Medicines: the old seal ends on 9 February 2027, the batch stays scattered across six systems
7 min read
A typical scenario, not our own case. A pharmaceutical wholesaler receives a report from a pharmacy about a pack whose unique identifier has already been deactivated elsewhere: suspected tampering. The pharmacist asks for the batch’s full traceability, from production to the shelf, and proof that the temperature stayed within the range stated on the data sheet throughout transport. The wholesaler’s quality office knows which packs from that batch left its warehouse that day. Neither party, alone, can say who last scanned that pack, or whether the van that carried it ever crossed the critical threshold.
The regulation Italy has already transposed, and the deadline that changes
Commission Delegated Regulation (EU) 2016/161 of 2 October 2015 — Official Journal L 32/1 of 9 February 2016 — supplements Directive 2001/83/EC with detailed rules on the safety features on medicine packaging: a unique identifier in a two-dimensional barcode, the DataMatrix, and an anti-tampering device. Article 4 sets out what the identifier must contain: a product code, a serial number (no more than twenty characters), a national reimbursement number — in Italy, the AIC —, the batch number and the expiry date. It applies from 9 February 2019 (Art. 50), but recital 44 notes that “Belgium, Greece and Italy already had systems in place for verifying the authenticity of medicinal products and identifying individual packs”: for these three states, Art. 50 pushes the deadline for applying Articles 1-48 to 9 February 2025.
Italy transposed the regulation with Legislative Decree No. 10 of 6 February 2025 (Official Gazette No. 31 of 7 February 2025, in force from 8 February), which gradually replaces the State Mint’s pharmaceutical seal (Art. 5-bis of Legislative Decree 540/1992) with the DataMatrix. Article 13(4) opens a transition: “From 9 February 2025 to 8 February 2027 a stabilisation period is provided for the operations of application and activation, verification, deactivation and reactivation of the unique identifier.” Until then, paragraph 6, the identifier may be replaced by the old seal: whoever still holds stock bearing it can sell it through without halting production. From 9 February 2027 that substitution ends and the Article 10 penalties become fully applicable again (Art. 13(9)): €10,000-€60,000 per batch for failing to apply or activate the identifier (paragraph 1) or placing products on the market without the anti-tampering device (paragraph 3); €15,000-€80,000 for failing to verify authenticity (paragraph 5); €20,000-€80,000 for distributing with the identifier deactivated outside the permitted cases (paragraph 6) or failing a required deactivation (paragraph 7); up to €30,000-€140,000 for unlawfully reactivating an identifier (paragraph 8).
Where the data actually sits
The decree does not hand traceability to a single system: it spreads it across at least six, and none of them today talks to all the others. The manufacturer generates and activates the identifier on the packaging line (Art. 7(1)). The national repository — Art. 9, run by a non-profit body that draws, by agreement, on the company set up under the law founding the State Mint and Polygraphic Institute (Law 559/1966) — receives every activation and deactivation, not the transport temperature or the reimbursement status. The central database — heir to the old seal system, renamed “central database” by Article 12 — collects from manufacturers, depositors and distributors the product code, pack numbers, destination and value charged to the National Health Service. The National Health Card System (Art. 50, Decree-Law 269/2003) must be adapted to record the identifier when dispensing against an electronic prescription. Pharmacy and hospital systems in the healthcare sector scan the pack. Wholesalers verify and, where the distribution contract requires it, deactivate the identifier along the chain (Art. 7(3), (5) and (6)). Outside this list sit the cold-chain data loggers: they record temperature and pass it to none of the systems above — the same pattern already told for packaging and for supply-chain due diligence: the data is not missing, it is spread among parties with no reason to talk to one another.
The one piece of data no corporate system holds in full
How disconnected these systems are is measured, with stated method and limits, by Osservatorio GIMBE Report No. 4/2026, Standardising and digitising procurement processes in healthcare facilities, produced with GS1 Italy’s support on 79 completed questionnaires from 17 regions and autonomous provinces (declared margin of error ±9.5%). 29.1% of facilities use no barcode-reading system; 74.7% have no automated or robotised warehouses. Integration between warehouse management and the electronic health record is entirely absent in 41.8% of cases, planned but inactive in 31.6%, partial in 21.5%: complete only in 5.1%. On the DataMatrix, 87.3% say they still have no operational guidance for adapting; 6.3% have updated readers or started arrangements with suppliers; 2.5% have already trained staff.
The same report cross-checks the state of the decree’s implementing measures: of nine required, five had been adopted and four had not, as of 8 June 2026 — among the missing ones, the decree setting out how the national repository interfaces with pharmacies and distributors for deactivation (Art. 7(2)), and the one adapting the central database (Art. 12). As with the battery passport, the file that proves compliance is often born outside the company that must produce it: here, inside a repository run by a third party. Even the pieces meant to bring order are not all in place yet — and we do not know if they are today: we have not re-checked a primary source since the report’s reference date.
If tomorrow AIFA or the NAS asked you to reconstruct a batch’s complete path — production line to patient, temperature included — how many systems would you need to enter, and how long before you were certain you had found every scan?
See the service · Talk to an engineer
Where we stop
We give no legal advice on who falls within the unique-identifier obligation: it depends on the reimbursement class and Annexes I and II of the regulation, which the Ministry of Health, with AIFA, can extend by its own measure. The penalties cited are read in full in Article 10, applicable from 9 February 2027 (Art. 13(9)): we make no assumptions about others we have not verified. The GIMBE data is current, by the authors’ own statement, to 8 June 2026: we have not re-checked whether the missing decrees have since been adopted, nor whether the 79-facility sample — non-probabilistic, the authors state — is representative of the country. The opening scenario is a typical model, stated as such: we do not describe how any specific wholesaler, pharmacy or facility actually operates.
The two axes, applied
Complying. The traceability the regulation demands — identifier activated, verified, deactivated at the right point in the chain, temperature within range — becomes, in our system, a control that runs on the client’s documents and system logs: production, the national repository where accessible, warehouse management, transport data loggers. An alert when a scan is missing or a temperature reading falls outside range, an exportable, dated file ready for an AIFA or NAS inspection — not an opinion that ends on paper.
Deciding. The same system brings production, warehousing, dispensing and cold-chain logistics together into a single operating model, on which AI agents execute decisions with a human operator in command: not just answering a traceability request when it lands, but flagging in advance the batch nearing expiry in a warehouse that is not yet automated, or the delivery that crossed the temperature threshold before reaching the pharmacy. For large pharmaceutical companies, distribution and healthcare, public and private. Always in two delivery modes: on-premises, on autonomous machines needing no deep integration into the client’s network, or dedicated cloud, with a dedicated VPN and a data centre in Italy — always with shared management.
From the first session, at no cost, comes the dated map of which traceability data is already available, which system holds it and who updates it — blank boxes included. It stays yours even if we do not go on together. Talk to one of our engineers.