DSCSA Compliance Checklist for Independent Pharmacies in 2026

The Drug Supply Chain Security Act has been in full enforcement for independent dispensers since November 2024. If you are still working through your compliance posture, or if you want a straightforward reference to check your current practices against, this checklist covers the core requirements.

What DSCSA Requires at a Glance

DSCSA establishes a federal framework for tracking and tracing prescription drugs through the supply chain. The core obligations for independent pharmacies fall into four areas: product tracing, verification, authorized trading partners, and handling suspect or illegitimate product.

Product Tracing (T3 Documentation)

Every time prescription drugs change hands between trading partners, the seller must provide Transaction Information (TI), Transaction History (TH), and a Transaction Statement (TS). Together these are called T3 documentation.

As the receiving pharmacy, you are required to receive T3 documentation with every purchase from a trading partner, retain T3 records for at least six years, and be able to produce those records on request from FDA or your state board.

This applies to purchases from distributors, manufacturers, and other licensed pharmacies through peer-to-peer platforms. If you are purchasing through InStockRx, T3 documentation is generated through the platform for every transaction.

Authorized Trading Partners

You may only purchase prescription drugs from Authorized Trading Partners (ATPs). An ATP is a licensed manufacturer, wholesale drug distributor, third-party logistics provider, or dispenser. Purchasing from any entity that is not an ATP is a DSCSA violation.

Before completing a purchase from any new source, verify that the seller holds an active pharmacy license in their state and that your own pharmacy license is current.

Product Verification

By 2026, pharmacies are expected to be able to verify the product identifier (serialized 2D barcode) on drug packages when required. Full unit-level tracing requirements have been phased in over time. Check with your state board and your dispensing software vendor on your current obligations and capabilities.

Handling Suspect or Illegitimate Product

If you receive product that appears counterfeit, stolen, or fraudulently diverted, DSCSA requires you to quarantine it immediately, notify FDA within 24 hours of determination, and notify your trading partner. Do not dispense or return suspect product until the investigation is resolved.

Compliance Checklist

Before each purchase from a non-primary source: confirm the seller is a licensed pharmacy or ATP, confirm your own license is current and in good standing, request and retain T3 documentation for the transaction, verify NDC, lot number, and expiration date match documentation, and store records in a retrievable format for at least six years.

Ongoing: review your recordkeeping system at least annually, train dispensing staff on T3 documentation requirements, and stay current with FDA guidance on phased DSCSA implementation.

A Note on Peer-to-Peer Purchases

Licensed pharmacies are authorized trading partners under DSCSA. Purchasing from another licensed pharmacy is permitted and compliant, provided T3 documentation is exchanged. InStockRx generates that documentation as part of every transaction on the platform.

If you have specific questions about your compliance obligations, consult your state board of pharmacy or a licensed pharmacy compliance consultant. This post is informational and does not constitute legal or regulatory advice.