US DSCSA · Manufacturers

DSCSA for pharmaceutical manufacturers.

US Drug Supply Chain Security Act · §582 · unit-level, interoperable, electronic tracing in force across the US supply chain.

DSCSA's enhanced-security phase is in force: every package a manufacturer ships carries a unique product identifier, transaction data moves electronically as EPCIS, and verification requests must be answered fast. The compliance question has moved from "are you serialized?" to "does your data survive contact with your trading partners?"

DSCSA §582In forceEPCIS 2.0GS1 DataMatrixFDA 3911
What the rule requires

Serialized is table stakes. Interoperable is the test.

Unit-level product identifiers

Every saleable unit carries an SNI in a GS1 DataMatrix — NDC, serial, lot and expiry — applied at packaging and readable down the chain.

EPCIS transaction data

Transaction information and statements move electronically with product, in EPCIS — and downstream partners increasingly refuse product whose data arrives late or broken.

Verification within the clock

Saleable-return and suspect-product verification requests must be answered promptly. Systems that were built for batch queries strain at unit-level volume.

Suspect and illegitimate product duty

Quarantine, investigate, and notify FDA (Form 3911) on illegitimate product — obligations that assume you can identify exactly which units are affected.

The dates

The timeline, as it stands.

DSCSA's decade-long phase-in is over — enhanced drug distribution security is the operating reality, and the FDA's NDC-12 format transition on 7 March 2033 is the next system-wide retooling already on the calendar.

DSCSA enacted2013
Unit-level tracingin force
Enforcement discretionended
NDC-12 transition7 Mar 2033
What to do now

Three moves that de-risk the deadline.

01 · Step

Audit your data, not your labels

Serialization is done; the failures now are data failures — mismatched EPCIS events, orphaned serials, aggregation drift. Measure your exception rate honestly.

02 · Step

Close the verification loop

Test worst-case: a Saturday-night suspect-product query on a five-year-old lot. If the answer takes days, the gap is architectural, not procedural.

03 · Step

Prepare the NDC-12 runway

Every label, GTIN mapping and system that parses NDCs is touched by the 2033 12-digit transition. Manufacturers who fold it into normal refresh cycles pay a fraction of the panic price.

How Aeroz fits

Authentication on top of the serialization you already run.

Aeroz adds unit-level authentication and audit-defensible custody to existing DSCSA serialization: a tamper-evident chip identity bound to the serialized unit, EPCIS 2.0 events in an append-only log, and sub-second verification by phone tap or dock. Your L4/L5 stack stays; the proof layer goes on top — and recall or suspect-product scope shrinks from lot-sized to unit-sized.

FAQ

DSCSA for manufacturers, answered.

Is DSCSA fully in force now?

Yes — the enhanced drug distribution security requirements of §582 apply across the supply chain, with unit-level electronic, interoperable tracing the operating standard between trading partners.

What is the NDC-12 deadline?

The FDA's transition to a uniform 12-digit NDC format takes effect 7 March 2033 — every drug label and every system that parses NDCs in America gets re-tooled. It is the largest scheduled retooling in US pharma.

We are serialized — what is left to buy?

The gap is proof and speed: verifying that a physical unit is the unit its data claims, answering verification requests in seconds, and narrowing recalls to exact units. Serialization records claims; authentication proves them.

Does Aeroz replace our L4/L5 provider?

No. Aeroz layers authentication and custody on top of the serialization systems you already run — it consumes and emits EPCIS 2.0, and binds a cryptographic identity to each serialized unit.

Readiness audit

Know exactly where you stand — in 14 days.

A fixed-fee Aeroz audit maps your products against dscsa for manufacturers requirements and returns a written readiness assessment, a data-mapping review, and a scoped pilot plan with cost and timeline.

Fixed fee 14-day written report No commitment to proceed