DSCSA transaction records: what pharmacy-to-pharmacy purchases actually require

If your pharmacy has ever acquired inventory from another pharmacy — whether through a direct transfer, a closure sale, or an informal peer exchange — you have engaged in a transaction that the Drug Supply Chain Security Act (DSCSA) treats with substantially more formality than pharmacy owners often realize. The distinction matters because PBM audits increasingly test DSCSA compliance, and pharmacy-to-pharmacy purchases are where most independents fail the test.

This guide walks through what DSCSA requires for non-wholesaler acquisitions, which documents PBMs actually accept as proof of compliance, and where the typical independent pharmacy documentation falls short.

The basic DSCSA framework

The Drug Supply Chain Security Act, enacted in 2013 and phased in through 2023, establishes requirements for tracking prescription drugs through the U.S. supply chain. The goal is to prevent counterfeit, diverted, or adulterated medications from reaching patients. The mechanism is documentation — every transaction involving a prescription drug must be documented in a way that allows the product to be traced backward to the manufacturer.

For wholesaler-to-pharmacy transactions, DSCSA documentation is generally handled through the wholesaler's invoicing and electronic transaction systems. The pharmacy receives what looks like a standard invoice, and the DSCSA fields are populated automatically in the background.

For pharmacy-to-pharmacy transactions, that automation does not exist. The pharmacies involved must manually generate the required documents, and the documents must meet specific content requirements. This is where most independents are structurally exposed.

The three documents DSCSA requires

A compliant pharmacy-to-pharmacy transaction requires three documents, all of which must be maintained for at least six years under federal law — and longer under some state pharmacy board rules.

Transaction Information (TI). This document identifies the product being transferred and the transaction itself. Required fields include the product's NDC, name, strength, dosage form, container size, and number of containers, along with the transaction date, a reference number, and the names and addresses of the transferring and receiving pharmacies.

Transaction History (TH). This document shows the full chain of ownership for the product being transferred, going back to the manufacturer. Each prior transfer — from manufacturer to wholesaler to originating pharmacy and so on — must be documented within the TH. For products that have moved through multiple intermediaries, the TH can be several pages long.

Transaction Statement (TS). This is a signed statement from the transferring pharmacy attesting to six specific compliance facts: that the transferring entity is authorized under state law, that it received the product from a compliant source, that it has not knowingly shipped suspect product, that it has systems to comply with verification requirements, that it did not knowingly provide false information, and that it has not knowingly altered the TH.

What a compliant transaction actually looks like

When Pharmacy A transfers a bottle of medication to Pharmacy B, the complete DSCSA package for that transaction includes: a TI document populated with all required product and transaction fields; a TH document showing every prior transfer of that specific bottle going back to the manufacturer; and a TS signed by the authorized representative of Pharmacy A attesting to the six compliance statements.

Pharmacy B receives and retains all three documents. Pharmacy A retains copies as well. Both pharmacies must be able to produce the documents on request — from the FDA, from a state board of pharmacy, or from a PBM auditing the transaction.

Why PBM audits treat this area so strictly

PBMs test pharmacy-to-pharmacy documentation aggressively for three reasons. First, it is a known weakness — industry data suggests that many independent pharmacies do not maintain complete DSCSA documentation for non-wholesaler acquisitions. Second, it is a legitimate regulatory framework, so findings carry more weight than purely contractual disputes. Third, it supports broader audit escalation, because incomplete DSCSA records can be characterized as a pattern of documentation failure rather than a single transaction issue.

Some PBM provider manuals now specifically require that pharmacy-to-pharmacy acquisitions be documented with all three DSCSA documents as a condition of claim acceptance. If the claim is for a medication acquired through a peer transfer, and the TS or TH cannot be produced during audit, the claim can be denied retroactively regardless of the clinical appropriateness of the dispensing.

The closure-sale trap

One common situation creates especially dangerous DSCSA exposure. When an independent pharmacy closes and sells its remaining inventory to another pharmacy, the acquiring pharmacy often receives the physical inventory without full DSCSA documentation. The closing pharmacy is winding down operations and may not produce complete TH and TS documents for each transferred product.

The acquiring pharmacy then dispenses from that inventory. Months later, during a PBM audit, the documentation gap surfaces — and the acquiring pharmacy bears the compliance consequence, even though the documentation failure originated with the closed pharmacy that is no longer operational.

The protective practice, which most independent pharmacies do not implement, is to require full DSCSA documentation as a precondition of any closure-sale acquisition. If a closing pharmacy cannot produce complete TI, TH, and TS for each lot of inventory being transferred, the acquisition should be declined or the specific lots without documentation should be excluded.

What to do if your documentation is incomplete

If you have already acquired inventory through a pharmacy-to-pharmacy transfer and do not have the full DSCSA package, the practical options depend on whether the originating pharmacy is still operational. If it is, request the complete TI, TH, and TS retrospectively — many pharmacies will produce these on request even if they did not provide them at the time of transfer. If the originating pharmacy is closed, reconstruction becomes substantially harder, and the pragmatic path is often to identify the specific lot numbers and claim windows that depend on the undocumented inventory, so that those claims can be managed carefully if they surface in future audits.

Going forward, the cleanest approach is to require DSCSA documentation as a non-negotiable condition of any non-wholesaler acquisition. The small administrative burden at acquisition time is vastly smaller than the audit exposure months or years later.