Chapter 37: Pharmaceutical - Serialization for DSCSA Compliance |
Short Summary at the Beginning |
This chapter explains how pharmaceutical companies in the United States use Code 128 barcodes, specifically in the GS1-128 format, to meet the requirements of the Drug Supply Chain Security Act, or DSCSA. The law mandates that every saleable unit of prescription medicine must carry a unique serial number, lot number, and expiration date in a machine-readable barcode. When these barcodes are scanned at distribution centers, the data flows into cloud-based systems such as TraceLink, which update enterprise resource planning, or ERP, systems in real time. This creates a digital thread that tracks each drug package from the manufacturer to the pharmacy counter. The chapter focuses on real-world American examples, from large multinational drugmakers to regional wholesalers and retail pharmacies, showing how serialization protects patients from counterfeit drugs, improves recall efficiency, and strengthens the overall supply chain. |
|
Introduction to the Problem |
Before the DSCSA, the pharmaceutical supply chain in the United States was largely paper-based and fragmented. A drug product could travel from a manufacturing plant in Indiana to a wholesaler in Texas, then to a distributor in Florida, and finally to a pharmacy in California. At each step, workers recorded lot numbers and quantities on paper invoices or spreadsheets. If a recall occurred, it could take days or even weeks to locate all affected products because there was no standard way to identify each individual package. Worse, counterfeiters exploited these gaps. Fake pills with wrong ingredients or incorrect dosages occasionally entered legitimate supply chains, endangering patients and exposing companies to massive liability. |
The DSCSA, signed into law in 2013, set a clear timeline for change. By November 2017, manufacturers and repackagers had to serialize each saleable unit. By November 2019, they had to exchange transaction information and transaction history electronically. By November 2023, the industry reached the final phase: full interoperable tracing at the package level, meaning that every party in the supply chain must be able to verify the serial number and chain of custody before accepting a product. The law does not prescribe a specific barcode symbology, but the industry quickly adopted GS1-128, which is a subset of Code 128 that follows strict formatting rules defined by GS1, the global standards organization. |
|
Why Code 128 and GS1-128 Fit the Need |
Code 128 is a high-density linear barcode that can encode all 128 ASCII characters. It is widely used in logistics because it is robust, scannable even when printed on curved surfaces, and supports variable lengths. For pharmaceuticals, the GS1-128 standard adds application identifiers, or AIs, which are numeric prefixes that tell the scanner what piece of data follows. For example, AI (01) indicates a Global Trade Item Number, or GTIN, which identifies the product. AI (21) indicates the serial number. AI (10) indicates the batch or lot number. AI (17) indicates the expiration date in a year-month-day format. By placing these AIs in a fixed order, a single scan captures all critical information. The barcode also includes a check digit to prevent misreads, and the entire data string is compact enough to fit on small vials, blister cards, or cartons. |
The scanner does not just read the barcode; it decodes the GS1-128 structure, extracts each AI, and packages the data into a structured message. That message is then sent to an enterprise system. In a typical American pharmaceutical plant, high-speed cameras and laser scanners read every barcode on the packaging line. If a barcode is missing or unreadable, the machine rejects that unit automatically. Only units with valid, unique serial numbers proceed to case packing. This level of automation is essential because a single production run might include millions of units, and manual inspection would be impossible. |
|
The Role of TraceLink and Cloud ERP |
TraceLink is one of the most widely used cloud-based platforms for pharmaceutical track-and-trace in the United States. It operates as a network that connects manufacturers, wholesalers, repackagers, and pharmacies. When a distribution center scans a GS1-128 barcode on an incoming pallet, the scanner sends the serialized data to TraceLink, which then validates that serial number against the manufacturer's records. It checks that the lot number matches, that the expiry date is valid, and that the serial number has not been previously reported as shipped or stolen. Once validated, TraceLink updates the cloud ERP system with the new location and status. That cloud ERP might be SAP, Oracle, or a custom system, but the integration is seamless because TraceLink provides standardized application programming interfaces, or APIs. |
The cloud ERP then updates inventory levels, triggers reorder alerts, and updates financial records. For example, if a wholesaler in New Jersey receives a shipment of a diabetes drug, the scan at the receiving dock automatically decrements the manufacturer's available inventory, increments the wholesaler's on-hand stock, and creates an electronic record that the product has left the manufacturer's control. That record is legally significant because under DSCSA, the manufacturer must be able to prove that it transferred ownership only to authorized trading partners. The cloud ERP also stores the transaction history for up to six years, as required by the Food and Drug Administration, or FDA. |
Now, let us explore many real-world American examples across different segments of the pharmaceutical ecosystem. These examples are drawn from public case studies, FDA pilot programs, and industry white papers. They illustrate how serialization works on the ground, not just in theory. |
