4.3 DSCSA Track-and-Trace & PPPA Safety Packaging

Key Takeaways

  • The Drug Supply Chain Security Act (DSCSA) of 2013 mandates an electronic, interoperable, package-level product tracing system utilizing the '3 Ts': Transaction Information (TI), Transaction History (TH), and Transaction Statement (TS).
  • Prescription drug packages must carry a 2D data matrix barcode containing the Standardized Numerical Identifier (SNI): National Drug Code (NDC), unique Serial Number, Lot Number, and Expiration Date.
  • Pharmacies must retain all DSCSA 3 Ts transaction data for exactly six (6) years from the date of the transaction.
  • Suspect products must be quarantined immediately; if determined to be illegitimate, the pharmacy must notify the FDA via Form FDA 3911 and all immediate trading partners within 24 hours.
  • Under the Poison Prevention Packaging Act (PPPA) of 1970, plastic prescription vials and caps CANNOT be reused for refills; patients may request a blanket waiver for non-child-resistant packaging, whereas prescribers can ONLY request a waiver on a per-prescription basis.
Last updated: August 2026

4.3 DSCSA Track-and-Trace & PPPA Safety Packaging

Ensuring that pharmaceutical products remain unadulterated, secure from counterfeiters, and safe from accidental pediatric poisoning requires strict compliance with two major federal statutes: the Drug Supply Chain Security Act (DSCSA) of 2013 and the Poison Prevention Packaging Act (PPPA) of 1970. The DSCSA governs the secure, electronic, package-level movement of prescription drugs through the commercial distribution chain, while the PPPA governs the physical safety closures used when dispensing medications directly to consumers.

Statutory Authority Reference:

  • DSCSA: Title II of the Drug Quality and Security Act (DQSA) of 2013, codified at 21 U.S.C. § 360eee et seq.
  • PPPA: 15 U.S.C. §§ 1471–1476, administered by the Consumer Product Safety Commission (CPSC) under 16 CFR Part 1700.
  • Kentucky Packaging & Adulteration: KRS 217.055 and 201 KAR 2:076.

1. The Drug Supply Chain Security Act (DSCSA) of 2013

Enacted as Title II of the Drug Quality and Security Act (DQSA) of 2013, the DSCSA established a phased, 10-year framework to create a fully electronic, interoperable, package-level track-and-trace system across the United States. The primary objective is to protect consumers from exposure to counterfeit, stolen, contaminated, diverted, or adulterated prescription drugs.

┌─────────────────────────────────────────────────────────────────────────────┐
│                     THE DSCSA PRODUCT TRACING '3 Ts'                        │
├──────────────────────────┬──────────────────────────────────────────────────┤
│ Transaction Information  │ Comprehensive drug details: Proprietary/generic  │
│ (TI)                     │ name, strength, dosage form, NDC, container size,│
│                          │ number of containers, lot number, transaction    │
│                          │ date, shipment date, seller & buyer info.        │
├──────────────────────────┼──────────────────────────────────────────────────┤
│ Transaction History      │ Complete electronic ledger documenting every     │
│ (TH)                     │ prior transaction back to the original innovator │
│                          │ or generic manufacturer.                         │
├──────────────────────────┼──────────────────────────────────────────────────┤
│ Transaction Statement    │ Legal affidavit from transferring entity confirming│
│ (TS)                     │ it is authorized, received TI/TH/TS, did not     │
│                          │ ship suspect/illegitimate drugs, and has systems.│
└──────────────────────────┴──────────────────────────────────────────────────┘

1. Authorized Trading Partners (ATPs)

Pharmacies (dispensers) may only accept ownership of prescription drugs from Authorized Trading Partners (ATPs):

  • Manufacturers and repackagers registered with the FDA.
  • Wholesale distributors licensed by the state from which they ship and the state in which they deliver (and registered with the FDA).
  • Third-Party Logistics Providers (3PLs) licensed by state and federal authorities.
  • Other licensed dispensers (pharmacies) in narrow exempt transfers (e.g., specific patient emergency needs).

