India manufactures roughly one in five of every generic medicine consumed worldwide, and a meaningful share of that output is destined for the EU. For any Indian manufacturer or exporter in that supply chain, EU FMD — formally the safety features set out in Delegated Regulation (EU) 2016/161, made under Directive 2011/62/EU — isn't background regulatory context. It's a set of concrete, pack-level technical requirements that have to be satisfied before a shipment can legally be sold at an EU pharmacy counter.

Most explainers stop at "you need a 2D barcode and a tamper seal." That's true but not useful on its own, because the part that actually trips up new entrants isn't the barcode spec — it's the chain of custody around it: who has to register with EMVO, in what order data has to be uploaded, and what happens to that unique identifier at each handoff between your factory and a European patient.

2019
The year EU FMD safety features became mandatory on prescription medicine packs across the EU/EEA (9 February 2019) — and the compliance bar every Indian export consignment to the EU has had to clear since.

The Two Safety Features, in Practice

Delegated Regulation (EU) 2016/161 requires exactly two physical features on the outer packaging of most prescription medicines, and both have to be verifiable independently of each other.

Feature One
The Unique Identifier
A serialized 2D GS1 DataMatrix printed on the pack, machine-readable and backed by human-readable text that must match it exactly. It isn't just a GTIN — it's a specific combination of five data elements that together make one physical pack distinguishable from every other pack of the same product ever made.
Feature Two
The Anti-Tampering Device (ATD)
A seal, perforation, or other tamper-evident closure on the outer packaging. Its only job is to make it visually obvious if the pack has already been opened. A missing or damaged ATD is treated as a suspect pack by default — the verification system doesn't wait for a barcode mismatch to flag it.
Data ElementWhat It CarriesNotes for Indian Exporters
Product codeGTIN identifying the specific product and pack sizeMust match the Product Master Data already on file with EMVO for that market
Serial numberRandomized, unique to this physical packNot sequential — must resist being guessed or regenerated
Batch/lot numberManufacturing batch identifierSame batch discipline as domestic CDSCO requirements, reused rather than duplicated
Expiry dateFormat standardized across all EU marketsMust match the human-readable expiry printed elsewhere on pack
National Reimbursement NumberRequired by some but not all EU marketsVaries by destination country — this is where multi-market SKUs get complicated

Who Actually Touches EMVO — It's Usually Not the Factory

This is the point most guides for Indian manufacturers skip, and it's the one that matters most operationally. EU FMD obligations attach to the Marketing Authorisation Holder (MAH) — the entity legally placing the product on a given EU market — not to the physical manufacturing site. For an Indian company, the MAH is typically an EU-based affiliate, a licensed importer, or a distribution partner, and it's that entity, not the Indian plant, that has the direct relationship with EMVO.

That doesn't make the Indian manufacturer's role passive. The MAH can only upload what the manufacturer gives it, so the actual serialization — generating the unique identifier, applying the ATD, and producing commissioning data at the moment of release — still happens on the Indian production line. What changes is who carries the legal and administrative relationship with the European verification system.

Indian exporters who treat EU FMD as "our EU distributor's problem" usually find out otherwise at the worst possible time — a shipment held at a European port because the serialization data the plant generated doesn't match what the distributor's Onboarding Partner expected. The compliance obligation sits with the MAH, but the data has to be right at the source, every time, or the MAH has nothing correct to upload. — Ratifye regulatory intelligence team

The EMVO Onboarding Path, Step by Step

Whichever entity in your chain carries the MAH relationship, the onboarding sequence with the European Medicines Verification Organisation follows the same shape.

1Engage an Onboarding Partner (OBP)
MAHs don't onboard with EMVO directly — they do it through an OBP, which signs the Participation Agreement on their behalf. MAHs that are all Original Pack Manufacturers (OPMs), or all Parallel Distributors, can usually share one OBP; a mix of the two typically needs separate OBPs for each category.
2Affiliate commitment and company setup
Each MAH the OBP represents signs a written commitment to be bound by the OBP's obligations. Company information and connection type are registered through the OBP Portal before any product data can move.
3Product Master Data upload
Before a single serial number can be uploaded, the product itself — GTIN, market, pack configuration — has to exist in the system as Product Master Data, following EMVO's Master Data Guide and each destination country's specific coding rules.
4Serial data upload before release
Once Product Master Data is in place, serial numbers for released packs are uploaded to the EMVS hub, which routes them to the correct National Medicines Verification System (NMVS) for the destination market, before the consignment leaves for distribution.
5Retrospective and multi-market handling
A single SKU sold into several EU markets with different national coding requirements isn't a one-time setup — it typically uses a Retrospective Upload process to reconcile data across markets, which is where manual, spreadsheet-driven serialization processes tend to break down fastest.

The Decommissioning Chain

A unique identifier isn't verified once and forgotten — it moves through a defined set of states from commissioning at the factory to final decommissioning, and each handoff point in the EU distribution chain has a different role to play.

