15.2 Distribution and DSCSA Records

Key Takeaways

  • DSCSA (FDCA § 582 / 21 U.S.C. § 360eee-1) requires authorized trading partners, transaction information (TI) and a transaction statement (TS), package-level product identifiers, and quarantine/investigation of suspect or illegitimate product. Patients are not trading partners.
  • Dispensers keep TI/TS (and investigation records) for not less than six years. Connecticut CS records are three years (CGS §§ 21a-250, 21a-254). When both attach to the same shipment, keep the longer period — six years.
  • A 503A pharmacy is a dispenser compounding for an identified patient (or limited anticipation). It is not a wholesale distributor. Buying finished prescription stock from an unlicensed seller or treating a 503A pharmacy as a wholesaler violates authorized-trading-partner rules.
  • A dispenser may distribute controlled substances to another practitioner without a distributor registration only if 21 CFR 1307.11 is met, including the 5 percent calendar-year dosage-unit cap. CII still needs a 222 or CSOS; III–V need an invoice. Crossing 5 percent requires a distributor registration.
  • CGS § 21a-250(d) allows limited interpharmacy CIII–V for a patient’s immediate need and limited emergency-stock distribution to a medical director of a CCNH, rest home with nursing supervision, or state correctional institution, with a separate written record cross-referenced to § 21a-254(h).
Last updated: August 2026

Why outbound totes and inbound pedigrees share one competency

Quick Answer: DSCSA (FDCA § 582) requires authorized trading partners, TI/TS, product identifiers, and suspect/illegitimate-product investigation. Keep tracing records six years. Connecticut CS records last three yearskeep the longer. A 503A pharmacy is a dispenser, not a wholesaler. Limited CS transfers to another practitioner sit under 21 CFR 1307.11 (the 5 percent rule) and CGS § 21a-250(d); CII still needs a 222/CSOS.

NABP 4.1.2 is distribution. Chapter 6.3 taught DSCSA as a federal program among HIPAA, OBRA, and PPPA. This section is the record that moves with the bottle: who may send it, what paper or electronic TI/TS you capture, how long you keep it, and when a Connecticut pharmacy accidentally becomes a wholesaler.

FDA’s August 6, 2026 small-dispenser exemption from certain enhanced electronic-tracing requirements through November 27, 2027 (owning company with 25 or fewer FTE pharmacists or pharmacy technicians as of November 27, 2026) does not waive authorized-trading-partner, identifier, or suspect-product duties. Baseline TI/TS capture still applies. Do not treat the exemption as permission to buy from an unlicensed seller.

Authorized trading partners, TI, and TS

DSCSA applies to prescription drug product in finished dosage form for human use as it moves among manufacturers, wholesale distributors, dispensers (pharmacies), and repackagers. Patients are not trading partners. You may not buy or sell covered product with a party that is not licensed or registered as required.

Transaction information (TI) is the who/what/when of the change of ownership: names and addresses of transferor and transferee, NDC, strength, dosage form, container size, number of containers, lot, and the dates of transaction and shipment. Transaction statement (TS) is the seller’s attestation that it is authorized, received the product from an authorized partner, received the required documentation, did not knowingly ship suspect or illegitimate product, and has systems in place. Historic transaction history (TH) was the paper-pedigree chain; enhanced package-level electronic tracing now embeds identifiers in TI rather than a separate paper TH for most partners.

On receipt, the pharmacy captures TI/TS (electronically where required; by an allowed alternative if a qualifying small-dispenser exemption still applies to the enhanced method) and does not put the tote into active stock until the partner is authorized and the documentation matches the bottles. On outbound distribution of finished prescription product (not a dispensed patient fill), the pharmacy provides TI/TS to the next authorized partner.

Suspect and illegitimate product

Suspect product looks wrong: missing or unreadable identifier, mismatched lot, illogical TI, signs of counterfeiting, or a trading partner you cannot verify. Illegitimate product is confirmed counterfeit, diverted, stolen, intentionally adulterated, or otherwise unfit as DSCSA defines it.

The operational sequence is:

  • Quarantine — do not dispense, do not return into the fast-mover bay
  • Investigate — verify the identifier and the TI against the prior owner; dispensers verify at least three packages or 10 percent, whichever is greater, or all packages if fewer than three
  • Notify FDA and immediate trading partners if the product is illegitimate, using the statutory clocks in § 582
  • Keep investigation and disposition records not less than six years after the investigation concludes

A cheap tote of onabotulinumtoxinA from an unlicensed social-media seller is a today violation, exemption or not. Chapter 6 already used that fact pattern; here the scored behavior is quarantine plus a six-year investigation file, not a quiet restock.

Six-year DSCSA file versus three-year Connecticut CS file

FDCA § 582 / 21 U.S.C. § 360eee-1 requires dispensers to retain transaction information and transaction statements for not less than six years after the transaction, and investigation records for not less than six years after the investigation ends. CGS §§ 21a-250 and 21a-254 keep CS prescriptions, invoices, and inventories three years. 21 CFR 1304.04 is a two-year federal CS floor.

When an oxycodone shipment is both a CSA acquisition and a DSCSA transaction, the clocks stack. Destroying the TI/TS at month 37 because “Connecticut CS records are three years” is a DSCSA miss. Destroying the 222 copy at month 25 because “DEA only wants two years” is a Connecticut miss (15.3). Keep the longer period that applies to that record. Practical habit: CS invoices and 222/CSOS files live three years for DCP; DSCSA TI/TS for the same NDC lives six years for FDA. Do not purge the tracing file on the CS anniversary.

