to verify product authenticity and chain of custody.

The FDA published final guidance on DSCSA implementation for trading partners in February 2023 (Docket No. FDA-2019-D-0997), clarifying expectations for data format, timing, and interoperability standards. The agency has stated that enforcement of the enhanced requirements began immediately upon the November 27, 2024 effective date.

Transaction Data Requirements

Under 21 U.S.C. 360eee-1(c)(1), wholesale distributors must provide the following information for each transaction:

Transaction Information (TI):

• Proprietary or established name of the product
• Strength and dosage form
• National Drug Code (NDC)
• Container size
• Number of containers
• Lot number
• Transaction date
• Shipment date (if different from transaction date)
• Name and address of the entity from which ownership is being transferred
• Name and address of the entity to which ownership is being transferred

Transaction History (TH):

• A statement of each prior transaction going back to the manufacturer

Transaction Statement (TS):

• A statement that the entity transferring ownership received the product from an authorized trading partner
• A statement that the entity did not knowingly ship a suspect or illegitimate product
• A statement that transaction information and transaction history is accurate as received

The critical change is format. Distributors must now provide this data in an interoperable electronic system that allows the receiving trading partner to verify, store, and retrieve the information. Paper lot pedigrees and PDF attachments do not satisfy the requirement.

Interoperability and Data Standards

The FDA does not mandate a specific technical standard for electronic data exchange. However, the industry has largely converged on two approaches:

1. EPCIS (Electronic Product Code Information Services), a GS1 standard for sharing supply chain event data in a structured XML or JSON format
2. Proprietary systems that enable point-to-point electronic exchange between verified trading partners

Most large wholesale distributors have implemented EPCIS-compliant systems that generate unique product identifiers at the saleable unit level and transmit transaction data via Application Statement (AS2) or API connections. Smaller distributors and 3PLs face integration challenges, particularly when trading partners use incompatible systems.

The FDA has not published a list of approved software vendors or required certification for DSCSA compliance systems. Distributors are responsible for ensuring their chosen solution meets the statutory requirements for data capture, transmission, and verification.

Enforcement and Compliance Posture

The FDA issued its first post-November 2024 warning letter to a wholesale distributor in December 2024, citing failure to provide transaction documentation in electronic format. The agency's inspection observations have focused on:

• Use of paper transaction records after the deadline
• Failure to transmit transaction history in a machine-readable format
• Inability to verify receipt of electronic TI/TH/TS from upstream trading partners
• Lack of a documented process for investigating product receipt discrepancies

Wholesale distributors without an interoperable electronic system as of the deadline are operating out of compliance with 21 U.S.C. 360eee-1(d)(1). State boards of pharmacy in California, Florida, and Texas have begun incorporating DSCSA electronic data compliance into routine wholesale distributor license inspections.

What ColdChainCheck Data Shows

ColdChainCheck tracks 1,275 wholesale drug distributors and 3PLs across 51 jurisdictions. Of these entities, 1,234 hold active FDA registration — a foundational requirement for DSCSA compliance, but not a direct indicator of electronic transaction data capability. The November 2024 interoperability deadline introduces a compliance dimension that existing public data sources do not yet capture: whether an entity has implemented a functional electronic data exchange system.

The current compliance score distribution reveals significant variability in distributor regulatory posture. Only 28 entities (2.2%) score in the "Excellent" tier (76-100 points), while 919 entities (72%) fall into the "Fair" tier (26-50 points). These scores reflect state licensure, NABP accreditation, and FDA registration status — all static credentials. DSCSA electronic compliance requires operational capability: the ability to generate, transmit, and verify transaction data in real time.

NABP accreditation provides a stronger signal of DSCSA readiness. Of the 1,275 tracked entities, only 63 hold NABP Accredited Drug Wholesale Distributor (ADWD) status, formerly known as VAWD. NABP's accreditation criteria include assessment of electronic pedigree systems and trading partner verification processes. Entities without NABP accreditation are not non-compliant by default, but the absence of third-party validation increases due diligence burden for trading partners conducting qualification.

73 entities in the directory have at least one FDA recall on record. While recalls do not directly correlate with DSCSA transaction data failures, they indicate historical lapses in product tracking or quality systems — capabilities central to interoperable electronic documentation.

Practical Guidance for Trading Partner Qualification

For QA/Regulatory Managers evaluating wholesale distributors post-November 2024:

• Verify electronic data capability during vendor onboarding. Ask prospective distributors for documentation of their EPCIS implementation or alternative electronic system. Request a sample transaction data file to confirm it includes lot-level serialization and structured TI/TH/TS fields.

• Cross-reference distributor credentials in the ColdChainCheck directory. Check for active FDA registration, state licensure across relevant jurisdictions, and NABP accreditation status. Entities scoring below 50 warrant additional scrutiny during qualification audits.

• Document your trading partner verification process. Under 21 U.S.C. 360eee-1(c)(4), dispensers and distributors must verify that trading partners are authorized. ColdChainCheck aggregates license and accreditation data to support this verification workflow, but should not replace direct confirmation with state boards of pharmacy.

• Monitor for FDA enforcement actions. ColdChainCheck tracks FDA warning letters and recalls. Distributors receiving warning letters for DSCSA non-compliance after November 2024 represent elevated risk for downstream trading partners who may inherit transaction documentation deficiencies.

Related Compliance Monitoring

ColdChainCheck does not yet track DSCSA electronic system implementation at the entity level, as this data is not publicly reported by the FDA or state agencies. The compliance score reflects verifiable regulatory credentials (licensure, registration, accreditation) that serve as proxies for operational maturity. For ongoing DSCSA implementation guidance, see the ColdChainCheck compliance guides, which cover state-specific wholesale distributor requirements and federal DSCSA timelines.

Disclaimer: This article is for informational purposes only and does not constitute legal or regulatory advice. Wholesale drug distributors and trading partners should consult with qualified legal counsel and verify compliance requirements directly with the FDA and relevant state boards of pharmacy.