Skip to main content
Home/PTCB/Study Guides/Product Serialization & Tracking (DSCSA)

Product Serialization & Tracking (DSCSA)

FDA product serialization, tracking, tracing, handling, and quarantining requirements under the Drug Supply Chain Security Act (DSCSA).

3% of PTCE exam·15 practice questions

Product Serialization & Tracking (DSCSA) is worth 3.0% of the PTCE within the Federal Requirements domain (18.75% overall). It tests the Drug Supply Chain Security Act — the federal "track and trace" system for prescription drugs — including product identifiers, transaction documentation, verification, and how to handle suspect or illegitimate product. The principle: every package of prescription drug must be uniquely identifiable and traceable through the supply chain so that counterfeit, stolen, or diverted product can be caught and quarantined.

What DSCSA Is

The Drug Supply Chain Security Act (DSCSA) was enacted in 2013 as Title II of the Drug Quality and Security Act (DQSA) and set a 10-year phase-in toward full, package-level, electronic, interoperable tracing. It applies only to "authorized trading partners" — manufacturers, repackagers, wholesale distributors, and dispensers (pharmacies) that hold valid registration or licensure. The overarching goal is to protect patients from counterfeit, contaminated, stolen, or otherwise harmful drugs entering the legitimate supply chain.

DSCSA transactions may occur only between authorized trading partners with valid registration/licensure.

The Product Identifier and Serialization

Each saleable package (and homogeneous case) must carry a product identifier encoded in a 2D DataMatrix barcode containing four elements: a standardized numerical identifier — the GTIN, derived from the drug's NDC — a unique serial number, the lot number, and the expiration date. Serialization means each individual package gets its own unique serial number, so no two packages of the same product share an identifier. This lets any trading partner verify a specific package rather than just a lot.

The DSCSA product identifier = GTIN (from the NDC) + unique serial number + lot number + expiration date.

Transaction Documentation — TI, TS (and the retired TH)

Historically (2015–2023), each change of ownership required "T3" documentation: Transaction Information (TI), Transaction History (TH), and a Transaction Statement (TS). Under the enhanced requirements that began November 27, 2023, the Transaction History is eliminated — trading partners now exchange only Transaction Information and a Transaction Statement, electronically and interoperably (commonly using the EPCIS standard). Dispensers must maintain transaction records for at least 6 years. The FDA granted a stabilization/non-enforcement period pushing practical enforcement to November 27, 2024, with staggered exemptions afterward — and small dispensers (a company owning the dispenser with 25 or fewer full-time employees who are licensed pharmacists or qualified pharmacy technicians) were given until November 27, 2026.

Under the enhanced (post-Nov 27, 2023) requirements, Transaction History is dropped — only TI and TS are exchanged.

Suspect, Illegitimate Product, and Quarantine

If a drug is "suspect" (potentially counterfeit, diverted, stolen, or contaminated), the trading partner must quarantine and investigate it. If it is determined "illegitimate," the trading partner must quarantine it and notify the FDA and immediate trading partners — using Form FDA 3911 — within 24 hours. Dispensers must also verify the product identifier on saleable returns before redistributing them, and must be able to respond to verification and trace requests. The consistent action for questionable product is: stop, quarantine, verify, and report — never dispense.

Illegitimate product: quarantine and notify the FDA (Form FDA 3911) within 24 hours.

Must-Know for the Exam

  • DSCSA (2013) is Title II of the Drug Quality and Security Act (DQSA)
  • Only authorized trading partners (valid registration/licensure) may transact
  • Product identifier = GTIN (from NDC) + serial number + lot number + expiration date, in a 2D DataMatrix
  • Enhanced requirements began November 27, 2023
  • Transaction History (TH) is eliminated under enhanced requirements — only TI + TS exchanged
  • Dispensers keep transaction records for at least 6 years
  • Small dispensers (25 or fewer FT pharmacists/qualified techs) had until November 27, 2026
  • Illegitimate product: quarantine and notify FDA via Form FDA 3911 within 24 hours

Common Exam Mistakes

  • Still requiring Transaction History under the enhanced (post-2023) requirements
  • Thinking DSCSA covers OTC products (it governs prescription drugs)
  • Listing only NDC as the product identifier instead of GTIN + serial + lot + expiration
  • Confusing serialization (unique per package) with lot-level tracking
  • Failing to quarantine and report illegitimate product to the FDA within 24 hours
  • Transacting with an unlicensed/unauthorized trading partner

Quiz yourself on Product Serialization & Tracking (DSCSA)

Test what you just read — instant feedback on every question.

