Originally published on Medium.
Eighty per cent of companies had started by November 3. Every batch made before October 9 may still be sold.
On October 9, Pakistan began requiring a 2D Data Matrix barcode and a serial number on every medicine made or imported from that date. On November 3, officials put the figure at 80 per cent and the health minister said non-compliant plants will be sealed.
That is the fastest national pharmaceutical serialization rollout in recent memory, and the threat behind it is not idle. It is also, read closely, a mandate with a hole in the middle of it that nobody in the coverage has mentioned.
The sentence at the end of the notification
The requirement comes from S.R.O. 963(I)/2026. Business Recorder described it as mandatory for “all registered drug products manufactured locally or imported into Pakistan on or after 9th October 2026.”
Then it quoted the clarification that follows:
“Further it is clarified that batches manufactured locally or imported with manufacturing date prior to 9th October, 2026 are exempted from this requirement and shall remain permitted for import, distribution, and sale.”
Nukta reported the same thing on October 12, 2026, in its own words: batches made or imported before that date “are exempt, DRAP said. They may continue to be imported, distributed and sold.”
As of October 9, there are two legally compliant categories of medicine on Pakistani shelves: packs manufactured on or after this date, which must carry a serialized Data Matrix code, and packs manufactured prior to it, which are exempt from this requirement and remain legal to import, distribute, and sell.
Neither report we could read gives an end date for the exemption. It runs, on its face, for as long as pre-October stock remains within its expiry.
What that does to an inspection
Here is the practical consequence, and it is the reason this piece exists.
For the length of that window, an unmarked pack is not evidence of anything. A drug inspector in Lahore, a hospital pharmacist in Karachi, a distributor’s goods-in clerk: each of them, holding a carton with no Data Matrix on it, is looking at something that is either lawful pre-October stock or a counterfeit printed to look like lawful pre-October stock. The absence of the code is compatible with both.
That is not a flaw anyone introduced carelessly. The alternative was to render every pack already in the country unsaleable on a single Friday, which in a market with real affordability pressure means shortages and destroyed legal inventory. Almost every serialization regime in the world has granted the same relief, for the same reason. The point is narrower: during the transition, the control cannot be used as a screen. It can only be used on the packs that already have it.
And the transition is where counterfeiters work. The racket does not need to defeat a Data Matrix. It needs to look like the stock that is exempt from carrying one.
Eighty per cent of what
The number from the November 3 review meeting does not say the same thing in every account of it.
The Nation, on November 4, 2026, reported that the meeting “was informed that around 80% of pharmaceutical companies had started implementing the 2D barcode system.” ARY News, on November 3, 2026, reported that “80 percent of pharmaceutical companies have already initiated the 2D barcode enforcement process.” 24 News HD, the same day, reported that companies “have begun implementing 2D barcodes on approximately 80% of medicines.”
Two of the three say 80 per cent of companies. One says 80 per cent of medicines. And two of the three attach the verb “started” or “initiated” rather than “completed.”
Those are three different facts with one number. Eighty per cent of firms having begun a project is not eighty per cent of packs carrying a verified code, and for anyone planning a market-entry check or a procurement rule, the difference decides whether the control is usable.
None of the three reports we read gives a count of how many companies or products that percentage refers to.
The dates are not settled either
This is where it gets harder to plan against, and we are reporting it rather than resolving it.
ARY News on September 24, 2026, reported that “the new requirements will apply to medicines manufactured from October 19, 2026, according to the notification.” The Destination, the same day, printed the same date in its subheading. Business Recorder on October 13 and Nukta on October 12 both give October 9. The two later reports agree, and The Nation’s November 4 piece refers to “the October 9 deadline,” so October 9 is the better-supported date. But the public record contains both.
The S.R.O.’s own date fares worse. Business Recorder’s October 13 report cites it twice in the same article: once as “S.R.O.963(I)/2026 dated 9th June, 2026” and once as “S.R.O.963(I)/2026 dated 9th July, 2026.”
