Key takeaways
- The Drug Supply Chain Security Act (DSCSA), enacted in 2013, requires secure, interoperable, electronic exchange of transaction information down to the package level. None of the sources we read says it requires or names blockchain.
- FDA ran a pilot program in which several teams tested blockchain or distributed-ledger designs alongside non-blockchain approaches. FDA said choosing a pilot was not an endorsement of any technology.
- The strongest claims for blockchain come from the pilot participants themselves. The independent analysis we found is thinner and more cautious, and we found no adoption figures for blockchain in drug tracing.
- Deadlines have moved more than once. Small dispensers now have an FDA exemption running to November 27, 2027, so anyone relying on a compliance date should check the FDA page directly.
The problem the law is trying to solve
A box of medicine changes hands several times between the factory and the pharmacy shelf: manufacturer, wholesale distributor, sometimes a repackager, then the dispenser. Each step has its own records. The goal of the law is that anyone in the chain can check that a package is what its label says, and that a suspect or recalled product can be traced. That is a trust problem between organizations, which is why blockchain was proposed. Whether it was needed is a separate question, and we get to it below.
This article describes the US law and the pilots. It is general information, not legal or compliance advice, and the dates below change; the FDA pages linked at the end are the authority.
How to read the evidence labels
- Confirmed A primary source and at least one independent source agree.
- Issuer-stated Only the project, foundation or company says so. We did not find an independent check.
- Reported A credible outlet reports it, but we did not find or read a primary document.
- Disputed Credible sources conflict. We give both versions.
- Unknown We looked and found no source either way.
The labels describe sourcing, not quality. A claim labeled Issuer-stated may be entirely accurate; it simply has no independent check we could find. Dollar figures for sales paid in bitcoin or ether are conversions made at some point in time, not amounts the buyers paid.
What the law requires
The Drug Supply Chain Security Act was enacted in 2013 Confirmed. It requires trading partners to exchange transaction information for certain prescription drugs in a secure, interoperable, electronic manner, including the product identifier of each package Reported (a law-firm summary quoting the statute; we did not read the statute text itself). FDA describes the goal as an interoperable electronic system to identify and trace these drugs at the package level Confirmed.
The product identifier is a serialized label: the National Drug Code, a serial number of up to 20 characters, the lot number and the expiration date, carried in a two-dimensional data matrix barcode on each package Confirmed (FDA guidance and the GS1 US standards body agree). A homogeneous case of one product and one lot is also covered Confirmed. Blood, medical gases, homeopathic products and compounded drugs are among the exclusions Confirmed.
On technology, the pages we read do not name blockchain. FDA’s page on its pilot program says that choosing a project was not an endorsement of any technology Confirmed. FDA’s guidance requires the machine-readable carrier to follow a widely recognized international standard, and GS1 US names its own data-exchange standards, including a messaging format called EPCIS Reported. We did not find a statement in any of these that blockchain is required.
| Date | What happened | Evidence |
|---|---|---|
| 2013 | DSCSA enacted. Law-firm summaries describe it as Title II of the Drug Quality and Security Act, Public Law 113-54. | Confirmed year; Reported statute citation |
| August 2023 | FDA announced a one-year period in which it would not enforce the requirement, to November 27, 2024. | Confirmed |
| November 27, 2023 | The date the package-level electronic exchange requirement was due to start, before FDA’s August 2023 announcement moved enforcement. | Confirmed |
| November 27, 2024 | End of that period. A 2025 industry-group article describes this as the final milestone and EPCIS 1.3 as the regulatory baseline. | Reported |
| 2024 to 2026 | Small dispensers (owners with 25 or fewer full-time pharmacists or qualified technicians, measured at the owning company) received additional time. A June 2024 law-firm note described a grant to November 27, 2026. FDA’s August 2026 exemptions page and a second law firm now give November 27, 2027, with no filing needed to use it. Other trading partners may request a waiver, and a request does not pause their duties. | Confirmed for 2027; the earlier date is Reported |
Sources: FDA, Exemptions under the DSCSA (Aug 26, 2026); Frier Levitt (Aug 28, 2023); Sidley (Aug 25, 2023); Faegre Drinker (June 18, 2024); Buchanan Ingersoll & Rooney client alert (undated); Wireless-Life Sciences Alliance (May 30, 2025).
What FDA’s pilot program tested
FDA ran a DSCSA Pilot Project Program to test ways of meeting the package-level requirement. The program has concluded and FDA has published a final report Confirmed (we read FDA’s pilot page, not the report). Its list shows about 20 projects. Blockchain or distributed ledgers were a minority of them, alongside barcode-readability studies, router services and a small-dispenser study Confirmed.
| Pilot | What we found | Evidence |
|---|---|---|
| IBM, KPMG, Merck, Walmart | Began June 2019 on Hyperledger Fabric, a permissioned ledger. The group said it could bring fragmented supply chains into compliance and alert partners to a recall in about 10 seconds, compared with up to three days today. The 10-second figure is the group’s own estimate. | Issuer-stated |
| MediLedger, led by Chronicled | A consortium network. Chronicled’s 2020 summary of its report to FDA says a single blockchain could meet throughput, speed and cost needs, that privacy could be handled with zero-knowledge proofs, and that four sets of standards still needed development: messaging, system interoperability, interfaces and trading-partner identification. | Issuer-stated |
| UCLA Health with LedgerDomain | The FDA list title names blockchain. We did not read an outcome. | Confirmed title only; outcome Unknown |
| IDLogiq | The FDA list title names blockchain or distributed ledger technology. We did not read an outcome. | Confirmed title only; outcome Unknown |
| TraceLink | Titled as distributed ledgers and digital recalls. We did not read an outcome. | Confirmed title only; outcome Unknown |
Sources: FDA, DSCSA Pilot Project Program (page content as of June 2024); Yahoo Finance/CoinDesk (May 4, 2020); Tablets & Capsules (Apr 2, 2020).
