DSCSA deadline Archives - rfxcel.com

FDA Postpones Enforcement of Key DSCSA Requirements to November 27, 2024

In a guidance document published on Friday, August 25, the U.S. Food and Drug Administration (FDA) announced that it was delaying by one year enforcement of key requirements under the Drug Supply Chain Security Act (DSCSA). This “extended stabilization period” moves the enforcement date to November 27, 2024.

The guidance is primarily for manufacturers, wholesale distributors, dispensers, and repackagers; delayed enforcement pertains to product identifiers at the package level; saleable returns; interoperable, electronic product tracing; and investigating suspect and illegitimate products. We provide the specifics below.

The key takeaway: Don’t stop preparing for the DSCSA requirements. If you have questions about the DSCSA delay or are concerned that your current provider may not have the tools you need to comply, we encourage you to contact us today to speak with one of our DSCSA experts. We are committed to meeting DSCSA compliance for all our customers in a timely manner.

And if you’re going to the Healthcare Distribution Alliance (HDA) 2023 Traceability Seminar in Washington, D.C., stop by Table-Top 21 to meet our team and talk about the developments in person. Click here to learn more.

Overall FDA rationale for the DSCSA delay

The FDA said extending enforcement will give supply chain stakeholders — particularly manufacturers, wholesale distributors, dispensers, and repackagers — the extra time that may be necessary “to continue to develop and refine appropriate systems and processes to conduct interoperable, electronic tracing at the package level, to achieve robust supply chain security under the DSCSA while helping ensure continued patient access to prescription drugs.”

Furthermore, the Agency said, “additional time beyond November 27, 2023, may be needed for systems to stabilize and be fully interoperable for accurate, secure, and timely electronic data exchange.”

What DSCSA requirements are affected?

Product identifiers

The requirement. Trading partners must include the product identifier at the package level for each package in a transaction into the transaction information. Furthermore, a product’s manufacturer or repackager must incorporate the PI at the package level for each package “introduced in a transaction into commerce.” These requirements are included in section 582(g)(1)(B) of the Food, Drug, and Cosmetics Act (FD&C Act).

Reasoning for DSCSA delay. The FDA said the delay will “accommodate the additional time (beyond November 27, 2023) that may be needed by trading partners to achieve compliance and to help ensure continued access to prescription drugs as trading partners continue to refine processes” to include the PI at the package level. Furthermore, the FDA said “this policy will facilitate the use and exhaustion of product supply already in the supply chain prior to November 27, 2024.”

What is a PI? The PI is a standardized graphic that contains, in both human-readable form and on a machine-readable data carrier, four data elements:

      1. National Drug Code (NDC)
      2. Serial number
      3. Lot number
      4. Expiration date

Saleable returns

The requirement. Each person accepting a saleable return must have systems and processes in place to allow acceptance of the product. Furthermore, they may accept saleable returns only if they can associate the product with its transaction information — including the PI — and transaction statement. These requirements are included in section 582(g)(1)(F) of the FD&C Act.

Reasoning for DSCSA delay. FDA said delaying enforcement of this requirement until November 27, 2024, will “facilitate the continued use of methods currently being used by wholesale distributors for associating a saleable return product with its applicable transaction information and transaction statement while accommodating the additional time that may be needed for all trading partners to mature the new systems and processes required for acceptance of saleable returns.”

Interoperable, electronic product tracing at the package level

The requirement. Transaction information and transaction statements must be exchanged in a secure, interoperable, electronic manner. This requirement is included in section 582(g)(1)(C) of the FD&C Act; the standards for exchange are established under section 582(h) of the DSCSA.

Furthermore, systems and processes for verifying products at the package level, including the standardized numerical identifier, must meet the standards established in DSCSA section 582(a)(2) and the guidance in DSCSA section 582(h).