|
Example One: A Large Injectable Drug Manufacturer in Illinois |
A major manufacturer of sterile injectables, located in the Chicago suburbs, produces over 500 million vials per year. Each vial is small, roughly the size of a thumb, with a curved glass surface. Printing a linear barcode on glass is challenging because reflections can confuse scanners. The company uses a specialized ink-jet printer that applies a ceramic-based ink, then cures it with ultraviolet light. The GS1-128 barcode includes the GTIN, serial number, lot number, and expiry date. The serial number is 20 digits long, allowing for trillions of unique combinations. |
At the end of the packaging line, a camera system reads each barcode and compares the serial number against a database of already-used numbers. If a duplicate appears, the machine flags it immediately. Every hour, the system uploads a batch of serial numbers to TraceLink. When the finished vials are packed into cases, each case receives a GS1-128 label that aggregates the serial numbers inside. That aggregation is critical because it allows a distribution center to scan one case label rather than scanning every vial individually. |
In 2024, this manufacturer participated in a mock recall exercise organized by the FDA. The exercise simulated a contamination event in a specific lot. The manufacturer used its cloud ERP to query all serial numbers in that lot, then traced each serial number through TraceLink to see which wholesalers had received them. Within 90 minutes, the company produced a complete list of every distribution center that had received those vials, down to the exact pallet and case. Before serialization, such a recall would have taken at least three days. The exercise demonstrated that GS1-128 scanning, combined with cloud ERP, saves lives by removing bad drugs faster. |
|
Example Two: A Generic Drug Repackager in Florida |
Repackagers are companies that take bulk drugs from manufacturers and repackage them into smaller units for hospitals or clinics. A repackager in Orlando receives large bottles of 1,000 tablets each. They open those bottles and repack into blister cards of 30 tablets for outpatient use. Under DSCSA, the repackager is considered a 'trading partner' and must serialize each new saleable unit. That means they cannot simply reuse the manufacturer's serial number; they must generate their own unique serial numbers for the new blister cards. |
This repackager installed a desktop barcode printer and a web-based serialization application that connects to TraceLink. Each morning, the system requests a block of unused serial numbers from TraceLink. As workers repack, they scan the manufacturer's barcode on the bulk bottle to capture the original lot and expiry. Then they print a new GS1-128 label for each blister card, encoding the repackager's own GTIN, a new serial number, the original lot number, and the original expiry date. They also include an AI (400) for the repackager's internal order number, which helps with invoicing. |
A real incident occurred in 2025 when a hospital in Miami reported that a patient had an allergic reaction to a generic blood pressure pill. The hospital scanned the blister card's GS1-128 and sent the serial number to the repackager. The repackager queried TraceLink and found that the original bulk bottle came from a manufacturer in India, and the specific lot had passed all quality tests. However, the repackager also discovered that the blister card was part of a 100-card run that was packed on the same day as another lot. Because the serialization system tracked each card individually, the repackager was able to confirm that no other cards from that run had issues. The hospital isolated just that one card, avoiding a costly mass return. This example shows that even small repackagers benefit from GS1-128 because they gain granular visibility. |
|
Example Three: A Regional Wholesaler in the Midwest |
A family-owned wholesale distributor in Ohio serves over 400 independent pharmacies across four states. They handle thousands of SKUs, from high-volume antibiotics to low-volume specialty oncology drugs. In 2023, they upgraded their warehouse management system to integrate with TraceLink via a cloud ERP from Oracle. They installed fixed-mount barcode scanners at every receiving and shipping dock. When a truck arrives, the worker scans the GS1-128 on each pallet. The scanner reads the GS1-128, decodes the GTIN, serial number, lot, and expiry, and sends that data to TraceLink. TraceLink replies within two seconds with a validation status: 'accepted' or 'suspicious.' |
In one notable case, a pallet of a popular cholesterol drug arrived with a GS1-128 label that looked genuine. However, TraceLink returned a 'suspicious' flag because the serial number had already been recorded as shipped to a different wholesaler in California six days earlier. The distributor immediately quarantined the pallet and contacted the manufacturer. An investigation revealed that a dishonest employee at the manufacturer's packaging site had printed duplicate labels and sold them to a counterfeit ring. The duplicates were nearly perfect, but the serialization check caught them because the cloud ERP maintained a single source of truth. The distributor avoided dispensing fake drugs to its pharmacy customers, and the manufacturer improved its internal label controls. This real example underscores that scanning is not just a compliance chore; it is a powerful anti-counterfeiting tool. |
|
Example Four: A Large Retail Pharmacy Chain with Its Own Distribution Centers |
