DSCSA pharmacy compliance readiness means a pharmacy has working procedures for receiving product, keeping product tracing documentation, and handling suspect and illegitimate drugs under section 582 of the Federal Food, Drug, and Cosmetic Act, as FDA's current exemptions apply to that pharmacy. It is for pharmacies that need tracing and exception processes their staff can run. Integral Healthcare Solutions (IHS) maps DSCSA duties between your staff and your vendors and drafts the exception procedures; your pharmacists and vendors run the exchange.
The work sits within IHS's Compliance Services.
What is the Drug Supply Chain Security Act?
The requirements of the Drug Supply Chain Security Act (DSCSA) are codified at section 582 of the FD&C Act, which is how FDA's own pages cite them. FDA describes the pharmacy's place in it this way: "Pharmacists, or “dispensers” as referred to under the Drug Supply Chain Security Act, have responsibilities to protect patients from receiving harmful drug products." (FDA, pharmacists page)
The texts a pharmacy works from today are:
- Section 582 of the FD&C Act.
- FDA's exemption notice "DSCSA Exemptions from Certain Requirements Under Section 582 of the FD&C Act for Small Business Dispensers Until November 27, 2027" (FDA exemptions page, content current as of 08/26/2026).
- FDA's guidance "Waivers, Exceptions and Exemptions from the Requirements of Section 582 of the Federal Food, Drug, and Cosmetic Act."
FDA's list of exemption actions shows how the timeline has moved. It includes "10/9/2024 DSCSA Exemptions from Section 582(g)(1) and Other Requirements of the FD&C Act for Certain Trading Partners" and "06/12/2024 Exemptions from certain requirements under section 582 of the FD&C Act for small dispensers" (FDA waivers, exceptions and exemptions page). A procedure written to one notice can be out of date after the next, so the exemption that applies has to be checked by date.
Who needs it and what triggers it
The current trigger is FDA's small dispenser exemption. FDA states: "FDA is issuing exemptions from certain requirements of section 582 of the FD&C Act to small dispensers (e.g. pharmacies), and where applicable their trading partners, until November 27, 2027." (FDA exemptions page)
Who counts as small is set by headcount: "A dispenser is considered a small dispenser, for the purposes of the exemptions, if, as of November 27, 2026, the company that owns the dispenser has 25 or fewer full-time employees licensed as pharmacists or qualified as pharmacy technicians." (same page)
Using the exemption takes no filing, but FDA expects work to continue: "FDA urges small dispensers to continue their efforts to implement the necessary measures to comply with the enhanced drug distribution security requirements. Small dispensers and their trading partners who utilize these exemptions do not need to submit anything to FDA or inform the agency." (same page)
Pharmacies that do not qualify have a different path: "Trading partners that do not qualify for the exemptions above and are unable to meet the enhanced drug distribution security requirements of section 582 of the FD&C Act, may request a waiver, exception or exemption from those requirements." (same page)
The exemptions are from "certain requirements." FDA's pharmacist page lists duties a pharmacy carries, including:
- "Only accept prescription drugs that are accompanied by product tracing documentation."
- "Store the product tracing documentation you receive for six years."
- A process to investigate and handle suspect and illegitimate prescription drugs, including steps to "Quarantine and investigate suspect prescription drugs to determine if they are illegitimate."
- "Pharmacies must also notify FDA and the trading partners they bought the drug from and sold the drug to."
How IHS helps
IHS runs one process for each pharmacy, built on section 582 obligations as currently exempted for that pharmacy:
- Gap assessment. IHS reviews your receiving, product tracing documentation, verification and exception handling against those obligations.
- Vendor-to-staff responsibility map. IHS sets out which steps your wholesaler or software vendor performs and which your staff perform, from your contracts and system documentation, so no duty is left without an owner.
- Drafted procedures. IHS drafts exception, suspect and illegitimate product, record-retention and trading-partner procedures for your pharmacists to review and approve.
- Tabletop rehearsal. IHS walks your staff through exception scenarios against the drafted procedures and records what needs to change.
- Drafted correspondence. IHS drafts letters to your trading partners; your pharmacy sends them.
What you supply: your trading-system documentation, vendor contracts, current procedures, and your pharmacists' time to review and approve.
The limit: product decisions and technical data exchange belong to your pharmacists and your vendors. IHS does not configure systems, and IHS does not notify FDA or your trading partners; your pharmacy does.
What to have ready
Where an item cites an FDA page, it ties to that page; the others are what IHS needs to scope the work.
- A count of full-time employees licensed as pharmacists or qualified as pharmacy technicians across the company that owns the pharmacy, as of November 27, 2026 (FDA exemptions page, content current as of 08/26/2026).
- The date you last checked FDA's exemption notices, and which notice you are relying on.
- Your receiving procedure, showing how staff confirm product tracing documentation accompanies each prescription drug (FDA, pharmacists page).
- Where and how product tracing documentation is stored, and how you will keep it for six years (same page).
- Your procedure to quarantine and investigate suspect prescription drugs (same page).
- Your procedure to notify FDA and the trading partners you bought a drug from and sold it to (same page).