MediLedger after the pilot
Chronicled announced a MediLedger Product Verification Solution on July 2, 2019, aimed at the requirement to verify returned, saleable products. The release says nodes are operated by industry participants and technology providers Issuer-stated. The 2020 report summary lists named consortium members including large manufacturers, wholesalers and a pharmacy chain, and describes a group of 25 organizations Issuer-stated. A 2025 industry article describes MediLedger as also covering contract management and dispute resolution Reported.
We did not find current usage numbers, a current participant list or a 2026 status statement for MediLedger. Adoption of the network is Unknown in the sources we read; a 2025 industry article says full-scale rollout “remains gradual” without figures.
Where blockchain was needed, and where it was not
Not needed to comply. The law asks for secure, interoperable, electronic exchange of package-level data. Industry-group and vendor sources say companies commonly meet this with EPCIS messaging between trading partners Reported, and the Chronicled summary itself says stakeholders currently use that approach Issuer-stated. A law-firm guide for pharmacies describes duties to receive, keep and exchange transaction information with suppliers and does not mention blockchain Reported.
What a shared ledger could add. The argument from pilot participants is that a common record reduces the number of one-to-one connections, gives every party the same view of a product’s status, and can notify everyone at once of a recall Issuer-stated. Those are real coordination benefits when many competing firms must agree on one record. They are claims from the builders, and the 10-second recall figure is an estimate, not a measured result.
The independent caution. A 2025 analysis from an industry alliance concludes that blockchain will not replace the core DSCSA infrastructure and fits where there are trust gaps. It lists scaling and delay at high volume, access-control complexity even on permissioned ledgers, a conflict between ledger permanence and data-deletion rights such as those under Europe’s GDPR, vendor lock-in and cost as obstacles Reported. That runs against the pilot summary’s claim that cost and throughput are achievable Disputed. The two documents are five years apart and neither is a regulator’s finding.
What blockchain cannot do. A ledger records what participants enter. It cannot tell whether the pills in a box match the barcode. That check still depends on manufacturing controls and on people scanning and verifying at each handoff. In one enforcement case reported in 2020, FDA sent a warning letter to a wholesaler after oxycodone tablets were found in a naproxen bottle Reported. Our reading: a record system tracks handoffs, and on or off a blockchain it would not by itself stop a substitution like that.
Where our sources run out
We did not read the statute text, FDA’s final pilot report, or the MediLedger and IBM reports themselves; we relied on FDA pages and secondary summaries. We found no regulator or independent evaluation of blockchain for DSCSA, no adoption figures for blockchain or EPCIS across the industry, no outcomes for the UCLA, IDLogiq or TraceLink pilots, no MediLedger usage numbers, and no counterfeit-medicine statistics with a named source. Sources also disagree about the final compliance date (2023, 2024 or later, depending on the document and its age), which is why the table above uses FDA and law-firm pages and why you should check FDA directly before acting.
Frequently asked
Does the DSCSA require blockchain?
Not in anything we read. The law requires secure, interoperable, electronic exchange of package-level transaction information, and FDA said selection for its pilots was not an endorsement of any technology. We did not read the statute text itself, so check it for the exact wording. This is general information, not compliance advice.
What did FDA’s pilot program find about blockchain?
FDA’s pilot program has concluded and a final report exists, which we did not read. The conclusions we read come from participants. Chronicled said a single blockchain could meet throughput and cost needs and that standards gaps remained, and an IBM-led group said it could send recall alerts in about 10 seconds. Both are issuer-stated.
Is MediLedger still operating?
We found no 2026 status statement or usage figures. Chronicled announced its product verification solution in July 2019, and a 2025 industry article says rollout remains gradual. Current adoption is unknown from the sources we read.
What is the current deadline for small dispensers?
FDA’s August 2026 exemptions page says the small-dispenser exemption runs to November 27, 2027, and a law-firm alert agrees. Eligibility depends on the owning company having 25 or fewer full-time pharmacists or qualified technicians as of November 27, 2026. Check FDA before relying on any date.
Further reading
- FDA: DSCSA Pilot Project Program
- FDA: Exemptions under the Drug Supply Chain Security Act
- FDA guidance: Product Identifiers Under the DSCSA
- GS1 US: Drug Supply Chain Security Act
- Tablets & Capsules: Summary of the MediLedger DSCSA pilot report (Apr 2, 2020)
- BioSpace: MediLedger product verification solution has launched (Chronicled release, July 2019)
- Wireless-Life Sciences Alliance: Blockchain in track and trace (May 2025)
- ChainBrief: Blockchain Beyond Finance series
More in this series: Land and property registries · Environmental credits · Series overview · Glossary