2. Package-Level Serialization & 2D Data Matrix Barcodes

Under full DSCSA implementation, manufacturers and repackagers must affix a 2D Data Matrix Barcode to each individual commercial drug package and homogenous case. The 2D barcode encodes four essential data elements known as the Standardized Numerical Identifier (SNI):

  1. National Drug Code (NDC): Identifies the labeler, product, and package size.
  2. Unique Serial Number: Up to 20 alphanumeric characters unique to that individual container.
  3. Lot / Batch Number: Manufacturer's production lot.
  4. Expiration Date: Official expiration date.

3. Record Retention: The 6-Year DSCSA Rule

Under federal law, dispensers must retain all DSCSA product tracing documentation (TI, TH, and TS) for exactly six (6) years from the date of the transaction. This data must be retrievable upon request during an FDA or Board of Pharmacy audit.

Loading diagram...
DSCSA Suspect and Illegitimate Product Investigation Pipeline

2. Suspect vs. Illegitimate Product Protocols

Pharmacies must maintain robust written Standard Operating Procedures (SOPs) to identify, quarantine, and investigate problematic drug stock.

Definitions

  • Suspect Product: There is reason to believe that the product is counterfeit, diverted, stolen, fraudulent, intentionally adulterated, or otherwise unfit for distribution such that it could result in serious adverse health consequences or death.
  • Illegitimate Product: There is credible evidence demonstrating that the product is counterfeit, diverted, stolen, fraudulent, intentionally adulterated, or otherwise unfit for distribution.

Mandatory Action Steps for Pharmacies

  1. Immediate Physical Quarantine: The suspect product must be immediately segregated in a designated, secure quarantine storage area physically isolated from active pharmacy inventory.
  2. Prompt Investigation: The pharmacy must coordinate with the manufacturer and wholesale distributor to verify the package-level serialization data and 3 Ts.
  3. Form FDA 3911 Notification Within 24 Hours: If the investigation confirms that the drug is an illegitimate product, the pharmacy must notify the FDA electronically using Form FDA 3911 AND notify all immediate trading partners within 24 hours of the determination.
  4. Disposition & Retention: Illegitimate products must be held pending formal disposition instructions from the FDA and manufacturer. All investigative records, validation data, and Form 3911 filings must be retained for six (6) years.
┌─────────────────────────────────────────────────────────────────────────────┐
│                     MULTI-JURISDICTIONAL RECORD RETENTION                   │
├───────────────────────────────────────┬─────────────────────────────────────┤
│ DSCSA Track-and-Trace (TI, TH, TS)    │ 6 Years (Federal FDCA / DQSA)       │
├───────────────────────────────────────┼─────────────────────────────────────┤
│ HIPAA Privacy & Disclosure Records    │ 6 Years (Federal HHS / OCR)         │
├───────────────────────────────────────┼─────────────────────────────────────┤
│ Kentucky Prescription & Dispensing    │ 5 Years (KRS 315.191 / 201 KAR 2)   │
├───────────────────────────────────────┼─────────────────────────────────────┤
│ Kentucky Controlled Substance Records │ 5 Years (KRS 218A.200 / 902 KAR 55) │
├───────────────────────────────────────┼─────────────────────────────────────┤
│ Federal CSA Records (DEA 222, Invoices)│ 2 Years (21 CFR § 1304.04)          │
├───────────────────────────────────────┼─────────────────────────────────────┤
│ Kentucky Pharmacist CE Certificates   │ 3 Years (201 KAR 2:015)             │
└───────────────────────────────────────┴─────────────────────────────────────┘

3. The Poison Prevention Packaging Act of 1970 (PPPA)

The Poison Prevention Packaging Act of 1970 (PPPA) was enacted to protect children under five years of age from accidental poisoning and death resulting from opening and ingesting hazardous household substances and oral prescription medications. The PPPA is administered and enforced by the Consumer Product Safety Commission (CPSC), not the FDA.

Child-Resistant (C-R) Packaging Standards (The 80/90 Rule)

Under CPSC testing protocols (16 CFR § 1700.20), a package is deemed child-resistant if:

  • Child Test: At least 80% of tested children under 5 years of age cannot open the container during a 10-minute trial (at least 85% must fail before a demonstration, and at least 80% must fail after a visual demonstration of how to open the closure).
  • Adult Test: At least 90% of tested adults (aged 50 to 70 years) can successfully open and properly re-close the child-resistant package within 5 minutes.