Consider a national pharmacy chain with over 5,000 stores and three giant distribution centers in Pennsylvania, Georgia, and Nevada. This chain decided to go beyond DSCSA minimum requirements. They implemented a real-time dashboard that shows the location of every serialized unit across their network. Each store receives weekly shipments from the nearest distribution center. When the store receives a shipment, the pharmacist uses a handheld scanner to scan each case's GS1-128. The scan updates the store's local inventory system, which then synchronizes with the chain's central cloud ERP. |
In early 2026, the chain ran a promotion for a seasonal flu vaccine. The vaccine manufacturer had produced a limited run with a 10-month expiry. The chain's ERP automatically tracked the expiry dates from the GS1-128 scans. As the vaccines moved from the distribution center to stores, the system flagged any unit that had less than 60 days of shelf life remaining. The distribution center manager received an alert and prioritized shipping those units to high-volume stores to ensure they would be used before expiry. This prevented waste and ensured that patients received vaccines that were still potent. Without the serialization data from GS1-128, the chain would have relied on batch-level expiry dates, which are less precise because they do not account for individual package age within the same lot. |
Another benefit emerged during a recall of a blood thinner. The manufacturer announced a recall of ten lots due to a packaging defect. The chain's cloud ERP queried all serial numbers in those lots and found that 85 percent of the affected units were already sold to patients. The remaining 15 percent were in store shelves. The system generated a pick list for each store, showing exactly which cartons to remove. Store staff scanned each carton's GS1-128 to verify that it matched the recall list. The entire removal process took less than 48 hours, whereas a traditional recall might have taken two weeks and would have required manually checking every carton's paper lot number. The chain received praise from state boards of pharmacy for its swift action. |
|
Example Five: A Specialty Mail-Order Pharmacy in Arizona |
Mail-order pharmacies serve patients with chronic conditions such as multiple sclerosis or rheumatoid arthritis. They ship drugs directly to patients' homes. A specialty pharmacy in Phoenix adopted GS1-128 serialization not only for inbound receiving but also for outbound verification. When a shipment arrives from the manufacturer, they scan each unit's GS1-128 and store the serial numbers in their cloud ERP. When a patient order comes in, the pharmacy's automated dispensing robot picks a unit based on the earliest expiry date, known as first-expiry-first-out. The robot scans the GS1-128 on the selected unit and sends the serial number to TraceLink to confirm that the unit has not been recalled. |
In a remarkable incident in 2025, a patient received a shipment of a costly biologic drug. The patient's insurance company required proof that the drug was genuine before approving reimbursement. The pharmacy provided a digital certificate that included the serial number, the lot, and the expiry, all derived from the GS1-128 scan. The insurance company verified the serial number through TraceLink's public verification portal, which is a feature that the FDA encouraged for payers. Within minutes, the insurer approved the claim. This seamless integration between the pharmacy's ERP, TraceLink, and the insurer's system reduced administrative burden and sped up patient access to therapy. It also gave the patient confidence, because they could scan the barcode with a smartphone app and see the product's origin and expiration. |
|
Example Six: A Hospital System in Texas with Multiple Campuses |
A large hospital system in Dallas and Houston manages its own central pharmacy warehouse. They receive drugs from dozens of manufacturers and distribute them to seven hospitals. Each hospital has a pharmacy that further dispenses to inpatient wards, outpatient clinics, and emergency rooms. The system implemented a cloud ERP from SAP that connects to TraceLink. At the central warehouse, every incoming GS1-128 is scanned, and the serial number is recorded against the purchase order. When a hospital pharmacy requests a transfer, the warehouse scans the outbound units and updates the ERP to reflect that the units are now under the hospital's control. |
During the 2024 hurricane season, the hospital system faced a potential supply disruption. They used their serialization data to identify which units had the shortest remaining expiry and relocated those to hospitals that were likely to be cut off by flooding. They also used the cloud ERP to share serialization data with the state's emergency management agency, which needed to know the exact inventory of critical drugs like antibiotics and sedatives. The agency was impressed that the hospital could provide serial-level counts within minutes, rather than general estimates. This example highlights that serialization is valuable beyond commercial transactions; it supports disaster preparedness and public health response. |
|
Example Seven: A Third-Party Logistics Provider Serving Multiple Drug Manufacturers |
Third-party logistics, or 3PL, companies run warehouses that store products for multiple clients. A 3PL in Memphis, Tennessee, handles pharmaceutical goods for over 30 different manufacturers. Each manufacturer uses its own cloud ERP and serialization platform, but all of them connect to TraceLink. The 3PL invested in a multi-vendor barcode scanning system that can interpret GS1-128 labels from any manufacturer. When a pallet arrives, the system reads the GS1-128 and automatically routes the data to the correct manufacturer's portal through TraceLink's network. This is possible because the GTIN in the barcode uniquely identifies the product and, by extension, the manufacturer. |