Dispensing
Pharmacies and hospitals decommission at the point of supply to a patient. This is the final, authoritative check — the pack's unique identifier is verified against the NMVS and then marked as dispensed, closing the loop that started at your plant.
Wholesale
Wholesalers perform risk-based verification, not blanket decommissioning. Specific trigger points — returns, products from brokers, or other elevated-risk handling — require a verification check, rather than every pack being scanned at every wholesale touchpoint.
Export
A pack leaving the EU/EEA again is handled through its own status code rather than being treated as a normal dispensing event. Getting this status wrong is a common source of mismatched records for Indian manufacturers managing re-export or multi-region distribution through a European hub.
Destruction
Write-offs and destroyed stock are decommissioned with a specific reason code, not simply removed from inventory — the NMVS record has to reflect why the pack left circulation, which matters for the audit trail if questions arise later.
Where This Catches Indian Exporters Off Guard

Country-specific coding isn't optional detail. The National Reimbursement Number and other market-specific data elements genuinely vary by destination country, and Product Master Data has to reflect that per market, not just per product.

Onboarding fees scale with how many MAHs an OBP represents, and have been raised in stages industry-wide — worth confirming current terms directly with your OBP rather than budgeting off older figures.

Upload timing matters. Serial data has to reach the EMVS hub before release to market, and troubleshooting guidance from national verification organisations generally expects any data discrepancy to be flagged within 24 hours — which is a tight window if your serialization data is being reconciled manually after the fact rather than generated correctly at commissioning.

What Happens When a Pack Fails Verification

A failed verification — a scanned unique identifier that doesn't match what's on file, or a pack already marked as decommissioned somewhere else in the chain — doesn't quietly resolve itself. It triggers an alert within the national verification system, and the pack is treated as suspect until investigated, which in practice means it's pulled from the supply chain rather than dispensed while the discrepancy is checked.

For an Indian manufacturer, the two most common real-world causes of this aren't counterfeiting at all — they're process errors upstream. The first is a serial number uploaded to the wrong national system, which happens when a multi-market SKU's Retrospective Upload routing doesn't correctly separate destination countries. The second is a timing gap: stock released and shipped before its serial data finished propagating through the EMVS hub to the relevant NMVS, so the first verification attempt at the EU end finds nothing on file yet. Neither is a safety issue, but both create exactly the kind of shipment-held-at-port scenario that an EU FMD guide for Indian exporters needs to address directly, because they're avoidable with the right sequencing — serialize, upload, confirm propagation, then release — rather than treating the regulatory upload as a parallel paperwork step.

A Note on the UK and Northern Ireland

Indian manufacturers who built their EU FMD compliance process before 2021 should double-check it against current UK arrangements specifically, because this is an area that changed after the original rollout and still trips up exporters working from older documentation. Great Britain left the EU's verification system following its EU exit and the UK now runs its own medicines verification requirements, separate from EMVO and the EU hub. Northern Ireland, under the Windsor Framework, has followed a different path from Great Britain on medicines regulation. The practical takeaway: a serialization setup validated for "the EU" cannot be assumed to cover UK-bound shipments without a separate check, and Indian exporters shipping into both markets need to confirm which specific national system each destination actually requires — treating "Europe" as one compliance zone is exactly the kind of assumption that produces a held shipment.

How Ratifye Fits Into This Chain

The common failure pattern across every step above is the same one: serialization data generated separately from the actual commissioning event, then reconciled, cleaned, or corrected before it can be uploaded. That gap is where mismatches, missed country-specific fields, and late uploads all originate.

Commission Once
Generate the unique identifier at the point of production, with the correct data elements for each destination market built in from commissioning — not assembled afterward from separate systems.
Feed Forward
Structure serialization output so it's ready for your MAH's OBP to upload, aligned to EMVO's Product Master Data and country-coding requirements rather than needing manual reformatting before every shipment.
Track State
Maintain the commissioning record through export, so if a status mismatch does surface at the EU end, there's a clear internal record of what was generated, when, and for which market — rather than a reconstruction exercise under shipment-delay pressure.

None of this replaces the legal relationship between your MAH and EMVO, or the OBP's role in that process. What it removes is the operational gap between what your production line generates and what your EU-side partner needs to upload correctly and on time — which is where most of the real-world EU FMD problems Indian exporters run into actually originate.

That same commissioning event, done once and done correctly, is also the foundation for CDSCO's domestic Top 300 QR requirement and DSCSA data for US-bound stock — the three regimes ask for overlapping but not identical data, and a manufacturer generating it three separate times, in three separate workflows, is tripling the chances of exactly the kind of mismatch that gets a shipment held. One commissioning event, structured to satisfy all three from the start, is the difference between regulatory compliance as a recurring fire drill and regulatory compliance as a byproduct of how production already runs.

Take Action

Your EU shipments depend on serialization data someone else has to upload correctly. Make sure it's right at the source.

Ratifye generates commissioning-ready, market-specific serialization data at the point of production — built to move cleanly into your MAH's EMVO onboarding, not reconciled after the fact.

Talk to our pharma compliance team
Sources: Delegated Regulation (EU) 2016/161 and Directive 2011/62/EU on safety features; European Medicines Verification Organisation (EMVO) onboarding and Onboarding Partner (OBP) guidance, including Finnish Medicines Verification Cooperative (FiMVO) published FAQs; industry reporting on EMVO on-boarding fee structures. Figures and process descriptions are the most recent publicly available guidance at time of writing and are cited for directional reference; consult EMVO's own current onboarding documentation and legal/regulatory counsel before relying on them for a specific compliance decision.