India manufactures roughly one in five of every generic medicine consumed worldwide, which means a meaningful share of Indian pharma output never touches a domestic pharmacy shelf at all — it ships to the US, the EU, or both. For a plant exporting to all three markets, track-and-trace isn't a single compliance project. It's three overlapping regimes, each written by a different regulator, each with its own identifier rules, its own verification model, and its own deadline calendar: CDSCO's domestic track-and-trace mandate, the US Drug Supply Chain Security Act (DSCSA), and the EU Falsified Medicines Directive (FMD).
The frustrating part for a packaging and quality team is that these three regimes agree on more than they disagree on — all three want a unique identifier, a 2D barcode, and batch and expiry data on the pack. But the places where they diverge are exactly the places that determine your system architecture, your data flows, and which markets a single production run can serve. This guide puts all three next to each other, then covers what Ratifye actually does to collapse them into one serialization layer instead of three.
The Core Difference in One Sentence Each
Before the detail, it's worth holding the structural difference in mind, because it explains almost everything else in this guide:
- CDSCO is consumer-facing. The QR code on a Schedule H2 / Top 300 brand pack is meant to be scanned by the patient or pharmacist at the point of purchase for authentication — there's no mandatory central-repository check built into the domestic rule.
- DSCSA is trading-partner-facing. It requires electronic transaction data to move between manufacturer, wholesaler, and dispenser with every change of ownership — verification happens through data exchange, not a mandatory scan at the pharmacy counter.
- EU FMD is dispense-facing. Every pack must be verified against a central repository and decommissioned at the moment it's handed to the patient — the one regime of the three with a mandatory scan-and-check step built into law. (For an in-depth breakdown of safety features, OBP registration, and EMVO verification, see our dedicated EU FMD guide for Indian manufacturers.)
Side by Side: Identifier, Carrier, Verification, and Architecture
| Dimension | CDSCO (India) | DSCSA (United States) | EU FMD (European Union) |
|---|---|---|---|
| Scope | Top 300 brand formulations (Schedule H2), with phased expansion planned to vaccines, antimicrobials, and narcotics | Prescription drugs for human use moving through the US supply chain | Prescription medicines, with a defined list of exempted OTC products |
| Identifier | GTIN, brand and generic name, manufacturer details, batch, mfg/expiry dates, licence number | Product identifier: NDC + unique serial number, lot, expiry (SNI) | Unique identifier: product code, serial number, batch, expiry, national reimbursement number where required |
| Data carrier | 2D barcode (QR) on primary or secondary pack | 2D Data Matrix; linear/2D on homogeneous cases | 2D Data Matrix, plus a mandatory anti-tampering device |
| Verification model | Patient/pharmacist scan for authentication — no mandated repository check | Transaction-based data exchange between trading partners at change of ownership | Mandatory scan-and-decommission at point of dispense against a central repository |
| Repository / hub | No domestic central repository requirement; iVEDA portal applies to export consignments | Decentralized — partners exchange EPCIS data directly or via networks, no single national hub | Centralized — national/supranational repositories connected through the EMVS hub |
| Aggregation (case/pallet) | Not mandated | Not legally required; widely used internally for inference | Not legally required; often implemented for scanning efficiency |
| Status as of 2026 | Top 300 rule effective since August 2023; expansion phases pending DTAB timelines | Enhanced drug security requirements in force since Nov 2023; final dispenser exemptions lapsing through Nov 2025–2027 | In force since Feb 2019 across most member states; a small number of national transition deadlines run through Feb 2027 |
What Each Regime Actually Requires, in Practice
Where the Three Actually Conflict for a Manufacturer
None of these regimes is individually complicated once you understand its logic. The friction shows up when one plant has to serve all three at once, and it tends to show up in the same three places.
Separate serial pools per market. The most common mistake is generating a different serial number range for domestic, US, and EU-bound stock — usually because three different vendor integrations were bolted on at three different times. This multiplies the commissioning workload and makes it impossible to redirect stock between markets if a shipment is rejected or a market shifts, because the serial was never market-agnostic to begin with.
Non-GS1 serial formats. DSCSA and EU FMD both lean on GS1 standards (GTIN, SSCC) even though neither mandates GS1 by name, and CDSCO's own GTIN requirement already assumes GS1 numbering. A serialization system built on a proprietary or non-GS1 identifier scheme works until a US or EU trading partner's system can't parse it — at which point the fix is a re-serialization project, not a configuration change.
Aggregation treated as optional everywhere. Technically true — none of the three regimes legally requires case or pallet aggregation. Practically false — EU wholesalers and US trading partners increasingly expect it for operational efficiency, and without it, DSCSA's "inference" exception (which lets a dispenser infer a higher-level package's contents from its parent) stops being usable, forcing manual unit-level data entry downstream.
A Single Packaging Line Strategy
The fix isn't three compliance projects running in parallel. It's one serialization layer, built to the strictest common denominator (GS1 GTIN + unique serial, 2D Data Matrix, batch and expiry) at the point of commissioning, with market-specific data and routing applied downstream rather than baked into the identifier itself. A pack commissioned this way can be:
- Routed to CDSCO's domestic Top 300 flow with the required consumer-facing QR payload, no additional serialization step
- Routed to DSCSA-covered US trade with the same serial exposed through EPCIS-based transaction data exchange to the next trading partner
- Routed to EU FMD-covered dispense with the same serial uploaded to the EMVS hub before release, ready for point-of-sale decommissioning
The unit's identity never changes. Only the downstream data flow and the verification event it participates in changes, based on which market it's actually shipped to — decided as late in the process as the dispatch decision itself, not locked in at the point of printing.
How Ratifye Helps Across All Three
This is the specific problem Ratifye's serialization layer is built to collapse. Instead of three vendor integrations — one for CDSCO's domestic QR, one for DSCSA's EPCIS exchange, one for EU FMD's EMVS upload — a single commissioning event on the Ratifye platform generates a GS1-compliant SGTIN that's usable across all three regimes from day one.
The practical effect for a plant exporting to all three markets: one packaging line change, one serialization vendor relationship, and a single source of truth for every regulator who asks to see it — rather than reconciling three systems every time an auditor from a different market shows up.
Running CDSCO, DSCSA, and EU FMD on three different systems?
Ratifye's team can map your current serialization setup against all three regimes and show exactly where a single commissioning layer replaces the separate integrations you're maintaining today.
Talk to Ratifye about export complianceSources: CDSCO notification G.S.R. 823(E) and published FAQs on Top 300 / Schedule H2 barcode implementation; US FDA Drug Supply Chain Security Act enhanced drug distribution security requirements and exemption timelines; EU Falsified Medicines Directive (2011/62/EU) and European Medicines Verification System (EMVS) architecture, including Windsor Framework provisions for Northern Ireland. Figures and deadlines are the most recent publicly available information at time of writing; consult primary regulatory texts and legal counsel for compliance decisions specific to your products and markets.