Start Product Serialization & Tracking (DSCSA) Practice Quiz →

Key Concepts — Part 1

1. What is the primary purpose of the Drug Supply Chain Security Act (DSCSA)?

To build an electronic, interoperable system to trace prescription drugs as they move through the supply chain, protecting against counterfeit, diverted, or stolen product

DSCSA's core purpose is establishing electronic traceability across the pharmaceutical supply chain to detect and remove counterfeit, stolen, or otherwise illegitimate product. It does not govern licensing exams (A), pricing (B), or REMS determinations (D), which are separate regulatory frameworks.

2. What four elements make up the product identifier required under DSCSA, typically encoded in a 2D barcode on drug packaging?

National Drug Code (NDC), serial number, lot number, and expiration date

The DSCSA product identifier consists of the NDC, a unique serial number, the lot number, and the expiration date, typically encoded in a 2B data matrix barcode. The other options list irrelevant or incorrect data elements that are not part of the product identifier.

3. Under DSCSA, what must trading partners, such as manufacturers, wholesalers, and dispensers, verify about each other before engaging in transactions?

That each party is an authorized trading partner, properly licensed or registered as required

DSCSA requires trading partners to confirm one another's status as authorized trading partners with appropriate licensure or registration before transacting, helping keep illegitimate actors out of the supply chain. Revenue (A), shipping carrier preference (C), and marketing budget (B) are irrelevant to this verification requirement.

4. A pharmacy technician receives a shipment and notices packaging that appears tampered with and inconsistent with the expected product identifier. What term describes this product's status while it is being investigated?

Suspect product

Product that may be counterfeit, diverted, or otherwise unfit based on available information, before confirmation, is termed suspect product and must be quarantined and investigated. Illegitimate product (A) is the term used once the investigation confirms the product is not legitimate. Grandfathered product (C) and saleable return (D) refer to unrelated DSCSA concepts.

5. Once a product is confirmed to be illegitimate under DSCSA, what must the pharmacy do regarding notification?

Quarantine the product and notify the FDA and immediate trading partners within 24 hours of making the determination

Once product is confirmed illegitimate, DSCSA requires quarantine plus notification to the FDA and relevant trading partners within 24 hours. Simply destroying without notification (A) skips a required regulatory step, waiting for routine inventory (C) is far too slow for this safety issue, and notifying only the patient (B) omits the required regulatory notifications.

6. Which older federal law did DSCSA largely replace and update regarding wholesale drug distribution pedigree requirements?

The Prescription Drug Marketing Act (PDMA)

DSCSA updated and largely superseded the older paper-pedigree requirements established under the Prescription Drug Marketing Act. CMEA (A) concerns pseudoephedrine, the CSA (C) governs controlled substance scheduling generally, and the Hatch-Waxman Act (D) concerns generic drug approval and patent issues, none of which is the pedigree law DSCSA replaced.

7. When a pharmacy returns unopened, unexpired product to a wholesaler for credit, known as a saleable return, what does DSCSA require before the wholesaler can resell it?

The wholesaler must verify the product identifier at the package level before it can be reintroduced into saleable inventory

DSCSA requires package-level verification of the product identifier for saleable returns before a wholesaler can return the product to sellable inventory, ensuring authenticity. A skips this required safeguard, B misdescribes the saleable return process, which allows resale rather than mandating destruction, and D incorrectly excludes wholesalers from performing this verification.

