DSCSA — Final Compliance Deadline for Small Dispensers: 27 November 2026

The U.S. Food and Drug Administration (FDA) issued an exemption under the Drug Supply Chain Security Act (DSCSA) — Section 582 of the FD&C Act — granting small dispensers (pharmacies with 25 or fewer full-time pharmacists and technicians) additional time to implement the enhanced drug distribution security requirements. This exemption expires on 27 November 2026, after which full compliance is mandatory for all dispensers regardless of size. The DSCSA requires all trading partners — manufacturers, wholesale distributors, and dispensers — to exchange transaction data electronically at the package level, using serialized product identifiers (GTIN, serial number, lot number, expiration date) encoded in 2D data matrix barcodes. Post-exemption, small dispensers must be fully capable of: electronic verification of product upon receipt using the Verification Router Service (VRS); interoperable electronic exchange of transaction information (T3 data: Transaction Information, Transaction History, Transaction Statement); investigation and reporting of suspect or illegitimate product within 24 hours; and maintenance of all transaction records for a minimum of 6 years. The FDA has already issued Warning Letters and criminal indictments for DSCSA violations, confirming active enforcement. Computer System Validation (CSV) of DSCSA-compliant software platforms is a prerequisite for compliance. Audit teams supporting small dispensers must perform gap assessments, validate electronic track-and-trace systems, and ensure CAPA processes are in place before the November 2026 deadline.