EU FMD anti-counterfeit — verification at dispense?
EU Falsified Medicines Directive (FMD), in force 9 February 2019, requires two safety features on every prescription pack sold in EU/EEA:
- Unique identifier — 2D DataMatrix carrying GTIN + serial + batch + expiry, encoded per GS1 standards.
- Anti-tampering device — physical seal (sticker, glue, perforation) that visibly breaks if the pack is opened.
Verification at dispense is the regulatory pivot: the dispensing pharmacy scans the 2D code and decommissions the unique identifier in EMVS (European Medicines Verification System) before handing it to the patient. Magento integration is a Belgium / Italy / France pharmacy registering with their National Medicines Verification Organisation (NMVO — e.g. BeMVO, NSIS-IT, France-MVS), getting EMVS API credentials, and Magento fires a verify + decommission call as part of the order-fulfillment flow.
Architecture:
- Magento custom step: at "shipped" event, pack is scanned (handheld 2D scanner at pack station), code captured, EMVS API called — returns active / inactive / recalled / stolen.
- Active = decommission, ship. Inactive = quarantine pack, audit. Recalled / stolen = quarantine, NMVO notification, NCA (national competent authority) flag.
- Bulk decommission for multi-unit shipments via EMVS bulk API, handles up to 25,000 codes per batch.
Cost: NMVO connection fees vary €500–€15,000/yr by member state. EMVS API is rate-limited; design for retry + idempotency from day one. Brexit complication: UK left EMVS — UK now has its own verification scheme (SecurMed UK was wound down in 2021; UK currently has no live verification mandate, watch this space for 2025+ MHRA proposals).