Saleable returns verification: What you need to know about enforcement discretion

Published: 5-Aug-2019

We are aware of the speculation that the US FDA may announce a delay in enforcement action for the DSCSA’s November 2019 saleable returns verification requirement at the request of the Healthcare Distribution Alliance (HDA), comments Dan Walles, General Manager, Track & Trace and Compliance, TraceLink

Reasons for the request include the following:

  • a lack of industry awareness regarding requirements
  • concerns that the Industry is not ready with their solutions and this could cause wholesalers to quarantine or destroy returned product as opposed to returning it to saleable inventory, leading to drug shortages
  • sensitivity around manufacturers sharing product identifier information with partners they do not have trusted, pre-existing relationships with.

The above concerns have led to discussions around a repeat of the enforcement discretion granted for both the lot level and serialisation requirements of DSCSA. However, TraceLink believes these concerns are unwarranted among the majority of businesses that need to comply with the saleable return`s verification requirements, citing several justifications for this position.


The requirement for verification has been known since the DSCSA law was passed in November of 2016. Since then, there has been a significant amount of awareness and education directed at pharmaceutical manufacturers, including a number of webinars and seminars addressing requirements as well as guidance on preparing for the deadline. Additionally, each of the big three wholesalers distributed letters to their suppliers in 2018 outlining their expectations and requirements.

Solution readiness

Solution providers, along with many in the industry, have been working to define the standards by which verifications are done. A set of standards around Verification Router Services (VRS) that will enable compliance with the law have been ratified by GS1 and solution providers are completing the interoperability testing that will enable these systems to communicate with each other.

In fact, as part of its overall development, TraceLink has been performing stress testing against its system and has simulated receiving approximately 700 simultaneous requests per second with an average response time of 370 ms.

Although there are complexities in building a verification system, many of these have been addressed through the standards setting process and the remaining work lies in businesses choosing a vendor and getting started with implementation, standards development and training.

Sharing sensitive information

Product identifier information is sensitive, and unauthorised access to that data can create supply chain vulnerabilities. However, the VRS standard accommodates the inclusion of a Global Location Number (GLN) that can be used to control which companies they respond to. Using this or similar identifiers such as DUNS, a solution provider is able to provide this control to its customers.

Saleable returns verification: What you need to know about enforcement discretion

By ensuring that each request is vetted against an approved list of companies and also providing functionality to perform a legitimacy check on each entity before it is added to the network, TraceLink’s VRS solution gives companies control over who they share their data with.

Reasons to act now

Despite any enforcement discretion, the saleable returns verification requirement will still go into effect on 27 November, meaning that companies could be liable for actions that have legal consequences.

Beginning on this date, FDA will be looking for evidence that the industry is making a “good faith” effort to meet the deadline and will want to know what each manufacturer is doing now to ensure that they can respond (within 24 hours) to any requests for verifications they might receive after 27 November 2019.

Some MAHs have stated that wholesalers will not be ready by the deadline, so they are questioning why they should act now. This is a position that puts their business — and patients — at significant risk. The saleable returns verification requirement was included in DSCSA to address a known supply chain vulnerability.

The best way to demonstrate that commitment is to partner with a solution provider and start working to develop integrations, standard operating procedures (SOPs) and training plans. This level of activity demonstrates that the MAH is doing what they can to meet their obligation to the saleable returns verification requirement.

The implementation of a VRS solution may take as long as six months and, therefore, even if there was an enforcement discretion, waiting to comply is far too risky.

The big three wholesalers have 300–600 suppliers each. The earlier an MAH starts, the less time they will waste trying to get the attention of their wholesaler customers. This was a significant challenge when the industry went live with lot-level traceability and wholesalers simply did not have the bandwidth to onboard each MAH on their own timelines.

For smaller to mid-size companies holding off on preparing for the saleable returns verification requirements and planning to do everything manually, the lack of preparation presents a business risk, as wholesalers will simply return product for credit rather than waiting for manual verification, given the time it will take.

TraceLink’s status

With less than four months to go, TraceLink is fully prepared for the November 2019 deadline with its purpose-built saleable returns solution, providing customers with a fast, secure, and compliant approach. With a secure network of 275,000 prevalidated members, manufacturers on the TraceLink network can be assured that the saleable returns requests are from companies that are valid and legitimate.

Once you partner with TraceLink, you can start responding to verification requests from direct and indirect authorised trading partners, without creating point-to-point connections or vetting inquiries from inbound trade partners while the distributor is waiting for a response.

Additionally, to ensure network security and authorised access, TraceLink has dedicated substantial time and resources to network governance, with more than 20 full-time in-house professionals responsible for authenticating companies.

Failure to act could result in a risk to patients and your product and corporate brand could be at stake if adulterated product enters the supply chain. There is also a business risk from wholesalers that may decide to simply return the product for credit if you are not ready to receive verification requests. We know some wholesalers will be ready but is that a risk you want to take?

You may also like