Strict Prohibition on Reusing Plastic Prescription Containers

Under 16 CFR § 1700.15:

  • Plastic Vials and Plastic Caps CANNOT Be Reused: When refilling a prescription, the pharmacist must dispense the medication in a brand-new plastic vial with a brand-new plastic safety cap. Plastic threads and locking lugs experience microscopic wear and stress fatigue with normal use, destroying child-resistant efficacy.
  • Glass Containers May Be Reused: If a medication is dispensed in a glass container, the glass bottle may be reused upon refill, provided a brand-new plastic safety closure/cap is used with every fill.

4. Master PPPA Exemptions & Waiver Regulations

While the PPPA establishes a general mandate that all oral prescription legend and controlled substance medications be dispensed in child-resistant packaging, federal regulations recognize specific statutory drug exemptions and consumer waiver provisions.

Comprehensive Table of Statutory PPPA Exemptions

Exempt Medication CategoryStatutory Exemption Threshold / Package CriteriaClinical Rationale for Exemption
Sublingual NitroglycerinAll dosage strengths (sublingual tablets).Rapid emergency access required for acute angina pectoris; C-R delays can cause fatal myocardial ischemia.
Sublingual & Chewable Isosorbide DinitrateDosage strengths of 10 mg or less.Rapid emergency sublingual or chewable access for acute angina.
Oral Contraceptives & EstrogensManufacturer memory-aid mnemonic dispenser packages (e.g., 21-day or 28-day blister dial-packs).Complex multi-step packaging; daily mnemonic compliance aid essential for contraception.
Methylprednisolone (Medrol Dosepak)Unit packages containing no more than 84 mg total drug.Tapering dose schedule in manufacturer unit-of-use blister packaging.
Prednisone TabletsUnit packages containing no more than 105 mg total drug.Predetermined short-course oral steroid pack.
Betamethasone TabletsUnit packages containing no more than 12.6 mg total drug.Low overall package toxicity threshold.
Mebendazole (Vermox) TabletsUnit packages containing no more than 600 mg total drug.Standard short-course antihelminthic package.
Potassium Supplements (Unit-Dose)Unit-dose solid oral forms containing no more than 50 mEq per unit dose.Individual foil blister unit-dose packaging limits accidental massive pediatric ingestion.
Sodium Fluoride PreparationsLiquid or tablets containing no more than 264 mg of sodium fluoride (or $\le 0.5%$ elemental fluoride).Low total elemental fluoride toxicity limit per package.
Cholestyramine & Colestipol PowdersAnhydrous cholestyramine powder or colestipol packets up to 5 grams.Bulky, non-absorbable resin powder unpalatable to young children.
Erythromycin Ethylsuccinate (EES)Oral suspensions containing no more than 8 grams (or tablets $\le 16\text{ g}$).Low overall toxicity relative to packaging volume.
Pancrelipase PreparationsTablets, capsules, or powder formulations.Digestive enzyme replacement therapy; non-toxic systemic profile.
Inpatient / Institutional MedicationsUnit-dose medications administered by healthcare professionals in hospitals or nursing homes.Medication is stored securely in clinical areas and administered directly by licensed nurses/physicians.

5. Non-Child-Resistant Packaging Waiver Rules

A central distinction on the MPJE is the legal authority of the patient versus the prescriber to request non-child-resistant (easy-open) packaging:

┌─────────────────────────────────────────────────────────────────────────────┐
│                     PPPA WAIVER AUTHORITY COMPARISON                        │
├───────────────────────────────────┬─────────────────────────────────────────┤
│ Patient / Consumer Authority      │ Prescriber Authority                    │
├───────────────────────────────────┼─────────────────────────────────────────┤
│ • Can request a BLANKET WAIVER    │ • Can ONLY request a waiver on a        │
│   for ALL present and future      │   PER-PRESCRIPTION basis.               │
│   prescriptions.                  │ • CANNOT issue a blanket waiver for all │
│ • Can request a single per-Rx     │   of a patient's medications or future  │
│   waiver.                         │   prescriptions.                        │
│ • Request may be verbal, but      │ • May check 'Easy-Open' on a single Rx  │
│   signed written record is best   │   order or specify on a single verbal   │
│   practice.                       │   prescription call-in.                 │
└───────────────────────────────────┴─────────────────────────────────────────┘