Reasoning for DSCSA delay. The FDA these policies will allow trading partners to continue to provide, capture, and maintain data for the data exchange for product tracing and verification while providing additional time that may be needed to “continue to develop and refine systems and processes for electronic data exchange.”

Investigating suspect and illegitimate products

The requirement. In the even of a recall or to help investigate a suspect or illegitimate product, stakeholders must be able to promptly provide product transaction information and transaction statement when requested by the FDA secretary or other appropriate federal or state official. This requirement is included in section 582(g)(1)(D) of the FD&C Act.

Furthermore, Section 582(g)(1)(E) of the FD&C Act requires stakeholders to “produce the transaction information for each transaction going back to the manufacturer” in certain situations, including a recall or investigating a suspect product or an illegitimate product.

Reasoning for DSCSA delay. FDA believes these compliance policies will facilitate the continued use of methods currently being used by trading partners to respond to the type of requests for information described above while accommodating the additional time that may be needed for trading partners to mature the new systems and processes required for such activities under section 582(g)(1)(D) and (E) of the FD&C Act.

DSCSA Compliance Update with Herb Wong: What’s Happening Right Now?

Herb Wong’s a busy guy. We said that the last time we did a DSCSA compliance update with him, and it’s still true today Just last week, for instance, he participated in two Healthcare Distribution Alliance (HDA) webinars, “DSCSA 2023: How a Service Provider Can Help You Prepare” and “All About the VRS.” These were part of the HDA’s 2022 Traceability Webinar Series, which Antares Vision Group is sponsoring.

That’s why it was such a treat to get some one-on-one time with Herb for a real-time DSCSA compliance update — what’s happening right now with industry readiness.

We asked Herb to talk about what he calls “the four cornerstones” of DSCSA compliance: product identification (EPCIS and serialization), product tracing, authorized trading partners (ATPs), and verification (the Verification Router Service, or VRS). Here’s what he had to say.

DSCSA compliance update #1: product identification (EPCIS and serialization)

All solution providers’ systems are ready to send and receive serialization data in the EPCIS format, but we still need to help the industry get data flowing. To use an analogy, even though the pipes have been laid and connected, we’re just not getting enough water through to test for “leaks” in the system — errors in send/receive processing. Just as important, we need time to “flush the pipes” to ensure that we have “clean water.” By that I mean ensuring that the data is correct.

We’re trying to do everything we can. We’ve actually developed a standard process for onboarding customers and getting data exchanged with other solution partners. We’re going to be piloting this so we can refine the onboarding process. [Herb’s talking about the EPCIS Onboarding Guide Workgroup and its draft “Guide for Accelerated EPCIS Onboarding.”]

What’s the key takeaway, Herb?

The key takeaway is, “Let’s connect, let’s get the serialized data out.” Time is running out. That’s the biggest message. People who think they have time to wait until next year, you really don’t. Because what’s going to happen is similar to what happened when the lot-based laws went live: The people who waited couldn’t find help. All the solution providers were busy; everyone was busy. And everyone who waited was trying to get through the same door to meet the deadline.

So, if you’re a manufacturer, you have to start sending data early. If you’re serializing and not sending data downstream, start now. Don’t wait till the November 2023 deadline. You have to “turn on the switch.” Send your data downstream now.

At this point, we decided to ask Herb about aggregation.

DSCSA doesn’t say anything about aggregation. But wholesalers are asking for aggregation to support their business processes. When you send electronic data, wholesalers need to know what serial numbers are in the cases they just received.

Aggregation is a business requirement for operational efficiency. For example, if you get 10 cases with a hundred items in each case, you don’t want to open the cases and scan every item to see what you received and will ultimately ship. Aggregation makes things faster and more efficient. It’s similar to how VRS had both a legal and a business requirement: The legal requirement mandated a response within 24 hours for saleable returns verification. But given the potential volume of saleable returns, 24 hours was too slow for wholesalers; it would cause the receiving docs to fill up with products pending verification. For this reason, wholesalers mandated a business requirement of sub-second response times.

