The DSCSA compliance checklist for an independent pharmacy in 2026

A DSCSA checklist is worth exactly as much as the date it was written on. The law moved three times after most of the free ones were published: transaction history stopped being a requirement on 27 November 2023, the small-business-dispenser exemption arrived in 2024, and FDA extended that exemption on 6 August 2026. A checklist written before any of that will still walk a pharmacy carefully through obligations that changed shape years ago, and will not mention the one date the owner actually needs.

This page does two things. It names the free checklists an independent pharmacy can download today, quotes each from its own document with the date it was retrieved, and says plainly what each covers and where it stops. Then it sets out the items that belong on a checklist written in 2026, each one quoted from the FDA letter that created it.

The free DSCSA checklists, side by side

Four are available at no cost to a pharmacy. They are not equivalent, and the difference between them is almost entirely a difference of date.

Why the most widely linked free checklist is the 2019 edition

NCPA is the National Community Pharmacists Association, the trade body for independent pharmacy, and its DSCSA Pharmacy Checklist is the document a search for “DSCSA compliance checklist” most reliably returns. It is a serious piece of work and it is honest about what it is. Its own first footnote says it “is a general overview of the current requirements for dispensers pursuant to the DSCSA and is largely based on the FDA’s Pharmacists Webinar,” and adds: “However, it should be noted that the FDA continues to release industry guidance in this space.”

FDA did continue. Retrieved on 27 August 2026, the file is three pages, was last modified on 7 January 2020, and contains zero occurrences of “2023”, “2026”, “2027”, “small business”, “25 or fewer”, “interoperab”, “EPCIS”, “serializ” or “enhanced drug distribution”. Its section 4 opens “are you on the lookout for product identifiers in your pharmacy in 2020?” The three times it uses the word “exemption” are all the generic statutory phrase “waiver, exception, or exemption under the law”, none of them is the small-business-dispenser exemption, which did not exist when the document was finalised.

That is not a criticism of NCPA, which has covered every one of these developments in its newsroom since. It is a caution about the artefact: a PDF does not carry a banner saying it has been overtaken, so a checklist downloaded in 2026 and worked through carefully can leave an owner confident about a set of obligations that is missing the only deadline in front of them. Check the date on any checklist before you work through it, including this one, the “last verified” line at the top of this page is there for that.

One item in it has aged perfectly, and it is the item most pharmacies get wrong. Under “Store”, the checklist notes: “your wholesaler may hold your tracing data, but it is your responsibility to ensure this relationship complies with the DSCSA requirements.” That was true in 2019 and it is true now, see does my wholesaler handle DSCSA for my pharmacy.

What belongs on a DSCSA checklist written in 2026

These are the items a small-dispenser checklist needs this year, each quoted from the FDA letter that created it. They are ordered by the date they fall due, not by importance.

Confirm which side of the 25-employee line you are on

The exemption belongs to a pharmacy only if, in FDA’s words, “the corporate entity that owns the dispenser has a total of 25 or fewer full-time employees licensed as pharmacists or qualified as pharmacy technicians.” It is counted at the owning corporate entity, not per store, so a two-store owner counts both. FDA adopts the IRS definition of a full-time employee: “an employee employed on average at least 30 hours of service per week, or 130 hours of service per month.” Relief for dispensers at 26 or more full-time employees ran only until 27 November 2025 and has already lapsed.

Decide about the assessment survey by 22 September 2026

“FDA encourages small dispensers to complete the small dispensers assessment survey by September 22, 2026. Small dispensers may designate a separate entity (e.g., consultants) to complete this survey on their behalf.” It is encouraged rather than required, and it is the nearest real date this buyer faces. It exists because the section 582(g)(3) assessment is the unfinished work that produced the extension in the first place.

Take the headcount on 27 November 2026

The extension year is decided by the headcount on the day the previous exemption ends: “The total number of employees as of November 27, 2026.” This is the item most likely to be missing from any checklist, because it is not a deadline to do something, it is a date on which a fact about your pharmacy is measured. A hire made between now and then can move a pharmacy across the line. What actually changes on 27 November 2026 takes both dates apart.

Keep the obligations the exemption never covered

The exemption covers the six lettered requirements of §582(g)(1) plus one narrow verification step under §582(d)(4). Everything else in §582 ran throughout, which is how a pharmacy holds the exemption and is still short of the record. The letter is explicit that small business dispensers “are still obligated to meet” the preserved verification duties. What the exemption never covered sets out the line in the letter’s own wording.

Be able to respond to a request within two business days

The response duty stays with the dispenser. FDA’s language throughout is “systems and processes”, the phrase appears six times in the exemption letter, while the words “software” and “vendor” appear zero times in it. A binder and a filing habit satisfy the wording; so does a platform. The letter does not require either.

Do not read the extension as a year off

The letter closes on this and it is worth quoting in full, because it is the sentence a checklist most often omits: “The exemptions described in this notification are not intended to provide, and should not be viewed as providing, a justification for delaying efforts by small business dispensers to implement the enhanced drug distribution security requirements under section 582(g)(1) of the FD&C Act.”

What a checklist cannot do, including this one

Every checklist on this page, NCPA’s, DispenserEDU’s, Advasur’s and the one above, tells a pharmacy what to have. None of them is the thing itself. An inspector asking for your suspect-product SOP is not asking whether you know one is required; the checklist has already done its whole job by then. Advasur puts this better than we would, in its own marketing: “A good DSCSA checklist should not just help a pharmacy say the work was done. It should help the pharmacy show the work was done.”

That gap is what DoseTrace sells, and it is a narrow product: a readiness binder with the policies, SOPs and dated records written out for your pharmacy, $99 flat, once. If you have the time to write those documents yourself, the checklist above is a complete specification for doing so and costs nothing, that is a real option and we would rather say so. What DSCSA compliance actually costs an independent pharmacy sets every published price beside what it buys, and who can prepare DSCSA documentation for your pharmacy names the six kinds of supplier who will write them for you.

Check which track you are on, free, about a minute, and it stores nothing. Contact reaches a person.

The NCPA checklist is quoted from ncpa.org/sites/default/files/pdf/dscsa-checklist.pdf, retrieved 27 August 2026 (HTTP 200, 122,657 bytes, 3 pages, PDF modification date 7 January 2020); the term counts above were taken from that file on that date. NCPA is an independent trade association with no relationship to DoseTrace, it has covered the 2023, 2024 and 2026 developments in its own newsroom, and its site is the authority on its own materials, if something here disagrees with theirs, theirs is correct and we want to know. The 27 November 2027 expiry, the 25-employee threshold, the IRS full-time-employee definition, the 22 September 2026 survey date, the 27 November 2026 headcount date, the scope of the exemption and the closing paragraph on delay are quoted from the FDA document DSCSA Exemptions from Certain Requirements Under Section 582 of the FD&C Act for Small Business Dispensers Until November 27, 2027, issued 6 August 2026, last re-verified against the source document on 20 August 2026. DispenserEDU and Advasur are quoted from their own sites as retrieved on 7 August 2026. DoseTrace is not affiliated with NCPA, DispenserEDU or any of the associations behind it, is not a law firm, and nothing on this page is legal advice.