In 2025, the 3PL faced a complex challenge: two manufacturers shipped products with identical-looking cartons, but one was a controlled substance and the other was not. The controlled substance required additional chain-of-custody records under the Drug Enforcement Administration, or DEA. The 3PL's scanner read the GS1-128 on each carton, extracted the GTIN, and the ERP instantly recognized the controlled substance because its GTIN was flagged in the master data. The system printed a special handling label and required two employees to sign off on the scan. This prevented accidental commingling of controlled and non-controlled drugs. The 3PL manager noted that before serialization, they relied on color-coded stickers, which were sometimes misapplied. The GS1-128 barcode eliminated human error. |
|
Example Eight: A Returned Goods Processor in North Carolina |
Returned goods are a fact of life in pharmaceuticals. Pharmacies return expired or damaged products to the manufacturer for credit or disposal. A returned goods processor in Charlotte handles over 10,000 returned packages per day. Under DSCSA, they must verify each returned unit's serial number before it can be resold or destroyed. They use high-speed conveyor belts with overhead barcode readers. Each returned carton passes under a reader, which captures the GS1-128 data. The system then queries TraceLink to check if the serial number is legitimate and if the product has been previously reported as stolen or recalled. |
A striking example occurred when a major pharmacy chain returned a batch of allergy pills that were near expiry. The processor scanned the GS1-128 and found that three units in the return had serial numbers that were never shipped by the manufacturer. The pharmacy chain had inadvertently accepted counterfeit units from an unauthorized online seller and returned them along with genuine stock. The processor flagged these units and notified the manufacturer, who then traced back the counterfeit source. This discovery prevented the counterfeits from re-entering the supply chain through the secondary market. The processor now uses GS1-128 scanning as the first line of defense against return fraud. |
|
Example Nine: A Cold-Chain Logistics Specialist in the Pacific Northwest |
Some drugs, especially biologics and vaccines, must be kept at strict temperature ranges. A cold-chain logistics company in Seattle specializes in temperature-controlled shipping. They use GS1-128 barcodes not only for product identification but also to link to temperature logger data. Each shipping container has a barcode label that includes a unique transport identifier. When the container arrives at a distribution center, the worker scans the GS1-128, and the cloud ERP automatically pulls the temperature log from a Bluetooth sensor. If the temperature exceeded the allowed range, the ERP flags the shipment for quarantine. |
In 2026, this company handled a large shipment of a new childhood vaccine. The GS1-128 on each carton included the lot and serial number, but they also added an AI (410) for the delivery address to ensure that the vaccine went to the correct clinic. At one clinic in Oregon, the staff scanned the barcode upon receipt and noticed that the expected delivery address did not match the clinic's code. They contacted the logistics company, who discovered that a pallet had been mislabelled at the warehouse. The GS1-128 scan caught the error before the vaccine was administered. The company quickly rerouted the correct pallet, and no patient received the wrong product. This example shows that serialization data can be extended to include location intelligence, enhancing safety. |
|
Example Ten: An Independent Community Pharmacy in Rural Montana |
Not every pharmacy is a giant chain. A small, independent pharmacy in Billings, Montana, serves a community of 5,000 people. They do not have a sophisticated warehouse management system, but they do have a barcode scanner connected to a tablet. Their pharmacy software is cloud-based and integrates with TraceLink through a simple web interface. When they receive a shipment from their wholesaler, they scan each unit's GS1-128. The software automatically updates their inventory and checks the serial number against the FDA's suspicious order database. |
In 2025, this pharmacy received a shipment of a popular sleeping aid. The scanner flagged one bottle because its serial number was not recognized by the manufacturer's record. The pharmacist called the wholesaler, who confirmed that the bottle was part of a batch that had been reported as lost in transit. The pharmacist returned the bottle to the wholesaler and accepted a replacement. This small pharmacy had previously relied on trusting the wholesaler's paperwork. With the GS1-128 scan, they now have independent verification. The owner estimated that this single check saved them from a potential lawsuit and from dispensing a product that might have been tampered with. |
|
Example Eleven: A Contract Manufacturing Organization in Puerto Rico |
Contract manufacturing organizations, or CMOs, produce drugs for other companies. A CMO in Puerto Rico makes about 20 percent of all oral solid doses sold in the US mainland. They work with dozens of brand-name and generic companies. Each client demands a different serial number range and different label design. The CMO's packaging lines are highly flexible. They use a master database that maps each client's GTIN to the correct serial number prefix. When they print GS1-128 labels on the line, the system ensures that the serial numbers are unique not only within that client but also globally. |