8. What is a pharmacy technician's practical role in supporting DSCSA compliance when receiving a drug shipment?

Scanning and verifying the 2D barcode product identifier against the shipment and reporting any unreadable or mismatched codes to the pharmacist

Technicians commonly help verify DSCSA product identifiers via barcode scanning during receiving and flag discrepancies for pharmacist review. Contacting the FDA directly for every shipment (B) is not the routine process, filing Form 222 for all shipments (C) applies only to Schedule I and II ordering, not general DSCSA compliance, and determining DEA schedules (D) is unrelated to DSCSA identifier verification.

9. What does the term grandfathered product mean under DSCSA?

Product that was in the supply chain before certain serialization compliance dates and is not required to bear the newer product identifier requirements

Grandfathered DSCSA product refers to inventory that entered commerce before applicable serialization requirements took effect, exempting it from needing the newer product identifier. It is unrelated to a recall (B), donation status (C), or expired product still on shelf (D), which are separate concepts entirely.

10. Under DSCSA, is a patient who receives a dispensed prescription for personal use considered a trading partner in the drug supply chain?

No, dispensing to a patient for their own use represents the end of the supply chain, and the patient is not considered a DSCSA trading partner

DSCSA's trading partner framework governs manufacturers, wholesalers, repackagers, and dispensers; a patient receiving a dispensed medication for personal use is outside that framework since the chain of custody ends at dispensing. A and C mischaracterize patients as trading partners, and D describes an illegal resale scenario, not a recognized DSCSA classification.

Key Concepts — Part 2

1. Besides authenticating the product, what practical benefit does the lot number and expiration date within the DSCSA product identifier provide?

It helps facilitate recalls and expiration date management in addition to traceability

Beyond enabling traceability, the lot number and expiration date embedded in the product identifier support recall management and expiration tracking. These elements do not determine DEA schedule (B) or set pricing (C), and they supplement, rather than replace, the NDC (D).

2. Prior to full interoperable, unit-level electronic tracing, DSCSA required trading partners to pass along which three types of transaction documentation with each change of ownership?

Transaction History (TH), Transaction Information (TI), and Transaction Statement (TS)

During DSCSA's phased implementation, trading partners exchanged Transaction History, Transaction Information, and a Transaction Statement, documenting prior ownership and certifying compliance with each change of ownership. The other option sets list unrelated documents, such as insurance forms, DEA controlled-substance forms, and licensing documents, that are not the DSCSA transaction documentation trio.

3. If an investigation into a suspect product concludes that the product is, in fact, legitimate, what should the pharmacy do?

The quarantine may be lifted and the product returned to saleable stock, while keeping records of the investigation performed

Once an investigation determines suspect product is actually legitimate, it may be released from quarantine back into saleable inventory, while the pharmacy retains records documenting the investigation. Mandatory destruction (B) and FDA illegitimate-product notification (C) apply to confirmed illegitimate product, not product cleared of suspicion, and record retention (D) remains important regardless of outcome.

4. Approximately when did DSCSA's enhanced, interoperable electronic drug traceability requirements reach full effect after the law's phased implementation?

November 2023, following a multi-year phased implementation beginning with the law's enactment in 2013

DSCSA was enacted in 2013 as Title II of the Drug Quality and Security Act, with requirements phased in over roughly a decade, reaching enhanced drug distribution security and interoperable traceability expectations around November 2023. A incorrectly claims no phase-in occurred, C predates the law's actual enactment, and B incorrectly denies that a timeline exists.

5. Which of the following best distinguishes DSCSA serialization and tracing requirements from DEA controlled substance ordering requirements, such as Form 222?

DSCSA tracing applies broadly to prescription drugs to verify authenticity and trace ownership through the supply chain, while DEA Form 222 specifically governs the ordering of Schedule I and II controlled substances

DSCSA is a broader traceability and anti-counterfeiting framework covering prescription drugs generally, distinct from the DEA's narrower Form 222 requirement, which specifically governs ordering Schedule I and II controlled substances. A incorrectly conflates the two distinct regulatory schemes, C wrongly narrows DSCSA's scope to match Form 222, and D incorrectly claims Form 222 covers all prescription drugs, which it does not.

Ready to test your knowledge?

Practice questions with instant feedback and explanations.

Take a PTCB Practice Test →
100% freeNo signup requiredInstant explanations