11.3 Drug Supply Chain Security Act (DSCSA), Component Qualification & Certificate of Analysis (CoA) Verification

11.3 Drug Supply Chain Security Act (DSCSA), Component Qualification & Certificate of Analysis (CoA) Verification

---

The Drug Supply Chain Security Act (DSCSA): Statutory Architecture & Interoperable Tracing

Enacted as Title II of the Drug Quality and Security Act of 2013, the Drug Supply Chain Security Act (DSCSA, 21 U.S.C. § 360eee) replaced a fragmented patchwork of state "pedigree" laws with a single, uniform federal framework. Its objective is to prevent counterfeit, diverted, stolen, contaminated, or adulterated prescription drugs from entering the United States pharmaceutical supply chain.

The 10-Year Phased Implementation

The DSCSA established a decade-long glide path culminating in full, secure, electronic, interoperable, package-level product tracing across the entire supply chain:

• Phase 1 (2015): Lot-level product tracing exchanging paper or electronic tracing documentation.
• Phase 2 (2018–2020): Package serialization requiring manufacturers and repackagers to affix unique 2D DataMatrix barcodes to every unit package.
• Phase 3 (from November 27, 2023): The enhanced drug distribution security requirements (interoperable, electronic, package-level tracing) took effect. FDA allowed a stabilization period to November 27, 2024, then staggered exemptions. Manufacturers and repackagers had until May 27, 2025, wholesale distributors until August 27, 2025, and dispensers with 26 or more full-time pharmacists and technicians until November 27, 2025. In August 2026 FDA extended the exemption for small dispensers (25 or fewer such employees) to November 27, 2027.

The Serialized Product Identifier: 2D DataMatrix Barcode

Every commercially manufactured prescription drug package entering commerce must carry a machine-readable 2D DataMatrix barcode encoding four critical data points:

1. National Drug Code (NDC) / Global Trade Item Number (GTIN)
2. Serial Number: A unique alphanumeric code (up to 20 characters) assigned to that specific package
3. Lot Number: The manufacturer batch identifier
4. Expiration Date: In numerical format (YYMMDD)

---

Product Tracing Information: The "3 Ts" (TI, TH, TS)

Under the DSCSA, dispensers (including retail and institutional pharmacies) are legally prohibited from accepting ownership of any prescription drug unless the previous trading partner provides complete Product Tracing Information, collectively known as the "3 Ts":

1. Transaction Information (TI)

Granular, lot-specific data elements detailing the product and the transaction:

• Proprietary or established name of the drug
• Strength and dosage form
• National Drug Code (NDC)
• Container size and number of containers
• Lot number assigned by the manufacturer
• Date of the transaction
• Date of shipment (if different from transaction date)
• Business name and address of the person/entity transferring ownership
• Business name and address of the person/entity receiving ownership

2. Transaction History (TH)

An unbroken electronic pedigree record tracking the prior transaction information for every transfer of the drug back to the original commercial manufacturer.

3. Transaction Statement (TS)

A legally binding affirmative declaration confirmed by the transferring entity certifying that:

• It is an Authorized Trading Partner (ATP) licensed under state and federal law;
• It received the 3T documentation from the prior owner;
• It did not knowingly ship a suspect or illegitimate product;
• It did not knowingly alter the transaction history; and
• It maintains compliant verification and quarantine systems.

---

Authorized Trading Partners, Suspect vs. Illegitimate Products & Form FDA 3911

Authorized Trading Partner (ATP) Mandate

Pharmacies may only purchase or receive prescription drug inventory from Authorized Trading Partners (ATPs):

• Manufacturers & Repackagers: Must be registered with the FDA.
• Wholesale Distributors: Must possess a valid state wholesale license and be reported to the FDA database.
• Third-Party Logistics Providers (3PLs): Must be licensed under state or federal standards.

Suspect Product vs. Illegitimate Product: The Legal Distinction

---

Component Qualification under USP <797> (2023 Revision)

USP <797> Section 9.3 requires written SOPs covering the selection, receipt, evaluation, handling, storage and documentation of every component, including ingredients and container closures.

Active pharmaceutical ingredients (APIs)

• Must comply with the USP–NF monograph, if one exists.
• Must have a certificate of analysis (COA) that includes the specifications and shows the lot meets them.
• In the U.S., must be made by an FDA-registered facility. Outside the U.S., the local laws apply.

All other components (excipients, added substances)

• Must comply with the USP–NF monograph, if one exists, and come with documentation (such as a COA or labeling) showing they meet specifications.
• Should come from an FDA-registered facility. If that is not possible, the designated person selects an acceptable and reliable source (see USP <1197>) and confirms identity, strength, purity and quality by reasonable means, such as visual inspection, COA review, or analytical testing of a sample.