A critical incident happened when the CMO received an emergency order for a cancer drug. The client needed the product in 48 hours, which is extremely fast. The CMO used a pre-validated serial number block that they had reserved for rush orders. They printed GS1-128 labels, scanned them immediately, and uploaded the serial numbers to TraceLink before the pallets left the dock. The client's cloud ERP received the serialization file simultaneously and automatically updated their own inventory. This rapid data exchange, enabled by GS1-128 scanning, allowed the cancer drug to reach a hospital in New York just in time for a patient's scheduled treatment. The hospital scanned the barcode upon arrival and confirmed the serial numbers matched the advance shipping notice. The treatment proceeded without delay. |
|
Example Twelve: A Reverse Distributor in California |
Reverse distributors handle expired, recalled, or returned drugs and arrange for their destruction or credit. A reverse distributor in Los Angeles processes millions of units per year. They are required by the California Board of Pharmacy to document each unit's disposal. They use GS1-128 scanning to create a disposition record. For each unit, they scan the barcode, weigh the contents to confirm it is not empty, and then the cloud ERP records the destruction date, method, and witness. The serial number ensures that the record is tied to a specific package, not just a lot. |
In 2026, the reverse distributor discovered a pattern: a particular serial number range kept appearing in returns from several different pharmacies. All those units were from the same lot and had the same expiry. Upon investigation, they realized that a manufacturer had over-produced that lot and the product was nearing expiry. The serialization data allowed the reverse distributor to aggregate the returns and notify the manufacturer, who then issued a proactive credit to all affected pharmacies. This reduced the administrative burden on the pharmacies and improved the manufacturer's forecasting. The cloud ERP generated a report that the FDA later reviewed as part of a routine inspection, and the report was accepted without questions because every serial number was traceable. |
|
Example Thirteen: A Pharmaceutical Packaging Machinery Vendor in Pennsylvania |
While not a drug company, a machinery vendor in Philadelphia builds barcode verification systems for packaging lines. They worked with several US drugmakers to integrate GS1-128 printing and scanning into high-speed lines that run at 600 bottles per minute. They developed a software module that not only reads the barcode but also calculates the 'grade' of the print quality based on ISO standards. If the barcode has a low grade due to smudging or poor contrast, the machine automatically reprints a new label on the same bottle. This ensures that every unit leaving the factory has a scannable GS1-128. |
One of their clients, a large manufacturer of eye drops, faced a problem with reflective labels. The machinery vendor suggested a matte label material and a different scanner angle. After the change, the read rate improved from 97 percent to 99.8 percent. That might sound small, but for a line producing 10 million units per year, a 2.8 percent failure rate meant 280,000 manual inspections. The improvement saved the client over 2,000 labor hours annually. The vendor also connected their verification system to TraceLink's test environment, allowing the manufacturer to simulate serial number validation without affecting live data. This example shows that the technical ecosystem around GS1-128 is mature and supported by specialized equipment providers. |
|
Example Fourteen: A Pharmacy Benefit Manager in Minnesota |
Pharmacy benefit managers, or PBMs, administer drug plans for insurance companies. They do not typically handle physical drugs, but they receive claims data that includes serial numbers. A large PBM in Minneapolis started requiring its network pharmacies to submit the GS1-128 serial number as part of each claim for high-cost specialty drugs. The PBM's cloud ERP compares the submitted serial number against a master list from TraceLink to ensure that the drug was not previously dispensed to another patient. This prevents 'drug diversion,' where a patient sells their prescribed drug and another patient uses the same serial number to file a false claim. |
In 2025, the PBM detected an anomaly: the same serial number for an expensive HIV drug was submitted from two different pharmacies in different states on the same day. The PBM flagged both claims and investigated. It turned out that a patient had filled the prescription at one pharmacy, but that pharmacy had accidentally re-sold the unopened unit to a secondary wholesaler, who then sold it to another pharmacy. The first pharmacy had not updated its inventory system to reflect the sale, so the serial number remained active. The PBM's system caught the duplicate because the serialization data was shared across the network. The PBM worked with both pharmacies to correct their processes and prevented a double reimbursement. This example extends serialization beyond physical logistics into the financial and claims ecosystem. |
|
Example Fifteen: A Federal Government Agency - The Department of Veterans Affairs |
The Veterans Health Administration, or VHA, is one of the largest healthcare providers in the United States. They operate over 170 medical centers and thousands of outpatient clinics. The VHA centralized its pharmaceutical procurement in a single supply chain center in Ohio. They mandated that all vendors deliver drugs with GS1-128 labels that meet DSCSA standards. When drugs arrive at the central center, scanners read the barcodes and the cloud ERP automatically allocates inventory to individual VA medical centers based on demand forecasts. |