More consequentially, two accounts of the notification say opposite things about unmarked stock. ARY News on September 24 reported that “after the stipulated deadline, medicines without barcodes will not be allowed to be sold in the market.” The Destination, the same day, printed the same proposition. Three weeks later, Business Recorder quoted the clarification exempting pre-October batches and permitting their sale.
Both statements describe the same notification. A compliance team reading the Pakistani press in good faith could reach either conclusion about whether an unmarked carton is saleable.
Printing is mandatory. Checking is not.
Now the part that matters most to anybody who has watched a serialization programme land somewhere else.
In none of the seven reports we read is there a national verification portal or app named, nor any statement that scanning is required of a distributor, a pharmacist or an inspector. Business Recorder’s October 13 report mentions “e-Services portal integration” and “portal deployment” in the context of industry training and data submission. The obligations described everywhere are to print and to submit: print the code on the pack, submit the serialization data to DRAP.
The November 3 meeting is consistent with that. Across all three reports, the minister’s direction is that companies submit their serialization data, and the sanction for failing to is that production units are sealed. The enforcement instrument points at the manufacturer’s filing, not at the pack on the shelf.
That is the normal order of construction and not a scandal. You cannot check codes that do not exist yet. But it does mean that at this moment the system can tell DRAP which companies have complied, and cannot tell a pharmacist whether the carton in her hand is real.
A trade report from June 30, 2026, on sustainabilitymea.com, described the eventual consumer-facing intent: a smartphone scan returning expiry date, usage instructions and the official retail price. That is a vendor-adjacent trade account rather than a government document, and we flag it as such. It is also worth noting what that list does and does not include. Expiry, instructions and price are label data. None of them is an answer to whether the pack is the pack the manufacturer issued.
What we are not saying
We are not saying the mandate is weak. Going from a cabinet decision in mid-2026 to a live national requirement in October, with eighty per cent of firms engaged within a month and the sealing of production units on the table, is faster than the United States or the European Union has managed on any comparable measure. Several much richer regulators have been talking about 2D migration for years.
We are not saying the exemption was a mistake. It is the humane choice and the standard one, and a regime that destroyed every pack in the country on day one would have cost patients more than the counterfeiters.
We are not saying anybody has been caught out. We have no evidence that counterfeiters have exploited the exemption window, and we are not suggesting they have. We are describing a gap in what can currently be checked.
And we are not saying our own field closes it on its own. On October 21, 2026, we reported DRAP’s own alert on five counterfeit batches found in Karachi, detected by a drug testing laboratory rather than by anyone looking at a pack. We could not re-open that source today. A verification layer answers whether a unit is the unit the manufacturer issued. It does not answer what is inside it, and for that a laboratory is still the only instrument.
Who is exposed to this
The drug inspector working the transition window, for whom a missing code is not a finding.
The hospital pharmacist whose goods-in check cannot distinguish exempt stock from a forgery of exempt stock.
The compliance lead at a multinational selling into Pakistan, trying to pin a deadline that the public record states as both October 9 and October 19.
And the Pakistani manufacturer that has filed its serialization data and printed its codes, now competing on a shelf where the absence of a code carries no penalty for two populations of pack, only one of which is legitimate.
What would have had to be provable
For the exemption window to be a safe place rather than an open one, the question an inspector asks would have to be answerable at the item rather than at the carton. Not “does this pack carry a code,” which during the transition distinguishes nothing, but “is this unit the unit its manufacturer released,” answerable on the pack itself, by someone standing in front of it, without a reference database that is still being deployed and without the cooperation of whoever printed the label. That is an item-level identity bound at the point of manufacture, checkable in a second by the person holding the box. Pakistan has mandated the carrier for it in under five months, which is the hard part and genuinely impressive. What is not yet built is the check.
Aeroz, Making Authenticity Checkable. Visit aeroz.io to learn more & get in contact with our team via [email protected].
© 2026 Aeroz. All rights reserved.