DSCSA inside a health system.
Under the Drug Supply Chain Security Act, a hospital or health-system pharmacy is a dispenser: it must buy only from authorized trading partners, receive product with its transaction data, keep those records for six years and investigate suspect product.
A hospital pharmacy has the same DSCSA duties as any dispenser, with one question a retail pharmacy rarely faces: which of your internal moves count as a transaction. Moving product between hospitals under common control does not. Buying or borrowing from a hospital outside your system does, unless it fills a prescription for an identified patient.
DSCSA for hospital pharmacies, in three facts.
US DSCSA · §582(d) dispenser duties · transfers under common control are not transactions · borrowing from another system usually is.
Under DSCSA, moving product among hospitals or other health care entities under common control is not a transaction, so no transaction data changes hands.
Source: 21 U.S.C. §360eee(24)(B)(ii)A dispenser that sells product to another dispenser to fill a prescription for an identified patient does not have to pass transaction data. Restocking a shelf does not count.
Source: 21 U.S.C. §360eee(19) and §360eee-1(d)(1)(A)(ii)Dispensers with 26 or more full-time pharmacists and pharmacy technicians have been under the DSCSA enhanced requirements since their exemption ended on 27 November 2025.
Source: FDA, exemptions under DSCSA
Same duties, more moving parts.
Buy only from authorized trading partners
Check that every wholesaler, manufacturer and 3PL you buy from holds a valid licence or registration. This includes the secondary suppliers you call during a shortage, which is when checks get skipped.
Receive product with its data
Each purchase arrives with electronic transaction information and a transaction statement. Central pharmacies, satellite pharmacies and owned clinics all need a way to match that data to what was delivered.
Know which transfers are transactions
A move between hospitals under common control is not a DSCSA transaction. A sale to an unrelated hospital is one, and needs transaction data, unless it fills a prescription for an identified patient.
Quarantine and investigate suspect product
A crushed carton, a broken seal or a price far below market is a reason to quarantine the product and investigate. If it is illegitimate, FDA and your trading partners hear within 24 hours.
The timeline, as it stands.
Most health systems employ more than 25 full-time pharmacists and pharmacy technicians, so the small-dispenser exemption does not cover them. For those systems the enhanced requirements have applied since 27 November 2025.
Three moves that de-risk the deadline.
Map your legal entities
List every pharmacy, clinic and warehouse and who owns it. Common control decides whether a transfer needs transaction data, and that depends on ownership, which the name on the building does not show.
Write the borrowing rule
Staff need one rule for loans to and from outside hospitals: patient-specific prescription, no data needed; restocking, treat it as a sale and exchange the data.
Pull one record end to end
Pick a unit received six months ago at a satellite site and produce its transaction information. A dispenser has 2 business days to answer FDA, so time yourself.
One record across every site.
Aeroz ties each unit's physical identity to its transaction record. A scan at central receiving, at a satellite pharmacy or at a clinic writes to the same log, so a transfer inside the system, a loan outside it and a return each leave a record you can produce on request.
DSCSA for hospital pharmacies, answered.
Is a hospital pharmacy a dispenser under DSCSA?
Yes. The DSCSA definition of dispenser covers retail pharmacies, hospital pharmacies and groups of chain pharmacies under common ownership, along with their affiliated warehouses that do not act as wholesale distributors.
Do transfers between our own hospitals need transaction data?
No, if the hospitals are under common control. The statute excludes distribution among hospitals or other health care entities under common control from the definition of a transaction.
Can we borrow a drug from a hospital outside our system?
Yes. If the transfer fills a prescription for an identified patient, it is a specific patient need and no transaction data is required. If it restocks your shelf, it is a transaction and the lending hospital must provide the data.
Does the small-dispenser exemption apply to hospitals?
Only if the company that owns the pharmacy has 25 or fewer full-time pharmacists and pharmacy technicians, counted as of 27 November 2026. Most health systems are above that number.
Know exactly where you stand — in 14 days.
A fixed-fee Aeroz audit maps your products against DSCSA requirements for hospital and health-system pharmacies and returns a written readiness assessment, a data-mapping review, and a scoped pilot plan with cost and timeline.