Historical Analysis

The History and Evolution of Pharma Traceability

Four decades of crisis, legislation, and standardisation shaped today's serialisation systems. Follow the line from the 1985 WHO bulletin to the data-monetisation era of the late 2020s.

Last updated 25 Jun 2026 10 min read 1,850 words
PRE-SERIALIZATION TRIGGER EVENTS FIRST MANDATES DSCSA & FMD ERA MATURATION 85 WHO counterfeit guidance First framing as a public health issue 03 Lipitor counterfeit case Florida enacts first state pedigree law 08 Heparin contamination, 81 deaths API-level supply chain risk exposed 10 Turkey ITS launches World's first nationwide system 13 US DSCSA signed 10-year phased implementation begins 19 EU FMD enforcement, Russia launches Two architectures diverge globally 23 DSCSA unit-level deadline Era of data monetisation begins Forty years, six eras 1985 2003 2007-08 2010 2013 2019 2023+

The history of pharmaceutical traceability spans roughly four decades, beginning with isolated anti-counterfeiting measures in the 1980s and evolving into the comprehensive serialization and track and trace systems that govern more than 60 countries today. The trajectory has been driven by three recurring forces: catastrophic counterfeit incidents that triggered legislative response, the globalization of pharmaceutical supply chains that expanded the surface area for fraud, and the maturation of barcoding and digital infrastructure that made item-level identification commercially viable. The result is the most heavily regulated traceability ecosystem in any industry.

01The Pre-Serialization Era (1980s to early 1990s)

In the 1980s, pharmaceutical traceability did not exist as a discipline. Drug identification operated at the batch level, with manufacturers maintaining batch records sufficient to support recalls but no item-level visibility. Counterfeiting was understood as a problem in developing markets, particularly across parts of Africa and Asia, but was not yet treated as a systemic threat in regulated economies.

The infrastructure of the era reflected this assumption. Drug packaging carried lot numbers and expiry dates printed in human-readable text. Wholesalers tracked inventory by batch quantity rather than individual unit. Pharmacies dispensed without verification beyond visual inspection of the pack. The entire system depended on the integrity of trading partners and the relative difficulty of producing convincing counterfeit packaging.

Two developments in this period planted seeds for what would later become serialization. First, the Uniform Code Council and EAN International (which later merged to form GS1) standardized linear barcoding for retail products, establishing the technical foundation for machine-readable identifiers. Second, the World Health Organization issued its first formal guidance on counterfeit medicines in 1985, framing the issue as a public health concern rather than purely a commercial one.

02Early Anti-Counterfeiting Measures (1990s)

The 1990s saw the first deliberate, if largely tactical, anti-counterfeiting measures in pharmaceutical packaging. Holographic seals, color-shifting inks, micro-printing, and tamper-evident closures became standard features for high-value products. These were physical security measures, not data systems, and they relied on the difficulty of replication rather than the verifiability of digital identifiers.

The limitations became apparent quickly. Counterfeiters proved capable of replicating most physical security features within months of introduction. The industry began discussing what would later be called pharmaceutical serialization, the idea of assigning each pack a unique digital identity, but the supporting infrastructure (line-level printing technology, database systems, regulatory frameworks) was not yet mature.

A formative development in this period was the establishment of the Pharmaceutical Security Institute in 2002, an industry body that began documenting counterfeit incidents systematically. Its annual reports provided the empirical evidence that regulators would later cite when drafting serialization legislation.

03The Trigger Events That Shaped Policy (2000 to 2008)

The push toward mandatory serialization was crystallized by a sequence of high-profile incidents that exposed the inadequacy of batch-level controls.

Four incidents that made batch-level control untenable 2003 LIPITOR United States Counterfeit Lipitor enters US wholesale Pfizer cholesterol drug in legitimate chain Policy effect Florida enacts the first US state pedigree law 2007-08 HEPARIN US, China API Counterfeit API enters legitimate product 81+ patient deaths in the United States Policy effect API-tier supply chain elevated to top concern 2012 AVASTIN United States Counterfeit Avastin distributed to clinics Roche cancer drug reaching patient care Policy effect Reinforced case for unit-level verification 2000s ANTIMALARIALS Sub-Saharan Africa Persistent counterfeit circulation documented WHO field studies across the decade Policy effect Pressure for global standardisation Each event added political weight to legislative proposals that had been circulating but stalling
Figure 1. The four counterfeit incidents that translated abstract policy concern into legislative momentum, between 2003 and the early 2010s.

Each of these incidents added political weight to legislative proposals that had been circulating but stalling. The Lipitor case demonstrated that even leading branded medicines could be infiltrated. The Heparin contamination proved that the threat was not limited to counterfeit finished products but extended to API sourcing and supply chain integrity at every tier. The Avastin incident showed that counterfeit oncology drugs were reaching patients in regulated markets. And sub-Saharan African antimalarial cases established that the global burden was concentrated in markets with weak regulatory infrastructure.

04The First Mandates (2008 to 2013)

The first wave of mandatory pharmaceutical serialization arrived between 2008 and 2013, with several jurisdictions independently arriving at similar conclusions.

