DSCSA for repackagers.
Under the Drug Supply Chain Security Act, a repackager must put its own product identifier on each package it repackages, keep it linked to the original manufacturer's identifier, and meet the same transaction-data and verification duties as a manufacturer.
A repackager breaks the manufacturer's package and creates a new one — which means DSCSA hands it the chain's hardest identity job: assign a new serialized identifier to every repackaged unit while maintaining the documented link back to the original. Break that link once and every downstream trace dead-ends at your facility.
DSCSA for repackagers, in three facts.
US DSCSA · §582 repackager obligations · new SNI assigned, linked to the original manufacturer's identifier · in force.
FDA's DSCSA exemption for eligible manufacturers and repackagers ended on 27 May 2025.
Source: FDA, exemptions under DSCSAThe DSCSA product identifier is the NDC, a serial number, the lot and the expiry date, in a 2D data carrier and in human-readable form on each package.
Source: 21 U.S.C. §360eeeDSCSA trading partners keep transaction information and transaction statements for at least 6 years.
Source: 21 U.S.C. §360eee-1
New label, same ancestry.
Serialize what you produce
Each repackaged unit gets its own product identifier — NDC, serial, lot, expiry in a GS1 DataMatrix — as if you were the manufacturer, because for that package you are.
Preserve the linkage
The new identifier must be associated with the original manufacturer's identifier in your records — the transformation event is the hinge of the whole chain.
Full manufacturer-grade duties
Verification requests, suspect-product handling, FDA 3911 notifications, six-year records — repackagers carry the manufacturer obligation set, not a lighter one.
Aggregation that survives
Repackaged units into cases into pallets: aggregation errors here propagate downstream as everyone else's exceptions, with your name on them.
The timeline, as it stands.
Repackager duties are in force. The 2033 NDC-12 transition doubles the workload: both the original and the new identifier formats change, and the linkage records must survive the migration.
Three moves that de-risk the deadline.
Treat transformation as an event, not a spreadsheet
Capture the old-to-new identifier mapping as a structured EPCIS transformation event at the line — reconstruction later is where linkage dies.
Audit your aggregation accuracy
Sample cases against their declared contents weekly. Your downstream partners are already measuring you; measure yourself first.
Plan the double NDC-12 migration
Your records reference two identifier namespaces. Build the crosswalk for both, and dual-read years before 2033.
The transformation, provable.
Aeroz writes the repackaging transformation as an EPCIS 2.0 event binding chip-verified identity on the new unit to the original's record — so lineage is machine-provable, not a mapping table in a drawer. Downstream verifications resolve in seconds, and traces pass cleanly through your facility.
DSCSA for repackagers, answered.
Do repackagers assign their own serial numbers?
Yes — a repackager applies its own product identifier to each repackaged unit, under its own NDC, while maintaining the documented association with the original manufacturer's identifier.
What is the transformation linkage requirement?
Records must connect the new identifier to the original product's identifier, so a downstream trace can pass through the repackaging step back to the manufacturer. It is a common break point in DSCSA tracing.
Do repackagers answer verification requests?
Yes — like manufacturers, they must respond to verification requests for product bearing their identifiers, and handle suspect and illegitimate product with quarantine, investigation and FDA notification.
How does NDC-12 hit repackagers?
Twice: the original NDCs you record and the NDCs you assign both migrate to the 12-digit format by 7 March 2033, and your linkage records must remain valid across the change.
From the Aeroz blog
- Thailand Made the Prescription Compulsory. Tracing the Pen Is Voluntary.
- The FDA Issued 54 Medical Device Warning Letters in 2025.
More answers: DSCSA questions in the compliance FAQ
Know exactly where you stand — in 14 days.
A fixed-fee Aeroz audit maps your products against DSCSA repackager requirements and returns a written readiness assessment, a data-mapping review, and a scoped pilot plan with cost and timeline.