- A current list of trading partners, so notices can reach the right party.
- Vendor contracts and system documentation for each DSCSA step your vendors perform, mapped against the duties on FDA's pharmacist page (same page).
- If you do not qualify as a small dispenser, a record of whether you can meet the enhanced requirements, and whether a waiver, exception or exemption request is under consideration (FDA exemptions page).
Bring this list to the introductory call, and IHS will use it to scope the work.
How it compares
A pharmacy has a few ways to approach section 582 during the exemption period. They are listed here with what FDA's pages say about each.
| Approach | What FDA's pages say |
|---|---|
| Use the small dispenser exemption | Available to qualifying small dispensers until November 27, 2027, with nothing to submit to FDA; FDA "urges small dispensers to continue their efforts" (exemptions page). |
| Request a waiver, exception or exemption | Open to trading partners that do not qualify for the exemptions and cannot meet the enhanced requirements (exemptions page). |
| Rely on a wholesaler's or software vendor's DSCSA solution | FDA's pharmacist page lists duties of the pharmacy itself (pharmacists page). The pages reviewed for this page do not address how vendor contracts allocate those duties. |
These approaches can overlap: a pharmacy using the exemption may also use vendor tools. Which fits depends on the pharmacy's headcount, systems and trading partners.
What it costs
FDA does not publish a fee for using the exemptions on the pages we reviewed, and its exemptions page states that small dispensers using them "do not need to submit anything to FDA or inform the agency."
IHS scopes each engagement after a free introductory call.
What this is not
- It is not legal advice, and it is not a determination by FDA of whether your pharmacy qualifies as a small dispenser.
- IHS does not configure trading systems or exchange data with your trading partners.
- IHS does not notify FDA or trading partners, and does not request waivers on your behalf. IHS drafts the text; your pharmacy's named contact sends it.
Frequently asked questions about DSCSA for pharmacies
What does DSCSA require of a pharmacy today?
FDA's pharmacist page (content current as of 06/12/2024) says pharmacies must only accept prescription drugs accompanied by product tracing documentation, store that documentation for six years, and have a process to quarantine and investigate suspect drugs. It also says pharmacies must notify FDA and their trading partners about illegitimate products. That page predates the current small dispenser exemption, and this page does not decide which of these duties the exemption suspends for your pharmacy; the full FDA exemption notice does.
Does the FDA small dispenser exemption to November 27, 2027 apply to my pharmacy?
It applies if the company that owns the pharmacy has 25 or fewer full-time employees licensed as pharmacists or qualified as pharmacy technicians as of November 27, 2026. FDA's exemptions page sets this test. IHS can work through the count with you, but the test is FDA's.
How does FDA count pharmacists and pharmacy technicians for the 25-employee small dispenser test?
FDA's exemptions page counts full-time employees licensed as pharmacists or qualified as pharmacy technicians, at the level of the company that owns the dispenser, as of November 27, 2026. A pharmacy that belongs to a larger company counts at the company level. The page we reviewed does not define full-time further.
Do we have to file anything with FDA to use the small dispenser exemption?
No. FDA's exemptions page states that small dispensers and their trading partners who use the exemptions do not need to submit anything to FDA or inform the agency. FDA also urges small dispensers to continue their efforts to implement the enhanced requirements.
What product tracing documentation must a pharmacy keep, and for how long?
FDA's pharmacist page says to only accept prescription drugs accompanied by product tracing documentation and to store the documentation you receive for six years. A retention procedure should name where the records live and who can retrieve them.
What must we do when we find a suspect product?
FDA's pharmacist page says pharmacies must have a process to investigate and handle suspect and illegitimate prescription drugs, including steps to quarantine and investigate suspect drugs to determine if they are illegitimate. IHS drafts that process for your pharmacists to approve.
Do we have to notify FDA about an illegitimate product?
Yes. FDA's pharmacist page states that pharmacies must notify FDA and the trading partners they bought the drug from and sold the drug to. Your pharmacy sends those notices; IHS can draft the notification procedure and templates.
What is the difference between our software vendor's DSCSA duties and our staff's?
FDA's pharmacist page lists the duties as the pharmacy's. The FDA pages reviewed for this page do not address how vendor contracts allocate those duties. IHS maps each step in your contracts and system documentation to the person or vendor who performs it.
What if we are not a small dispenser and cannot meet the enhanced requirements in time?
FDA's exemptions page says trading partners that do not qualify for the exemptions and are unable to meet the enhanced requirements of section 582 may request a waiver, exception or exemption. FDA's guidance on waivers, exceptions and exemptions describes what a request should include and how to submit it, and FDA expects the trading partner to keep working toward the requirements until it approves or denies the request. Your pharmacy makes the request; IHS can draft the supporting text.
How do we handle exceptions when a wholesaler's transaction data is missing or wrong?
FDA's pharmacist page says to only accept prescription drugs that are accompanied by product tracing documentation. A written exception procedure tells staff what to do with product that arrives without correct documentation, who decides, and how the trading partner is told. IHS drafts that procedure; your pharmacists approve it.