10.5 Drug Distribution & Supply-Chain Security: DSCSA, Wholesale Distribution & Alabama Permits

10.5 Drug Distribution & Supply-Chain Security: DSCSA, Wholesale Distribution & Alabama Permits

[!IMPORTANT] Core Exam Concept: Section 10.2 covered how a pharmacy orders controlled substances. This section covers the other half of the acquisition question — the legitimacy of the supply chain itself. Two bodies of law operate at once: the federal Drug Supply Chain Security Act (DSCSA), Title II of the Drug Quality and Security Act of 2013, which governs product tracing and suspect-product handling for all prescription drugs; and Alabama's permitting scheme in Ala. Admin. Code r. 680-X-2-.23, which decides who may lawfully sell a drug into Alabama. A pharmacist who buys from an unlicensed source violates state permit law and federal trading-partner law simultaneously.

---

1. The Pharmacy's Role Under the DSCSA

The DSCSA assigns each participant a defined role. A pharmacy is a dispenser. That single classification generates four duties.

+-----------------------------------------------------------------------------------------+
|                      THE FOUR DSCSA DUTIES OF A DISPENSING PHARMACY                     |
+-----------------------------------------------------------------------------------------+
| 1. AUTHORIZED TRADING PARTNERS                                                          |
|      Buy only from, and sell only to, entities holding a valid license or registration.  |
| 2. PRODUCT TRACING                                                                      |
|      Receive and retain Transaction Information (TI) and a Transaction Statement (TS)    |
|      for every purchase; provide them on an onward sale.                                 |
| 3. VERIFICATION                                                                         |
|      Investigate suspect product; verify the product identifier on saleable returns and  |
|      in response to a request from FDA or a trading partner.                             |
| 4. RECORD RETENTION                                                                     |
|      Keep transaction records for SIX (6) YEARS from the date of the transaction.        |
+-----------------------------------------------------------------------------------------+

• Product Identifier: Manufacturers apply a unique product identifier — the National Drug Code, serial number, lot number, and expiration date, encoded in a 2D data matrix barcode — to each package and homogeneous case.
• Six Years, Not Two: The DSCSA retention period is six years, which is longer than the two-year controlled-substance record floor in Ala. Admin. Code r. 680-X-2-.15(7) and 21 C.F.R. § 1304.04. When retention periods conflict, keep the record for the longer term.
• Transactions That Are Not "Transactions": The tracing duties do not attach to dispensing to a patient, to intracompany distribution, to distribution of samples, to public health emergency distributions, or to a dispenser-to-dispenser transfer for a specific patient need.

---

2. Suspect and Illegitimate Product: The Workflow That Gets Tested

[!WARNING] The 24-hour clock and the form number are both examinable. Suspect product triggers quarantine and investigation with no fixed deadline; illegitimate product triggers a 24-hour notification on FDA Form 3911. Do not confuse Form 3911 with DEA Form 106 (theft or significant loss of controlled substances, covered in section 11.1) or DEA Form 41 (destruction).

---

3. The Federal Five Percent Rule for Controlled Substances

A pharmacy that occasionally sells or transfers controlled substances to another registrant is engaging in distribution, which normally requires a distributor registration. 21 C.F.R. § 1307.11 creates a narrow exemption:

1. The transferring and receiving registrants are both registered to dispense that controlled substance;
2. A record is kept by both parties — for Schedule I and II, the transfer must be documented on a DEA Form 222 or CSOS order, executed by the receiving pharmacy;
3. Neither party may distribute more than five percent (5%) of the total dosage units of controlled substances it distributed and dispensed during the same calendar year; and
4. Exceeding five percent requires registration as a distributor.

The Alabama practice implication is direct: a pharmacy that regularly supplies a sister store, a clinic, or a prescriber's office can quietly cross the 5% line and become an unregistered distributor. Track the ratio annually.