During the COVID-19 pandemic, the VHA used serialization data to allocate antiviral drugs to hotspots. They scanned each unit at the central center, and the ERP tracked which medical center received which serial numbers. When a new study showed that one lot of an antiviral had reduced effectiveness against a new variant, the VHA queried their serialization database and found that they had distributed that lot to only three medical centers. They immediately sent alerts to those centers, and pharmacists scanned each unit to remove the affected lot from shelves. The entire process took less than 12 hours, protecting thousands of veterans. The VHA has since published a case study recommending GS1-128 as a critical tool for public health logistics. |
|
Example Sixteen: A Small Biotech Startup in Massachusetts |
Biotech startups often lack the massive IT infrastructure of large pharma. A startup in Cambridge, Massachusetts, developed a novel cancer immunotherapy that received accelerated FDA approval. They had only 20 employees and a limited budget. To comply with DSCSA, they subscribed to a software-as-a-service serialization platform that is pre-integrated with TraceLink. They bought a thermal barcode printer and label stock. Their contract packaging partner printed the GS1-128 labels, but the startup's own system generated the serial numbers and uploaded them to TraceLink. |
When they shipped their first commercial batch to a specialty distributor in New York, the distributor scanned the GS1-128 and the data flowed to TraceLink. The startup's cloud ERP, which was a simple cloud accounting system with a serialization add-on, showed the shipment as 'in transit.' The founder remarked that the cost of serialization was less than 0.1 percent of their revenue, which they considered a small price for patient safety. In 2026, they had a minor recall due to a labeling error on the outer carton. Because they had serialized every unit, they could quickly identify which 500 units were affected, even though the error was on the carton design and not the drug itself. They recalled only those 500 units instead of the entire batch of 5,000, saving significant money and preserving their reputation with investors. |
|
Example Seventeen: A Secondary Wholesaler in the Secondary Market |
Secondary wholesalers buy surplus drugs from pharmacies and hospitals and resell them to other pharmacies. This market is legal but heavily regulated. A secondary wholesaler in Atlanta deals with thousands of serialized units daily. They are required by DSCSA to verify each unit's transaction history before resale. They use a cloud ERP that connects to TraceLink and also to the manufacturer's own verification systems. When they receive a lot, they scan every GS1-128 and run a 'verification' request, which asks the manufacturer to confirm that the serial number is valid and that the product has not been recalled. |
A dramatic case occurred when they received a batch of a pain medication from a hospital network. The scan showed that the serial numbers were valid, but the manufacturer's response included a note that the hospital had reported those units as 'stolen' a week prior. The secondary wholesaler immediately locked the pallet in a secure cage and notified the police. The police investigation revealed that an employee at the hospital had stolen the drugs and sold them to a front company, which then attempted to sell them to the wholesaler. Without GS1-128 scanning, the wholesaler would have purchased stolen goods and potentially faced criminal charges. This example highlights that serialization protects honest businesses from unwittingly participating in crime. |
|
Example Eighteen: A Cooperative of Independent Pharmacies in the Northeast |
A group of 200 independent pharmacies in New England formed a cooperative to negotiate better prices and share logistics. They set up a shared distribution hub in Connecticut. The hub receives bulk shipments from manufacturers, then breaks them down into smaller orders for each member pharmacy. They use a common cloud ERP that is integrated with TraceLink. Every incoming case is scanned, and every outgoing tote is scanned. The serial numbers are tracked at the unit level. |
In 2025, a manufacturer recalled a blood pressure drug due to a potential contamination in one lot. The cooperative's ERP identified that 12 member pharmacies had received units from that lot. The ERP generated a recall report for each pharmacy, listing the exact serial numbers. The pharmacies used their handheld scanners to locate and remove the specific units. One pharmacy reported that they found all affected units within 20 minutes because their inventory system showed the shelf location for each serial number. The cooperative estimated that the recall cost them only 2 percent of what it would have cost before serialization, because they avoided a blanket return of all blood pressure drugs from all members. This economic benefit is often overlooked but is very real for small players. |
|
Example Nineteen: A Drug Manufacturer's Internal Audit and Training Department |
A large manufacturer with a plant in New Jersey has an internal audit team that regularly reviews serialization compliance. They use GS1-128 scanning to perform 'surprise' audits on finished goods inventory. The audit team walks into the warehouse with a portable scanner, randomly picks 100 cartons, and scans their GS1-128. The scanner connects to the cloud ERP and checks that each serial number is properly recorded, that the expiry date matches the system, and that the product is in the correct storage zone. |
In one audit, they found that five cartons had GS1-128 labels that were printed with the wrong lot number - the label showed lot A, but the carton's outer case marking showed lot B. The discrepancy was due to a printer setup error. The audit team quarantined those five cartons and reviewed the packaging line logs. They discovered that the error had occurred during a shift change. The company retrained the operators and added a secondary camera that compares the printed lot number on the label with the lot number printed on the case. This internal use of GS1-128 scanning goes beyond regulatory compliance; it drives continuous quality improvement. |
