3.4 DSCSA & Drug Supply Chain Integrity

3.4 DSCSA & Drug Supply Chain Integrity

Illinois MPJE focus: DSCSA is federal preemptive supply-chain law for covered prescription products. Illinois still licenses pharmacies and wholesale distributors and inspects acquisition records through IDFPR. Exam answers combine authorized trading partners + tracing/verification duties + quarantine/notification with ordinary Illinois permit and recordkeeping expectations.

Legislative Snapshot

The Drug Supply Chain Security Act (DSCSA) is Title II of the Drug Quality and Security Act (DQSA) of 2013. It replaced a patchwork of state pedigree laws with a national framework to identify and trace certain human prescription drugs as they move from manufacturer to dispenser. Goals include:

• Electronic, interoperable package-level tracing over a phased implementation
• Standardized product identifiers on packages and homogeneous cases
• Verification systems to detect suspect and illegitimate product
• Restriction of commercial transactions to authorized trading partners

DSCSA does not replace controlled-substance ordering rules (DEA Forms/CSOS) or Illinois pharmacy permit rules; it sits alongside them for supply integrity of finished prescription drugs in commercial distribution.

Authorized Trading Partners

A pharmacy (dispenser) may accept ownership of covered prescription products only from an authorized trading partner. Know the cast:

Wholesale distributor licensing concepts (MPJE-tested)

Wholesale distributors that sell into or from Illinois must hold the required state wholesale licenses for the jurisdictions involved and appear as authorized partners under DSCSA. Pharmacies should:

• Confirm the wholesaler is licensed before opening an account or accepting ownership
• Refuse "gray market" or unknown internet sources offering deep discounts on high-demand brands
• Keep invoices and pedigree/tracing records that show who transferred ownership

Exam rule: Buying "too-good-to-be-true" stock from an unlicensed internet source or a friend with leftover bottles is a DSCSA and IDFPR problem even if the tablets look real.

Serialization and Product Identifiers

Manufacturers and repackagers place a product identifier on each package (and homogeneous case), typically via a 2D Data Matrix barcode plus human-readable elements. Core data elements include:

1. National Drug Code (NDC)
2. Unique serial number for that package
3. Lot number
4. Expiration date

Verification means checking that the product identifier corresponds to what the manufacturer/repackager issued—especially when investigating suspect product, responding to FDA/trading-partner requests, or meeting enhanced verification obligations as interoperability matures. Pharmacists do not need to recite barcode symbology standards, but they must know why serialization exists: package-level authentication and tracing.

Product Tracing Documentation (the "3Ts" Concept)

As ownership changes hands among trading partners, DSCSA requires product tracing information often taught as the 3Ts:

Transaction Information (TI)

Concrete details of the product and the transfer—such as product name, strength, dosage form, NDC, container size and count, lot number, transaction/shipment dates, and seller/buyer names and addresses.

Transaction History (TH)

A statement of prior transactions back to the manufacturer (as required in the applicable implementation phase). As the system becomes fully electronic and interoperable, history may be retrieved through the electronic system rather than a paper packet at every step.

Transaction Statement (TS)

A statement affirming that the seller is authorized, received the product from an authorized partner, received required transaction documentation, did not knowingly ship suspect/illegitimate product, and systems are in place as required.

Dispenser duties (exam-level)

• Do not accept product that lacks required tracing information when the transaction is not exempt
• Capture and maintain transaction information/history/statements (or electronic equivalents) for the required retention period—commonly tested as 6 years
• Be able to provide tracing information upon request by the appropriate authority or trading partner within required timeframes
• Continue ordinary Illinois invoice/inventory recordkeeping for IDFPR inspections

Common exemptions / carve-outs (recognize, do not over-expand)

DSCSA focuses on commercial distribution of finished prescription drugs. Transactions often discussed as outside ordinary tracing packages include certain patient-specific dispensed product, some intracompany transfers, and other statutory exemptions. When in doubt on a vignette: commercial purchase into pharmacy inventory from a wholesaler is in the system; handing a labeled vial to the patient at counseling is ordinary dispensing, not a wholesale "sale" of tracing stock.

Suspect Versus Illegitimate Product

This distinction is heavily tested.

Response pathway

1. Quarantine physically and in inventory systems (do not dispense, transfer, or return to saleable stock)
2. Investigate / verify product identifier and trading-partner information; coordinate with manufacturer/wholesaler as appropriate
3. If cleared, document and return to inventory only when justified
4. If illegitimate, notify FDA (commonly via Form FDA 3911) and immediate trading partners generally within 24 hours, and arrange proper disposition—never quietly restock confirmed illegitimate product

Reason to believe examples: broken security seals, mismatched lot vs invoice, unknown supplier, patient report that tablets look different with corroborating supply-chain concerns, FDA alert matching your lot.

Credible evidence examples: manufacturer confirmation of counterfeit, law-enforcement confirmation of theft lot, laboratory confirmation of wrong API.

How DSCSA Connects to Adulteration/Misbranding and Illinois Practice

• Counterfeit or diverted product is often both a DSCSA illegitimate product problem and an FD&C adulteration/misbranding problem.
• Illinois pharmacies must still buy from properly licensed sources under IDFPR rules and maintain invoices for inspections.
• Theft/loss of controlled substances still triggers DEA Form 106 and Illinois reporting pathways—DSCSA does not replace CSA security rules taught in Chapter 2.
• Central fill and multi-site models must preserve DSCSA documentation responsibilities in written agreements so each site knows who holds tracing records.

Practical Illinois Bench Checklist

• Confirm wholesaler is licensed/authorized before opening an account
• Match invoices to product received; investigate shortages, overages, and packaging anomalies
• Train staff to escalate damaged seals, unfamiliar suppliers, and patient "this looks fake" reports
• Keep electronic/paper tracing records retrievable for 6 years
• Quarantine first, argue later—never dispense through a red flag to avoid a stock-out conversation
• Coordinate DSCSA quarantine with ordinary adulteration instincts: if integrity is in doubt, do not put the product in a patient's hands

Section Checkpoint

• DSCSA = national track-and-trace for covered Rx drugs; pharmacies are dispenser trading partners.
• Buy only from authorized partners; retain tracing records (commonly 6 years).
• Serialization enables package-level verification.
• Suspect = reason to believe → quarantine/investigate; illegitimate = credible evidence → 24-hour FDA/trading-partner notifications and disposition.