2010, Turkey

Turkey's ITS: world's first nationwide system

Turkey's ITS, the world's first nationwide system (Ilac Takip Sistemi) launched in 2010. Turkey's choice to lead, despite not being among the largest pharmaceutical markets, was driven by acute counterfeit and reimbursement fraud problems. ITS became an influential reference model for other emerging-market regulators.

Late 2000s, EU pilots

Belgium and Greece pilots

Belgium and Greece piloted serialization-based verification systems in the late 2000s that would later inform the design of the EU Falsified Medicines Directive.

Mid-2000s, California

California's e-Pedigree law

Repeatedly delayed and ultimately superseded by federal legislation, California's e-pedigree law set the policy template that DSCSA would eventually adopt at the national level in the United States.

2011, India

India's export serialization

The Directorate General of Foreign Trade introduced serialization requirements for exported pharmaceuticals in 2011, making India one of the earliest large markets to mandate serialization, though initially only for exports.

This period also saw the establishment of GS1 Healthcare as a global coordinating body, providing the standards infrastructure that would allow national mandates to converge on common technical specifications rather than diverging into incompatible national systems.

05The DSCSA and FMD Era (2013 to 2019)

The mid-2010s saw the two most consequential pieces of pharmaceutical traceability legislation in history pass within two years of each other.

The US Drug Supply Chain Security Act (DSCSA) was signed into law in November 2013 as part of the Drug Quality and Security Act. DSCSA established a ten-year phased implementation, beginning with lot-level traceability and culminating in unit-level interoperable electronic tracing by November 2023. The legislation pre-empted the patchwork of state pedigree laws that had been developing, establishing a single federal framework.

The EU Falsified Medicines Directive (FMD), formally Directive 2011/62/EU, entered into force in 2013 with a phased implementation that culminated in mandatory verification at the point of dispense from February 2019. The FMD established the European Medicines Verification System (EMVS), a network of national repositories connected through a central EU Hub.

The two frameworks took fundamentally different architectural approaches.

Two architectures, two philosophies US DSCSA: FULL CHAIN TRACK & TRACE Manufacturer Wholesaler Repackager Dispenser TI/TH/TS TI/TH/TS TI/TH/TS Event exchange at every handoff Each trading partner exchanges Transaction Information, History, and Statement (TI/TH/TS). Forward and backward visibility Full chain is reconstructable from any point. Unit-level interoperable tracing Required from November 2023. EU FMD: END-POINT VERIFICATION Manufacturer Pharmacy EMVS EU Hub commission verify No tracking between handoffs Intermediate custody is not recorded. Verification only at dispense Pharmacist scans, hub confirms authenticity and decommissions the identifier. Aggregation not legally required Operational rather than statutory.
Figure 2. DSCSA records custody at every handoff; FMD verifies only at the point of dispense. The architectural divergence has shaped every subsequent national implementation.

DSCSA chose full chain track and trace with peer-to-peer EPCIS exchange between trading partners. FMD chose end-point verification, where packs are commissioned by manufacturers and verified at dispense, without tracking each intermediate handoff. The architectural divergence between DSCSA and FMD has shaped every subsequent national implementation, with each new regulator choosing between, or hybridizing, the two models.

06Global Expansion and Fragmentation (2019 to 2024)

The five years following FMD enforcement saw an explosion of national serialization mandates, each adapted to local political, technical, and commercial conditions.

Russia's Chestny ZNAK (2019)

Russia's Chestny ZNAK system launched as the most demanding traceability system globally, requiring cryptographic codes, full aggregation, and real-time reporting to a state-operated platform.

Saudi Arabia's SFDA RSD (2017 to 2019)

Entered force in 2017 and was significantly expanded in 2019, requiring full aggregation and event reporting.

India's iVEDA

India's system, focused initially on exports, expanded toward domestic serialization throughout this period, though full domestic mandatory implementation remained subject to repeated extensions.

Brazil's SNCM (2022)

Under ANVISA, after years of delay, Brazil began phased enforcement in 2022.

UAE's Tatmeen (2021)

The UAE platform launched in 2021, becoming a model for Gulf cooperation in pharmaceutical traceability.

South Korea, Argentina, Egypt, Indonesia, Pakistan, Nigeria, and Kazakhstan, among others, all introduced or expanded serialization requirements during this period. The result was a fragmented global compliance landscape. A multinational pharmaceutical manufacturer in 2024 typically had to comply with 15 to 25 distinct national systems, each with its own data structure, reporting platform, and operational requirements.

07The Current Landscape (2024 onward)

By 2024, the focus of pharmaceutical traceability shifted from greenfield implementation to operational maturation. The major developments of this period have centered on stabilization, harmonization pressure, and the emergence of traceability as a data asset rather than a compliance obligation.

DSCSA stabilization period

The FDA exercised enforcement discretion through November 2024 to allow trading partners to complete the transition to full unit-level interoperable tracing. The stabilization period was extended multiple times as smaller dispensers and wholesalers worked through readiness gaps.