Operational Rules for Waivers

  1. Patient Blanket Waivers: A patient (or the patient's designated caregiver) has plenary authority to request that all of their medications be dispensed with non-child-resistant closures (e.g., due to severe rheumatoid arthritis or elderly hand weakness). The pharmacist may maintain a signed blanket waiver form in the patient profile. The pharmacist should periodically confirm that the patient still desires easy-open caps.
  2. Prescriber Limitations: A physician, APRN, or dentist cannot issue a blanket waiver covering all medications for a patient. A prescriber waiver applies strictly to the single prescription and any refills authorized under that specific prescription order. If the patient receives a new prescription for a different medication from the same prescriber, child-resistant packaging must be used unless the prescriber re-specifies easy-open caps or the patient has an active blanket waiver on file.

6. Exam Watch: High-Yield Scenarios & Traps

Clinical Scenarios

  • Scenario 1 (Prescriber Blanket Request): Dr. Vance writes a prescription for Metoprolol Succinate 50 mg with 3 refills and writes: "Please dispense all future prescriptions for this elderly patient in easy-open containers." The patient has never signed a waiver. Three weeks later, Dr. Vance sends a new prescription for Atorvastatin 20 mg. Legal Analysis: The Metoprolol (and its 3 refills) may be dispensed in easy-open packaging. However, the Atorvastatin MUST be dispensed in child-resistant packaging. Prescribers lack legal authority to issue blanket waivers for future or distinct prescriptions.
  • Scenario 2 (Sublingual Nitroglycerin Packaging): A community pharmacy receives a 100-tablet stock bottle of sublingual nitroglycerin 0.4 mg. The technician counts out 25 tablets and dispenses them in an amber plastic prescription vial with a child-resistant cap. Legal Analysis: UNLAWFUL. Sublingual nitroglycerin must be dispensed in its original, unopened glass manufacturer container with a metal screw cap to prevent drug volatilization and loss of potency, and it is statutorily exempt from child-resistant packaging.
  • Scenario 3 (Plastic Vial Reuse): An elderly patient brings back his empty plastic amber prescription vial and asks the pharmacist to refill his amlodipine using the same vial to save plastic. The pharmacist inspects the vial, notes no physical damage, and places the refill inside. Legal Analysis: UNLAWFUL under the PPPA. Plastic vials must be discarded; a new plastic vial and cap are mandatory upon every refill.

High-Yield Supply Chain & Packaging Traps

  • ⚠️ Trap 1: DSCSA Retention (6 Years) vs. State Retention (5 Years). Remember that federal DSCSA product tracing records must be kept for 6 years, whereas Kentucky prescription dispensing records and controlled substance files are kept for 5 years.
  • ⚠️ Trap 2: 24-Hour Form FDA 3911 Reporting. When an illegitimate product is identified, the pharmacy must notify both the FDA (via Form FDA 3911) and all immediate trading partners within 24 hours.
  • ⚠️ Trap 3: PPPA Enforcing Agency. The PPPA is enforced by the Consumer Product Safety Commission (CPSC), NOT the FDA or the DEA.
Test Your Knowledge

A community pharmacist in Owensboro is refilling a maintenance prescription for hydrochlorothiazide for a regular patient who brings in her previous plastic amber prescription vial. Which of the following dispensing procedures complies with the Poison Prevention Packaging Act (PPPA)?

A
B
C
D
Test Your Knowledge

During an internal audit, a hospital pharmacy discovers that a shipment of branded oncology vials received from an unauthorized secondary distributor contains counterfeit lot numbers and altered 2D data matrix barcodes. The pharmacy's investigation confirms that the vials are illegitimate products under the DSCSA. What is the mandatory reporting obligation for the pharmacy?

A
B
C
D
Test Your Knowledge

A physician treating an elderly patient with severe osteoarthritis calls a community pharmacy with a new verbal prescription for celecoxib 200 mg capsules. During the call, the physician states: 'Please make sure all future prescriptions and refills for this patient are dispensed in non-child-resistant easy-open containers.' Under the Poison Prevention Packaging Act (PPPA), how must the pharmacist respond to this request?

A
B
C
D