Always

• Evaluate every component for suitability in a sterile preparation.
• Never use components labeled "not for pharmaceutical use," "not for injectable use," or "not for human use" for these purposes.
• Every lot of sterile, depyrogenated containers or closures needs a COA or other documentation showing sterility and depyrogenation. If the facility sterilizes or depyrogenates them itself, the process must be established and documented.

---

Certificate of Analysis (CoA) Verification Protocol

Under USP <797>, an API must have a lot-specific certificate of analysis (COA) showing it meets its specifications. The facility reviews the COA and keeps it with the receipt records before the lot is used.

Compounding Pharmacist CoA Verification Checklist

Before releasing a bulk chemical container into active compounding stock, the designated pharmacist must evaluate the CoA across 7 core analytical parameters:

1. Lot Number Concordance: Verify that the lot number printed on the CoA matches the lot number on the physical chemical container label.
2. Identification Testing: Confirm positive chemical identity matching monograph standards (e.g., Fourier-transform infrared spectroscopy [FTIR] absorption spectrum or HPLC retention time concordant with reference standards).
3. Potency / Assay Percentage: Verify that chemical purity falls within the official monograph acceptance range—typically $98.0\%\text{ to }102.0\%$ (or specific monograph limits on an anhydrous basis). If potency is outside this range, the powder cannot be used or must undergo mathematical formula adjustment.
4. Moisture Content & Loss on Drying (LOD): Check measured moisture percentage via Karl Fischer titration or Loss on Drying. High moisture content reduces actual active drug weight per gram of weighed powder, requiring mathematical calculation adjustment.
5. Melting Range & Physicochemical Specs: Confirm physical appearance, crystalline structure, color, solubility, pH of aqueous solution, and specific optical rotation.
6. Residual Solvents & Impurities: Verify compliance with USP General Chapter <467> (Residual Solvents), ensuring Class 1 (known human carcinogens such as benzene, carbon tetrachloride) and Class 2 solvents do not exceed toxicological concentration limits.
7. Bioburden & Bacterial Endotoxin Limits: For bulk substances destined for parenteral sterile compounding (where terminal sterilization or sterilizing filtration is performed), verify that microbial limits (Total Aerobic Microbial Count [TAMC], Total Yeast and Mold Count [TYMC]) and bacterial endotoxin levels (USP <85>) comply with monograph specifications.

---

Expiration Dating, Receipt Labeling & Storage of Bulk Chemicals

USP <797> establishes strict rules governing the assigned shelf life and physical receipt of bulk raw materials:

The Compendial Expiration Dating Rules

• Manufacturer Stated Expiration Date: If the manufacturer's container label or CoA states an expiration date, the chemical cannot be used past that date under any circumstance.
• Missing Vendor Expiration Date: The date of receipt must be clearly marked on any API or added-substance package that has no vendor expiration date. The facility must assign a conservative expiration date of no more than 1 year after receipt (USP <797> 9.3.2). Do not confuse this with the 3-year figure used for nonsterile components in USP <795>.

Mandatory Receipt Labeling Standard Operating Procedure

On receipt, personnel inspect the external packaging and the label for damage and for temperature-indicator excursions, reject and segregate unacceptable lots (and check other lots from that vendor), and label the container with:

1. Date received by the facility
2. Date container was first opened
3. Assigned facility expiration date (the vendor's date, or no more than 1 year from receipt if the vendor gives none)
4. Initials of the receiving technician or pharmacist

┌────────────────────────────────────────────────────────┐
│         INTERNAL FACILITY BULK CHEMICAL RECEIPT LABEL  │
│                                                        │
│ Chemical: Potassium Chloride USP Powder                │
│ Internal Lot: CHM-20260929-012                         │
│ Date Received:      2026-09-29                         │
│ Date First Opened:  2026-09-29                         │
│ Assigned Expiration: 2027-09-29 (Max 1 Year from Rcv)  │
│ Receiving Pharmacist Initials:  RC, PharmD             │
└────────────────────────────────────────────────────────┘

Storage & Environmental Integrity

Bulk chemicals must be stored strictly in accordance with manufacturer monograph requirements (e.g., controlled room temperature $20^\circ\text{C to }25^\circ\text{C}$, tight, light-resistant containers, desiccators, or refrigeration $2^\circ\text{C to }8^\circ\text{C}$). Flammable solvents must be stored in OSHA-compliant flammable safety cabinets, and hazardous bulk powders must be stored under negative pressure in accordance with USP <800>.