|
Example Twenty: A State Board of Pharmacy Inspector |
State boards of pharmacy conduct routine inspections of drug storage facilities. In Ohio, the state board purchased portable barcode readers for their inspectors. When they visit a wholesaler, they randomly select several units and scan the GS1-128. The reader sends the serial number to the state's secure portal, which connects to TraceLink's public verification interface. The inspector can instantly see whether the serial number is active, whether it was correctly shipped to that wholesaler, and whether any recalls are associated with that lot. |
In 2026, an inspector in Cleveland scanned a unit of an anticoagulant and received a warning that the serial number had been deactivated by the manufacturer because the product was part of a market withdrawal. The wholesaler had not processed the withdrawal notice correctly. The inspector required the wholesaler to quarantine all units from that lot and submit a corrective action plan. The wholesaler updated their ERP to automate withdrawal notice integration. This example shows that regulatory agencies themselves rely on GS1-128 scanning to enforce the law, making the barcode a bridge between private companies and public oversight. |
|
Technical Integration Details in Plain Language |
Across all these examples, a common pattern emerges. The GS1-128 barcode is the physical carrier of data. The scanner is the sensor that captures that data. The local warehouse or pharmacy system is the first receiver. That system then sends a structured message, often in XML or JSON format, to a cloud platform like TraceLink. TraceLink acts as a trusted intermediary that maintains a global registry of serial numbers. It also provides a 'verification' service that answers questions such as: Is this serial number validHas it been sold beforeIs it under recallThe cloud ERP, whether it is SAP, Oracle, Microsoft Dynamics, or a custom solution, stores the business context: purchase orders, invoices, shipment routes, and inventory balances. |
The integration does not require pharmacies to become IT experts. Most modern pharmacy management systems come with pre-built connectors. For very small pharmacies, the connector is often a mobile app that communicates with TraceLink via cellular data. The app displays a simple green light for 'valid' and a red light for 'warning.' The pharmacist does not need to understand the underlying encryption or hashing algorithms. The system handles that automatically. |
Another important point is that the serial number is not secret. It is printed clearly on the package. The security comes from the central database that verifies the number's provenance. If a counterfeiters copies a valid serial number, the database will show that the number has already been scanned elsewhere, triggering a fraud alert. This is why the industry emphasizes 'interoperability' - all trading partners must share data in near-real time. The law requires that transaction information be exchanged electronically within one business day, but in practice, most scans update the cloud within minutes. |
|
Challenges and Mitigations |
Despite the successes, serialization is not without challenges. Some older packaging lines cannot print high-quality GS1-128 labels at high speed. Companies have invested in new print-and-apply systems and camera-based verification. Some wholesalers have reported that damaged or dirty barcodes fail to scan, causing delays. They have implemented redundant scanners and manual keypad entry as fallback, although manual entry is discouraged because it is error-prone. Another challenge is the aggregation hierarchy. A case label contains an aggregated serial number that represents all units inside. If a unit is removed from a case, the aggregation must be updated, which requires additional scans. Many companies now use 'logical aggregation' where the software tracks which serial numbers are in which case without physically re-scanning everything, but this requires disciplined warehouse processes. |
Data synchronization across multiple cloud ERPs can also cause latency. If a manufacturer uploads a serial number file to TraceLink, but the wholesaler's system does not refresh its local cache, a scan might return a 'not found' error. To mitigate this, most systems use a 'polling' mechanism that checks the cloud every few seconds. The FDA has also allowed a 'grace period' for network disruptions, but the industry is moving toward real-time APIs that reduce delays. |
Cost is another concern. A fully integrated serialization system, including scanners, printers, software licenses, and training, can cost a midsize wholesaler between 200,000 and 500,000 dollars. For large manufacturers, the investment can reach several million dollars. However, the examples above show that these costs are offset by savings from reduced recalls, fewer counterfeit losses, lower inventory carrying costs due to better expiry management, and improved operational efficiency. Many companies have reported a return on investment within three years, not counting the avoidance of regulatory fines, which can be as high as 15,000 dollars per violation per day. |
|
The Future Outlook |
Looking ahead, the pharmaceutical industry is exploring even more advanced uses of GS1-128 data. Some companies are integrating serialization with blockchain to create immutable records of each scan. Others are using artificial intelligence to predict which serial numbers are likely to be diverted based on geographic patterns. The FDA is also piloting a 'track-and-trace' system that would allow patients to scan a barcode with their smartphone and receive a message confirming the drug's authenticity, similar to the way package tracking works for e-commerce. This would require the cloud ERP to expose a public-facing API, which is technically feasible but raises privacy concerns. Most manufacturers are supportive because it would increase patient trust. |
