DSCSA

What it requires

Enacted in 2013 and phased in over a decade, DSCSA obliges trading partners — manufacturers, repackagers, wholesale distributors and dispensers — to:

• Serialise each saleable unit with a unique identifier carried in a 2D DataMatrix
• Exchange transaction information and statements electronically at every change of ownership
• Verify identifiers, particularly for saleable returns
• Respond to suspect and illegitimate product with quarantine and investigation
• Trace at package level, not lot level

The shift from lot-level to package-level is what makes it hard. Lot-level traceability is a records exercise; package-level means every individual unit's movement must be captured and reconcilable.

EPCIS is the mechanism

Data moves as EPCIS events — a GS1 standard describing what happened, when, where and why. The four core event types (Object, Aggregation, Transaction, Transformation) express commissioning a unit, packing it into a case, shipping it, and so on.

Aggregation is where most operational pain lives: the parent-child relationship between unit, case and pallet must stay accurate through every repack, partial shipment and return. Once aggregation is wrong, downstream partners receive data that cannot be reconciled against physical goods.

Exceptions are the real workload

In a system this size, the steady state is not clean. Data arrives late, malformed, or not at all; physical goods arrive without matching events; identifiers fail verification for benign reasons. Exception handling — detecting mismatches, quarantining, investigating and resolving them within required timeframes — turns out to be the dominant operational cost, not the serialisation itself.

How it differs from the EU FMD

The EU's Falsified Medicines Directive pursues the same goal by a different route: an end-to-end model where packs are uploaded to a central repository and decommissioned at dispense. DSCSA is a distributed model in which partners exchange data directly and no central database holds the full chain. A global supplier must satisfy both architectures.