---

4. Alabama's Supply-Chain Permits (Ala. Admin. Code r. 680-X-2-.23)

Alabama permits the non-pharmacy links in the chain through a single rule, amended effective April 13, 2026. Rule 680-X-2-.23 covers drug manufacturers; wholesale distributors; private label distributors; repackagers; third-party logistics providers; outsourcing facilities; reverse distributors; and retail medical oxygen suppliers.

The Wholesale Distributor Definition — and Its Exemptions

A wholesale distributor is "every facility engaged in the business of distributing drugs, to include medical oxygen, for resale to pharmacies, hospitals, practitioners, government agencies, or other lawful outlets permitted to sell drugs." The rule then exempts, among others:

• The sale, purchase, or trade of a drug by a retail pharmacy to another retail pharmacy or practitioner, for relief of temporary shortages;
• Intracompany sales;
• Manufacturer and distributor sales representatives distributing samples;
• Charitable organizations distributing to nonprofit affiliates;
• Certain purchases by hospitals or health care entities that are members of a group purchasing organization; and
• Distributors of blood and blood components.

[!NOTE] The borrowing exemption is narrow and purposive. It covers "relief of temporary shortages." A standing arrangement under which one Alabama pharmacy routinely supplies another is not temporary and is not exempt — and if the product is a controlled substance, the federal 5% rule applies on top of it.

Operational Duties Imposed by r. 680-X-2-.23

Every permitted manufacturer, wholesale distributor, private label distributor, repackager, 3PL, outsourcing facility, and reverse distributor must establish, maintain, and follow written policies and procedures for the receipt, security, storage, inventory, and distribution of drugs, including procedures for:

• Identifying, recording, and reporting losses or thefts, and correcting errors and inaccuracies in inventories;
• Crisis management — preparing for, protecting against, and handling any crisis affecting the security or operation of the facility in the event of strike, fire, flood, other natural disaster, or a local, state, or national emergency;
• Outdated drug segregation — outdated drugs must be segregated and either returned to the manufacturer or destroyed, with written documentation of the disposition maintained for two (2) years;
• Quarantine of compromised product — any drug that is outdated, damaged, deteriorated, misbranded, or adulterated must be quarantined and physically separated from other drugs until destroyed or returned to the supplier, as must any drug whose immediate or sealed outer or secondary container has been opened or used;
• Doubtful returns — where the conditions under which a drug was returned cast doubt on its safety, identity, strength, quality, or purity, the drug must be destroyed or returned to the supplier unless examination or testing proves it meets standards; and
• Examination on receipt — each outside shipping container must be visually examined for identity and to prevent acceptance of contaminated drugs or drugs otherwise unfit for distribution.

Alabama Reporting of Unusual Purchase Volumes (r. 680-X-3-.05)

Separately from the DSCSA, Ala. Admin. Code r. 680-X-3-.05 requires any manufacturer, wholesaler, or distributor of controlled substances doing business in Alabama to obtain an annual registration from the Board, and to submit to the Board legible copies of the records and reports required by the DEA concerning increases in purchases or high or unusual volumes purchased by pharmacies — within 30 days. This is Alabama's own diversion tripwire and it operates at the pharmacy's supplier, which is why an unusual ordering pattern can produce a Board inquiry before the pharmacy hears from the DEA.

---

5. Putting It Together: Pharmacist Due Diligence at Receipt

1. Confirm the source is permitted. Verify the supplier holds a current Alabama permit under r. 680-X-2-.23 and, for controlled substances, an annual registration under r. 680-X-3-.01.
2. Examine the shipping container before acceptance, and refuse visibly compromised shipments.
3. Capture the TI and TS and store them where they can be produced for six years.
4. Have a pharmacist review and sign the invoice. Rule 680-X-3-.09 requires that all receipts of controlled substances by a pharmacy be reviewed and approved by a pharmacist, documented by the pharmacist's signature on the supplier's invoice — and rule 680-X-2-.14(3)(b) separately forbids a technician from documenting the receipt of a controlled substance into inventory.
5. Quarantine anything suspect, investigate, and escalate to FDA Form 3911 within 24 hours if the product proves illegitimate.