Desk briefregulation

FDA gave qualifying small dispensers another DSCSA year—not a waiver from the whole law

FDA extended selected package-level tracing and verification requirements through November 27, 2027, for dispensers owned by companies with 25 or fewer full-time licensed pharmacists or qualified pharmacy technicians. No FDA filing is required, but other DSCSA duties remain.

An independent pharmacy professional reviewing records beside a laptop
The useful record is not simply “exempt.” It identifies the owning company, the November 27, 2026 headcount, the requirements covered, the requirements still active, and the trading partners told about reliance on the exemption.

Start with the notice date and the owning company

FDA's exemption notification is dated August 6, 2026. The agency's monitored drug page surfaced it on August 26. The document extends selected Drug Supply Chain Security Act requirements for qualifying small business dispensers for an additional year, beginning when the current exemption ends on November 27, 2026, and running through November 27, 2027.

For this exemption, FDA defines a small business dispenser by the corporate entity that owns the dispenser. That entity must have a total of 25 or fewer full-time employees licensed as pharmacists or qualified as pharmacy technicians as of November 27, 2026. FDA uses the IRS full-time threshold of an average 30 hours of service a week or 130 hours a month. A small location inside a larger owning company therefore should not infer eligibility from its own staff count.

The notice concerns a “dispenser” as defined in section 581(3) of the FD&C Act. A consultant-pharmacist practice that is not a dispenser under that definition should not assume that the word “small” brings its consulting work into the exemption. Record which legal entity owns and operates the dispenser, who counted the qualifying employees, the date used, and the source supporting the conclusion.

Name the requirements covered instead of writing “DSCSA exempt”

The notice covers a defined set of requirements in sections 582(d)(4) and 582(g)(1). For qualifying dispensers—and for their trading partners where the notice says so—it addresses the following work through the exemption period:

  • Exchanging transaction information and transaction statements instead of using the required secure, interoperable electronic method.
  • Exchanging transaction information without the product identifier for every package and using current methods for specified package-level verification activities.
  • Responding to covered government requests with current methods. For an authorized trading partner's request, that relief is limited to suspect-product investigation or assistance with an official request, and only when the small dispenser directly transacted the product involved.
  • Associating saleable returns with transaction information and statements, where the notice applies that relief to a small dispenser's trading partner.
  • The requirement to verify the product identifier for the statutorily designated proportion of suspect or illegitimate product is exempted; the notice says the dispenser's other verification obligations remain.

Keep the duties outside the exemption visible

FDA says the enhanced drug-distribution-security requirements remain in effect for trading partners that do not meet the small-dispenser definition. The notification also says its exemptions do not apply to the other requirements in section 582. This is why a one-field status such as “DSCSA delayed” is too broad for a procedure, vendor ticket, or readiness report.

FDA's pharmacist overview still tells dispensers to work with licensed or registered trading partners; receive required product-tracing documentation; retain that documentation for six years; and maintain processes to investigate, quarantine, handle, and report suspect or illegitimate products. Those baseline duties do not disappear because selected electronic, package-level, response, verification, or saleable-return provisions have an extended exemption.

A qualifying dispenser does not need to submit information to FDA or notify the agency that it is using the exemption. FDA does recommend communicating reliance to trading partners as needed to avoid distribution difficulty or delay. That communication is not a substitute for checking whether a particular trading partner and transaction are within the notice's scope.

Build a bounded exemption record

A practical record can fit on one page. Identify the dispenser and owning corporate entity; preserve the November 27, 2026 employee count and method; cite the August 6 FDA notification; list each covered requirement and how the organization will address it during the exemption; name the remaining DSCSA controls and their owners; record trading-partner communications; and set a recheck before November 27, 2027. Keep exceptions and unresolved eligibility questions visible rather than forcing a universal yes-or-no status across every location and transaction.

The extension is not permission to stop implementation. FDA says small dispensers should continue work toward the enhanced requirements. A useful readiness plan should therefore distinguish what is legally covered by the temporary exemption, what remains required now, and what technical or operational work is still needed before the exemption ends.

Treat the September 22 survey as a separate choice

FDA says the extra year allows time to finish its congressionally directed assessment of small dispensers, publish the final assessment for public comment, and hold a public meeting. The agency encourages small dispensers to complete the assessment survey by September 22, 2026, and says a dispenser may designate a consultant or another entity to complete it on the dispenser's behalf.

That survey is separate from reliance on the exemption. FDA's page encourages participation; it does not make survey completion a condition of the exemption. A practice helping with the survey should confirm its authority, answer for the correct dispenser entity, avoid placing credentials or unnecessary sensitive information in a project tracker, and retain the submitted version and date. Then watch for FDA's final assessment and public meeting rather than treating this one-year endpoint as a permanent rule.

About the author

Mara Ellis

Mara covers public policy, regulation, and standards that shape consultant-pharmacist work, with particular attention to dates, scope, and the difference between a proposal and a current requirement.

Read Mara Ellis's editorial profile

Signed by Mara Ellis