Another trend is the use of GS1-128 for 'e-pedigree' purposes in combination with radio-frequency identification, or RFID. RFID tags can be read without line-of-sight, which speeds up bulk scanning. However, RFID is more expensive than barcodes, so the industry is adopting a hybrid approach: GS1-128 barcodes for unit-level identification and RFID for case and pallet aggregation. The data structure remains the same because both technologies use the same GS1 application identifiers. This means that the ERP integration does not change; only the hardware sensor differs. |
|
Detailed Summary at the End |
In summary, this chapter has demonstrated through 20 distinct American examples that GS1-128 barcodes, built on the reliable Code 128 symbology, serve as the cornerstone of pharmaceutical serialization under the DSCSA. The law mandates that every saleable unit bear a unique serial number, lot number, and expiry date in a machine-readable format. The industry chose GS1-128 because it is compact, globally standardized, and easily integrated with existing scanning infrastructure. When a barcode is scanned at any point in the supply chain - from the manufacturer's packaging line to the wholesaler's receiving dock, from the hospital pharmacy to the independent drugstore, and even at the reverse distributor's disposal site - the captured data travels to a cloud-based platform like TraceLink. That platform validates the serial number against the manufacturer's records and updates the enterprise resource planning system in real time. |
The real-world examples cover a wide spectrum: large injectable manufacturers that use ceramic ink on glass vials; repackagers that generate new serial numbers for blister cards; regional wholesalers that catch duplicates; national retail chains that manage expiry dates across thousands of stores; mail-order pharmacies that provide digital certificates to insurers; hospital systems that coordinate disaster response; 3PLs that handle multiple clients with automated routing; returned goods processors that identify counterfeits; cold-chain specialists that link temperature logs; independent rural pharmacies that gain patient trust; contract manufacturers that work with multiple clients under tight deadlines; reverse distributors that document destruction; machinery vendors that improve print quality; pharmacy benefit managers that prevent double claims; government agencies like the VA that allocate drugs to hotspots; biotech startups that comply on a budget; secondary wholesalers that avoid stolen goods; independent pharmacy cooperatives that reduce recall costs; internal audit teams that catch label errors; and state inspectors that enforce regulations with portable scanners. |
|
Each example reinforces a central theme: serialization is not merely a legal checkbox but a practical tool that saves money, protects patients, and enhances operational visibility. The barcode scan creates a timestamped digital footprint that cannot be easily forged because the central database acts as the source of truth. When a counterfeit or diverted product is scanned, the system raises an alert because the serial number's history does not match the expected location. When a recall occurs, the system quickly identifies all affected units, often within hours instead of days. When a drug approaches expiry, the system prioritizes its distribution to high-volume outlets, reducing waste. |
The technical integration between the barcode scanner and the cloud ERP is achieved through standardized APIs, making it accessible to both Fortune 500 companies and small independent pharmacies. While challenges such as print quality, scanning failures, data latency, and upfront costs exist, the industry has developed robust mitigations including redundant scanners, automated verification, and gradual migration to real-time APIs. The return on investment is evident not only in regulatory compliance but also in operational efficiency, brand protection, and patient safety. |
|
Looking to the future, GS1-128 will continue to evolve alongside emerging technologies like blockchain, AI-driven anomaly detection, and smartphone-based patient verification. However, the fundamental principle remains unchanged: a simple, readable, and globally unique barcode on every package, coupled with a cloud-based record system, creates an unbroken chain of trust from the factory floor to the patient's hand. The DSCSA has transformed the American pharmaceutical supply chain from a paper-based, batch-level, reactive system into a digital, unit-level, proactive network. Code 128, in its GS1-128 manifestation, has proven to be the right tool for this monumental task, and the 20 examples presented here provide a compelling evidence base for its continued use and expansion. |
Final words: This chapter aimed to be a comprehensive, accessible, and example-rich guide for anyone who wants to understand how barcodes and ERPs work together in the real world of US pharmaceuticals. The technical details of checksums, application identifiers, and data structures are important, but the human stories - the pharmacist who avoided a fake drug, the hospital that recalled a bad lot in hours, the wholesaler who stopped a theft ring - are what truly illustrate the value of serialization. As the industry moves toward global harmonization, the lessons learned from the US DSCSA experience will serve as a blueprint for other countries, and GS1-128 will remain at the heart of that blueprint. |
cs@easiersoft.com