Serialization in pharma is the process of assigning a unique identifier to every individual package of medication, then tracking that identifier as the product moves through the supply chain. Think of it as a fingerprint for each box of medicine: no two packages share the same code, which makes it possible to verify that a drug is authentic at every step from factory to pharmacy.
What Goes Into a Serial Number
Each serialized package carries a small 2D barcode (a DataMatrix, similar to a QR code) printed on its outer packaging. That barcode encodes four pieces of information defined by the global standards organization GS1:
- Product code (GTIN): a 14-digit number identifying the specific drug and its package size
- Expiration date: in a six-digit year-month-day format
- Batch or lot number: up to 20 characters linking the package to a specific production run
- Unique serial number: a randomized code of up to 20 characters that distinguishes this one package from every other
In the United States, the FDA refers to this combined code as a “serialized National Drug Code,” or sNDC. It merges the existing National Drug Code (which already identifies the manufacturer, product, and package configuration) with the unique serial number generated for that individual unit.
Why It Exists
The World Health Organization estimates that at least 1 in 10 medicines in low- and middle-income countries are substandard or falsified. Globally, countries spend roughly $30.5 billion per year dealing with these products. Counterfeit drugs can contain the wrong active ingredient, the wrong dose, or no active ingredient at all.
Serialization tackles this problem by making every legitimate package verifiable. If a wholesaler receives a returned product and scans its barcode, the system can check whether that serial number was actually produced by the manufacturer and whether it’s still valid. A counterfeit package either won’t have a recognizable serial number or will duplicate one that’s already been recorded elsewhere in the supply chain.
How Verification Works in Practice
When a wholesaler or pharmacy needs to confirm a product is legitimate, they scan the 2D barcode on the package. The scanner parses the four data elements and sends a verification request through a routing service to the original manufacturer. The manufacturer’s system searches its serial number database for a match and sends back an automatic response confirming whether the product is authentic.
This all happens electronically in near real-time. The FDA tested this approach through a pilot program using a Verification Router Service, which acts as an intermediary connecting different companies’ systems so they don’t each need a direct data link to every trading partner.
U.S. Regulations Under the DSCSA
The Drug Supply Chain Security Act (DSCSA), signed into law in 2013, is the primary U.S. regulation driving serialization. It requires manufacturers, wholesale distributors, and dispensers (pharmacies) to exchange detailed transaction data at the package level, creating an electronic, interoperable system for tracing drugs throughout the supply chain.
Full enforcement has been phased in gradually. The FDA recognized that many companies still faced challenges building the data connections needed for compliance and issued time-limited exemptions beyond the original stabilization period. Those deadlines vary by role in the supply chain:
- Manufacturers and repackagers: May 27, 2025
- Wholesale distributors: August 27, 2025
- Dispensers with 26 or more full-time employees: November 27, 2025
- Small dispensers (25 or fewer full-time pharmacy staff): November 27, 2026
To qualify for these exemptions, companies must have made documented efforts to complete data connections with their immediate trading partners. The exemptions buy time for partners still facing technical hurdles, but the direction is clear: full electronic, interoperable tracing is the end goal.
European Requirements
The European Union took a parallel path through the Falsified Medicines Directive (FMD). Since February 9, 2019, most prescription medicines and certain over-the-counter medicines sold in the EU must carry two safety features on their outer packaging: a unique identifier encoded in a 2D barcode and an anti-tampering device. The anti-tampering device is a physical feature, like a seal or breakable tab, that shows whether the packaging has been opened or altered since it left the manufacturer. Together, the digital code and the physical seal provide two layers of protection against counterfeits entering the supply chain.
Implementation Challenges
Serialization sounds straightforward in concept, but putting it into practice is one of the more complex upgrades the pharmaceutical industry has faced. The challenges span both the physical production line and the IT infrastructure behind it.
On the packaging line, serialization requires real-time coordination of printers, cameras, and barcode readers running at high speeds. Each package needs its code printed, verified by a vision system, and recorded to a database without slowing production. Even small errors, like a smudged print or a misread code, can force a package to be rejected and re-serialized, creating bottlenecks that ripple through the line.
The IT side presents its own difficulties. Packaging systems and enterprise software (warehouse management, ERP platforms) traditionally operated in separate silos with little two-way communication. Serialization forces companies to build a new layer of automation connecting these environments so that serial number data flows from the production floor into centralized databases and then out to trading partners. When those systems are centralized but the manufacturing operations are spread across multiple facilities and geographies, network performance and scalability become real concerns. Large manufacturers may generate millions of unique serial numbers per day across dozens of sites.
Long implementation cycles compound the problem. Getting serialization fully operational can take years at a large company, during which normal operations are disrupted and IT departments absorb significant ongoing maintenance costs. And because serialization requires data exchange between companies, a manufacturer’s system has to communicate effectively with every wholesaler’s and pharmacy’s system, not just its own. That interoperability challenge is a major reason the FDA extended its compliance deadlines.
What Serialization Means for Patients
For most patients, serialization is invisible. You won’t interact with the 2D barcode on your medication box, and the verification process happens behind the scenes between businesses. But the practical impact is significant: it becomes far harder for counterfeit or diverted drugs to enter the legitimate supply chain. If a recalled lot needs to be pulled from shelves, serialization allows companies to identify exactly which packages are affected and where they are, rather than issuing broad recalls that sweep up unaffected stock. Over time, as the system matures and more countries adopt similar requirements, the global drug supply becomes substantially more trustworthy.