DSCSA compliance update #2: product tracing

A centralized solution or standard has not been defined for product tracing. A lot of different approaches have been discussed, but there’ve been no specs, no firm requirements, that solution providers can implement at this time.

Right now, we’re supporting the industry’s manual process for product tracing. The HDA, NABP, and PDG have done a really good job of outlining what’s required for tracing. [That’s the Healthcare Distribution Alliance, the National Association of Boards of Pharmacy, and the Partnership for DSCSA Governance.]

They’ve walked through a series of scenarios that can be executed manually and have helped the industry to better understand the complexity and nuances of tracing a product through the system. In parallel to this effort, the PDG is working on a data format to communicate traceability requests and responses. PDG is putting that information into a JSON format to communicate the need. [JSON is the JavaScript Object Notation data interchange format. Its advantages are that it uses human-readable text and is a more compact means of communicating data.]

What’s the key takeaway, Herb?

Pay attention to the traceability scenarios that are coming out of the HDA, NABP, and PDG. They’re doing a really good job of trying to show how tracing workflows will happen. They’ll be publishing more results and helping the industry understand. Watch for these, because it will enlighten you about what’s coming in 2023.

DSCSA compliance update #3 and #4: ATPs and VRS

From a solution provider standpoint, the ATP and VRS initiatives have become one and the same. Right now, ATPs have only been applied against the VRS, so the timing for us to get that done has become one implementation effort.

When you make a VRS request, you have to prove you’re an ATP. ATP is there to confirm two things: you are who you say you are and you are authorized to transact business. Proof that you are an ATP is especially important in the VRS network since trading partners may not have direct relationships with other VRS participants.

For VRS, there’s a new version 1.3 that will be deployed before the DSCSA 2023 deadline. The current version we have is based on the 1.2 standards interface. The 1.3 version “opens up” VRS beyond what it was intended to do, which is the verification of saleable returns.

What people should know is that VRS 1.3 is not backwards-compatible. This means VRS providers have to upgrade at once. To ensure that the upgrade occurs on time, solution providers have agreed to “decouple” the 1.3 interface from the 1.3 functionality.

What this means is that everyone on the VRS network will remain connected since we will all support the new 1.3 connections. However, solution providers (or customers) who are not ready to upgrade to the new 1.3 functionality can continue to use VRS as needed. That’s going to be important because it allows us to change the interface so we can at least keep talking to each other. We can be interoperable. But not everyone has to support the features of 1.3 at the same time.

As for timing of the update, we’re talking about doing the testing of the interoperability of 1.3 in Q1 [of 2023]. So we’ll have to push this into a production environment after Q1, but we haven’t agreed on a production date.

What’s the key takeaway, Herb?

There is going to be an upgrade required soon and the industry and solution providers are working to make sure it’s easy to implement. We realize that is not as simple as a software upgrade but we need to carefully consider the revalidation requirements of our customers.

Final thoughts

And there you have it: A DSCSA compliance update about what’s happening right now with industry readiness for product identification (EPCIS and serialization), product tracing, and ATPs and VRS. Thanks, Herb!

Contact us if you have questions about what Herb talked about or the DSCSA in general. We can explain the requirements and how our solutions will help ensure you’re ready for November 2023 and the full serialization of the U.S. pharmaceutical supply chain.

If you like, we can probably arrange a meeting with Herb. But remember, he’s busy. In the coming weeks, he’ll travel to the Antares Vision Group global HQ in Italy, visit the Group’s brand-new North America HQ in New Jersey, and join a panel discussion at the HDA Traceability Seminar in Washington, D.C. (Antares Vision Group is also a sponsor of that annual event.) So reach out today and let’s see what we can work out.

Also take a look at our DSCSA Compliance Library. It’s a clearinghouse of information with links to our blog posts, white papers, webinars — everything — about the law, including the “four cornerstones” Herb talked about in today’s DSCSA compliance update.