RecordClockAuthority
DEA 222 copy, CS invoice, CS inventory, perpetual CII log3 years in Connecticut (federal CS floor is 2)21 CFR 1304.04; CGS §§ 21a-250, 21a-254, 20-633e(d)
DSCSA TI/TS6 years after the transactionFDCA § 582 / 21 U.S.C. § 360eee-1
Suspect/illegitimate investigation and disposition6 years after the investigation endsFDCA § 582
Same oxycodone tote, CS invoice plus TIKeep 6 years for the tracing set; do not shred the CS invoice before year 3More-restrictive / longer-retention wins

503A versus wholesale — do not confuse the seller

503A (FDCA § 353a) is patient-specific traditional compounding in a state-licensed pharmacy (or by a licensed physician), or limited anticipation of those prescriptions. A 503A pharmacy is a DSCSA dispenser. It is not a wholesale distributor and it is not a 503B outsourcing facility.

503B facilities register with FDA, follow CGMP, may produce office stock, and have a statutory DSCSA exemption for their compounded product. Buying FDA-approved finished bottles still runs through an authorized wholesale distributor (or the manufacturer). Treating a neighborhood 503A pharmacy as your source of commercially available tablets — or as a gray-market wholesaler of office-use batches — is both a compounding violation and an unauthorized-trading-partner problem.

When a pharmacy distributes instead of dispensing

Dispensing to a patient on a prescription is not DSCSA “distribution” to a trading partner. Distribution is a change of ownership to another registrant or trading partner.

21 CFR 1307.11 lets a practitioner registered to dispense also distribute a quantity of CS to another practitioner for dispensing to patients, without holding a distributor registration, if the recipient is registered to dispense that substance, a 222 or CSOS is used for I/II, required records are kept, and the total dosage units distributed under this section (and 1301.25) in the calendar year do not exceed 5 percent of the dosage units distributed and dispensed that year. If the pharmacy has reason to believe it will exceed 5 percent, it must obtain a distributor registration. Transfers to ADS units at LTCFs for which the same retail pharmacy also holds the ADS registrations do not count toward the 5 percent cap.

CGS § 21a-250 overlays two Connecticut-specific paths:

  • (d)(1) — a retail pharmacy or hospital pharmacy may distribute small quantities of CIII–V to another pharmacy for a patient’s immediate needs: not more than one ounce of powder or ointment, sixteen ounces of liquid, or 100 dosage units of tablets, capsules, suppositories, or injectables.
  • (d)(2) — a retail pharmacy may distribute CII–V as emergency stock to a practitioner who is the medical director of a chronic and convalescent nursing home, rest home with nursing supervision, or state correctional institution, in labeled containers, limited to what that medical director documented.
  • (d)(3) — keep a separate written record (receiving pharmacy or medical director’s name and DEA number, date, name, form, strength, quantity) filed as § 21a-254(h) requires.
  • (b) — on discontinuance, remaining CS stock may be sold to a manufacturer, distributor, practitioner, wholesaler, or pharmacy; Schedule II only on the written order the CSA requires (a 222/CSOS).

CII still does not travel on a handshake. The 5 percent federal cap still applies to ordinary practitioner-to-practitioner distributions. Using 21a-250(d) as a standing wholesale pipeline is the wrong read.

Scenario: two inbound totes, one outbound 222

A Waterbury independent (22 pharmacist and technician FTEs at the owning company) receives a wholesaler tote of atorvastatin with electronic TI/TS and a sealed bottle of oxycodone on a 222. Both files open: the oxycodone 222 copy and CS invoice live three years for DCP; the atorvastatin and oxycodone TI/TS live six years. A second tote of “office-use hydromorphone syringes” arrives from a 503A compounding pharmacy with no TI and no 222. That tote is not a lawful wholesale receipt — quarantine, do not stock, and treat it as an ATP/CSA problem. The same week a nearby clinic asks for a 100-count bottle of alprazolam “to get through the weekend.” That is a 1307.11 / 21a-250 question, not a DSCSA patient fill: invoice, DEA numbers, running 5 percent tally — and not a CII 222 from a 503A compounding bench.

CT may be stricter; more-restrictive wins.

Official anchors

  • 21 U.S.C. § 360eee-1 — DSCSA tracing, TI/TS, six-year records, suspect product.
  • FDA DSCSA exemptions — small-dispenser enhanced-tracing relief through November 27, 2027; baseline ATP duties remain.
  • 21 CFR 1307.11 — dispenser-to-practitioner distribution; 5 percent rule.
  • CGS § 21a-250 — three-year prescription file; small-quantity and emergency-stock distributions.
Test Your Knowledge

A Connecticut pharmacy receives a wholesaler shipment of oxycodone that is documented on a DEA Form 222 and also carries DSCSA transaction information and a transaction statement. How long must those records be kept?

A
B
C
D
Test Your Knowledge

A Hartford pharmacist is offered a case of brand injectable product at a steep discount by a seller who is not a Connecticut-licensed wholesaler and cannot produce DSCSA TI/TS. Which statement is correct?

A
B
C
D
Test Your Knowledge

Which statement correctly distinguishes 503A compounding from wholesale distribution and the CSA 5 percent rule?

A
B
C
D