GS1 DataMatrix Pharma Serialization

Overview

GS1 DataMatrix Pharma Serialization is a data-format application, not a separate symbology. It is the use of the gs1-datamatrix carrier — the ECC 200 variant of data-matrix with a leading FNC1, carrying GS1 Application Identifier (AI) element strings — to mark each individual prescription-medicine pack with a unique identifier (UI) for anti-counterfeiting and traceability [2, 3]. Two major regulatory regimes drive it: the EU Falsified Medicines Directive (FMD) and the US Drug Supply Chain Security Act (DSCSA) [1, 3].

The format is the same wherever it is applied: a single GS1 DataMatrix on the outer carton encodes four data elements — GTIN (AI 01), serial number (AI 21), batch/lot (AI 10), and expiry date (AI 17) — so that each saleable pack carries a globally unique, machine-readable identity that can be verified at the point of dispense [1, 3]. This is not a new code: it is the standard gs1-datamatrix profile applied to a regulated use case, with the same ISO/IEC 16022 ECC 200 encoding and FNC1 marker as any other GS1 DataMatrix [2].

History

EU Falsified Medicines Directive. The framework was established by Directive 2011/62/EU (the FMD), which amended Directive 2001/83/EC to require two safety features on prescription medicine packs: a machine-readable unique identifier and an anti-tampering device [1]. The technical detail was set by Commission Delegated Regulation (EU) 2016/161, which became applicable on 9 February 2019 across the EU/EEA, mandating the GS1 DataMatrix carrier and the data elements of the unique identifier [1, 3].

US DSCSA. The Drug Supply Chain Security Act was enacted in 2013 as Title II of the Drug Quality and Security Act, building toward unit-level serialization and electronic, interoperable traceability across the US drug supply chain [3]. Unit-level requirements were originally targeted for 2023, but the FDA granted a stabilization period, with enforcement phased through 2025: manufacturers and repackagers by 27 May 2025, wholesale distributors by 27 August 2025, and dispensers by 27 November 2025 [3].

Technical specification

Carrier. The data carrier is a GS1 DataMatrix — ISO/IEC 16022 ECC 200 with a GS1 FNC1 in the first position to flag that the content is GS1 AI element strings, printed on the outer packaging with a human-readable text mirror of the data [2, 3]. See gs1-datamatrix and data-matrix for the underlying symbology.

Encoded data elements. The unique identifier comprises four AI fields [1, 3]:

AI	Element	Notes
01	GTIN	Product code (the marketing/identification number)
21	Serial number	Randomized, unique per individual pack
10	Batch / lot number	Manufacturing batch identifier
17	Expiry date	Date format YYMMDD

Under EU FMD, a national reimbursement / identification number may additionally be required by some member states [1, 3]. The corresponding element string is of the form (01)…(21)…(10)…(17)…, encoded in the DataMatrix with FNC1 separators between variable-length fields [2, 3].

EU verification model. Each pack is checked against a repository system: the European Medicines Verification System (EMVS) federated with National Medicines Verification Systems (NMVS) [1, 3]. At dispensing, the pharmacy scans the code, the system verifies authenticity, and the unique identifier is decommissioned so the serial cannot be reused by counterfeiters — Regulation (EU) 2016/161 requires "verification and subsequent decommissioning of the unique identifier of every supplied pack" [1].

US verification model. DSCSA does not prescribe a single barcode type but requires a serialized product identifier encoding at minimum the NDC (or equivalent standardized drug code), a randomized serial number, lot number, and expiration date; in practice this is carried in a GS1 DataMatrix (the GTIN being derived from the NDC) [3]. DSCSA emphasizes electronic, interoperable data exchange between trading partners via EPCIS (Electronic Product Code Information Services) messages, rather than mandatory pharmacy-level verification at every dispense [3].

Use cases

• Anti-counterfeiting / authentication. The per-pack serial lets the supply chain detect falsified or duplicated packs at the point of dispense (EU FMD) [1, 3].
• Pharmacy dispensing. Scanning the GS1 DataMatrix verifies and decommissions the pack at the till in EU pharmacies [1].
• Traceability and recalls. GTIN + batch + serial enable recall and provenance actions at item or lot granularity across the supply chain [3, 4].
• Expiry management. The embedded expiry (AI 17) supports automated checks against dispensing expired stock [3].

Comparison

EU FMD vs US DSCSA. Both regimes require the same four core data elements (GTIN/NDC, serial, lot, expiry) and converge on the GS1 DataMatrix as carrier, but their architectures differ. EU FMD centres on point-of-dispense verification against centralized NMVS/EMVS repositories with mandatory decommissioning; DSCSA centres on transactional electronic data exchange (EPCIS) between trading partners and does not require pharmacy-level scanning of every pack — making the two complementary but structurally distinct [3].

GS1 DataMatrix vs GS1-128 for pharma. Some DSCSA logistics use cases use gs1-128 with SSCCs at the case/pallet level, but unit-level pack marking uses GS1 DataMatrix because the 2D matrix fits the four-AI unique identifier onto a small carton face where a linear symbol could not [2, 3].

Pharma DataMatrix vs retail Sunrise 2027. Healthcare serialization mandated GS1 DataMatrix at the item level years before retail's 2D transition; it is, in effect, the precedent the broader gs1-sunrise-2027 retail program now follows, though retail additionally permits a gs1-qr-code carrying gs1-digital-link URI syntax [2].

Status

GS1 DataMatrix pharma serialization is fully in force. EU FMD has been mandatory since 9 February 2019, with the EMVS connecting thousands of marketing-authorisation holders, wholesalers, and tens of thousands of pharmacies across the EU/EEA [1]. US DSCSA unit-level serialization and interoperable traceability moved into enforcement through 2025 (manufacturers May 2025, wholesalers August 2025, dispensers November 2025) [3]. More broadly, serialization on the GS1 DataMatrix model is mandated in dozens of countries worldwide [3].

Sources

1 FMD Explained: A Guide to Pharma Serialization & Barcodes — IntuitionLabs 2 GS1 DataMatrix — GS1 Standards — GS1 3 DSCSA vs. EU FMD: A Pharma Serialization & Traceability Guide — IntuitionLabs 4 Why GS1 Standards Are Transforming Healthcare Supply Chains — Dynamsoft

Deployments

No country reports mention this standard by name.

Regions / aggregations not mapped to a single country

• Universal