EPCIS 2.0 adoption

The 2022 ratification of EPCIS 2.0 introduced JSON support and modern API-friendly data structures, accelerating adoption among technology-forward trading partners while creating migration challenges for those running on EPCIS 1.2.

Harmonization initiatives

Industry groups including GS1, the Pharmaceutical Distribution Security Alliance, and the International Federation of Pharmaceutical Manufacturers and Associations have advocated for greater alignment between national systems, with limited but increasing success.

Data monetization

Manufacturers have begun extracting commercial value from serialization data through market intelligence, demand sensing, recall precision, and patient engagement applications, shifting the internal business case for serialization from defensive compliance to offensive capability.

AI and analytics integration

Anomaly detection algorithms operating on serialization event streams have moved from pilots to production deployments, particularly for diversion detection and counterfeit pattern identification.

08Lessons From Forty Years of Evolution

The four-decade arc of pharmaceutical traceability offers several durable lessons that continue to shape current policy and implementation decisions.

01

Crises drive legislation, not foresight

Every major regulatory milestone was preceded by a documented counterfeit incident. The industry has rarely moved ahead of regulators voluntarily.

02

Standards matter more than mandates

Countries that adopted GS1 standards achieved smoother implementations. Proprietary national systems faced higher costs and longer timelines.

03

Phased implementation is universal

Every major traceability regulation has been implemented in phases over five to ten years. Single-step mandates have invariably been deferred.

04

Aggregation is operationally inevitable

Even where not legally required, the economics of large-scale logistics push trading partners toward full aggregation as a contractual norm.

05

The compliance burden is asymmetric

Manufacturers bear most of the implementation cost, but verification benefits accrue at the dispensing end, creating persistent political tension.

06

National fragmentation is the steady state

Despite repeated calls for harmonisation, regulators retain sovereignty over their pharmaceutical supply chains. Manufacturers absorb the cost.

09Where the Industry Goes Next

The next phase of pharmaceutical traceability evolution is unlikely to produce a single transformative event of the kind that DSCSA or FMD represented. Instead, three slower but cumulatively significant trends are reshaping the field.

The data layer is becoming the strategic layer

Manufacturers that treated serialization as a compliance project in 2018 are increasingly treating their serialization data as a strategic asset in 2026, with dedicated data and analytics teams extracting commercial insight from event streams.

Cross-system interoperability is the new frontier

With most major markets now having functional serialization systems, the operational challenge is interoperability between them. Initiatives to define common data exchange formats and mutual recognition agreements are underway but progressing slowly.

Adjacent technologies are converging

Blockchain pilots have matured into selective production deployments, AI-driven analytics have become standard offerings from major serialization vendors, and IoT integration is beginning to extend traceability beyond identifier scanning into continuous environmental monitoring.

The fundamental architecture established between 2010 and 2020, unique identifiers on every pack, parent-child aggregation, event-based exchange, is likely to remain the foundation for the next decade. What evolves is what the industry builds on top of that foundation. For a forward look at how these adjacent technologies are reshaping the field, see the future of pharmaceutical traceability.

Frequently Asked Questions

Concise answers to the most common historical questions.

When did pharmaceutical serialization begin?
The first nationwide pharmaceutical serialization system, Turkey's ITS, launched in 2010. However, serialization concepts had been discussed since the late 1990s, and isolated state-level pedigree laws in the US predate national mandates.
What was the first major pharmaceutical track and trace law?
The first major nationwide pharmaceutical track and trace law was Turkey's ITS in 2010. The first major regional law was the EU Falsified Medicines Directive of 2011 (enforced 2019). The first major federal US law was the Drug Supply Chain Security Act of 2013.
Why did pharmaceutical serialization become mandatory?
Mandatory serialization was driven by a sequence of catastrophic counterfeit incidents, including the 2003 Lipitor case, the 2007 to 2008 heparin contamination, and persistent counterfeit antimalarial circulation in sub-Saharan Africa. These events made batch-level controls politically and operationally untenable.
How do DSCSA and FMD differ?
DSCSA, the US framework, requires full chain track and trace with peer-to-peer event exchange between trading partners. FMD, the EU framework, requires end-point verification at the point of dispense without tracking each intermediate handoff. The two represent fundamentally different traceability architectures.
What was the heparin contamination case?
The heparin contamination case of 2007 to 2008 killed at least 81 patients in the United States after counterfeit active pharmaceutical ingredient sourced from China entered legitimate finished product. The case became a landmark event in the political push for serialization.
Has pharmaceutical serialization reduced counterfeiting?
Pharmaceutical serialization has produced measurable reductions in counterfeit incidents in markets with mature implementations, including the EU and Turkey. The global impact is harder to quantify because many counterfeit markets operate outside the regulated supply chain that serialization governs.
Will pharmaceutical traceability become globally harmonized?
Full harmonization is unlikely in the foreseeable future because national regulators retain sovereignty over their pharmaceutical supply chains. Partial harmonization through common standards, mutual recognition, and interoperability initiatives is progressing but incrementally.

Authoritative References